Google SecOps Security Tokens

This document provides the service details for Google Security Operations security tokens, including eligibility, available Agentic AI features, and complimentary Security Tokens. For additional service specific terms, see SecOps Service Specific Terms.

What are Google SecOps Security Tokens

Google SecOps Security Tokens serve as the primary billing and metering unit for Google security agents. Customers subscribed to Enterprise, Enterprise Plus, and Google Unified Security (GUS) packages require Security Tokens to operate these agents. Given the non-deterministic nature of Agentic AI, the token consumed by a particular agent is calculated upon the successful completion of each agent execution.

The tokens needed depend on the agents you run. Each has their own average token consumption, but the true number comes from your environment.

If you only use the included tokens (for Enterprise Plus and GUS packages), when you run out of entitlement tokens, you won't be able to start new agents. However, any agents that have started run to completion.

If you have paid tokens, you start using them after you have consumed the included tokens. If you run out of this year's purchased tokens, you get an overage, unless you set a limit.

Eligibility for paid Security Tokens

Customers may purchase Google SecOps Security Tokens as an add-on offering for the following Google SecOps packages:

  • Enterprise
  • Enterprise Plus
  • Google Unified Security (GUS)

Agentic AI feature

The following Agentic AI feature is available for use with Google SecOps Security Tokens:

Triage and Investigation Agent (TIN)

Complimentary Security Tokens

Customers with the following qualifying Google SecOps subscriptions receive a daily allotment of complimentary Security Tokens:

  • Enterprise Plus

  • Google Unified Security (GUS)

The number of Complimentary Security Tokens you receive is determined by your Token Allotment Tier (which is based on the Annual Contract Value (ACV) of your underlying eligible Google SecOps package), according to the following:

Token Allotment Tier Annual Contract Value (ACV) Daily Token Allotment
Tier 1 Less than $1,000,000 USD 10,000,000
Tier 2 $1,000,000 - $5,000,000 USD 20,000,000
Tier 3 Greater than $5,000,000 USD 60,000,000

Important: Trial Period April 1 – June 30, 2026

From April 1, 2026 through June 30, 2026 a no-cost trial of the Triage and Investigation Agent will be available to all eligible customers. During this period, all eligible customers can use the agent at no charge, subject to the usage limits described in the Google Agentic SOC Trial Details, at https://docs.cloud.google.com/chronicle/docs/agentic-soc/trial.

If your organization purchases a paid subscription to Google SecOps Security Tokens with a start date prior to July 1, 2026, your paid subscription term begins on the date listed on your Order Form. However, consumption of purchased Security Tokens against your paid subscription won't begin until July 1, 2026.