![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

# Security

Documentation and resources for helping organizations secure their compute environments, protect data, and comply with regulations using Google Cloud products.
[Read documentation](https://docs.cloud.google.com/docs/security/overview/whitepaper)

## Explore Security in Google Cloud

Read documentation and Cloud Architecture Center articles about security products and procedures. [](https://docs.cloud.google.com/docs/security/overview/whitepaper)

### [Google Cloud security overview](https://docs.cloud.google.com/docs/security/overview/whitepaper)

Learn the physical, administrative, and technical controls we use to help protect your organization's data. [](https://docs.cloud.google.com/iam/docs/overview)

### [IAM overview](https://docs.cloud.google.com/iam/docs/overview)

Learn how IAM works in Google Cloud and how you can use it to manage access. [](https://docs.cloud.google.com/organization-policy/overview#how_organization_policy_works)

### [How organization policy works](https://docs.cloud.google.com/organization-policy/overview#how_organization_policy_works)

Learn what organization policies and constraints are. [](https://docs.cloud.google.com/docs/authentication)

### [Authentication methods](https://docs.cloud.google.com/docs/authentication)

Learn the key authentication methods and concepts to confirm a user's identity. [](https://docs.cloud.google.com/docs/security/infrastructure/design)

### [Infrastructure security design](https://docs.cloud.google.com/docs/security/infrastructure/design)

Learn how security is designed into Google's technical infrastructure. [](https://docs.cloud.google.com/docs/security/data-loss-prevention/revoking-user-access)

### [Revoke access to a project](https://docs.cloud.google.com/docs/security/data-loss-prevention/revoking-user-access)

Remove a user's access to a Google Cloud project. [](https://docs.cloud.google.com/architecture/security-foundations)

### [Enterprise foundations blueprint](https://docs.cloud.google.com/architecture/security-foundations)

Plan how to deploy a foundational set of resources in Google Cloud using best practices.[](https://docs.cloud.google.com/architecture/security-foundations)

## Training, blog articles, and more

Go to training courses, blog articles, and other related resources. [](https://www.cloudskillsboost.google/paths/15)

### [Security engineer learning path](https://www.cloudskillsboost.google/paths/15)

Study how to develop, implement, and monitor your organization's security infrastructure.[](https://www.cloudskillsboost.google/paths/15) [](https://cloud.withgoogle.com/cloudsecurity/podcast/)

### [Cloud Security Podcast](https://cloud.withgoogle.com/cloudsecurity/podcast/)

Listen to industry experts talk about some of the most interesting areas of cloud security.[](https://cloud.withgoogle.com/cloudsecurity/podcast/) [](https://cloud.google.com/blog/products/identity-security)

### [Cloud Security Blog](https://cloud.google.com/blog/products/identity-security)

Read the latest blog posts about Google Cloud security benefits and customer stories.[](https://docs.cloud.google.com/solutions/security) [](https://www.cloudskillsboost.google/paths/187)

### [Google SIEM and SOAR learning path](https://www.cloudskillsboost.google/paths/187)

Study how to use SIEM and SOAR tools to parse data, build rules, develop playbooks, and respond to incidents.[](https://www.cloudskillsboost.google/paths/187) [](https://www.cloudskillsboost.google/paths/76)

### [DevSecOps learning path](https://www.cloudskillsboost.google/paths/76)

Study how to develop, implement, and monitor your organization's security infrastructure.[](https://www.cloudskillsboost.google/paths/76)

## Security products by use case

Expand sections or use the filter to find products and guides for typical use cases.

### Security operations


Detect vulnerabilities, threats, and misconfigurations.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Advisory Notifications](https://docs.cloud.google.com/advisory-notifications/docs)

Receive well-targeted, timely, and compliant communications about security and privacy events in the Google Cloud console.

#### [Cyber Insurance Hub](https://docs.cloud.google.com/risk-manager/docs)

Evaluate your organization's security posture and connect with insurance partners to obtain exclusive cyber insurance coverage and personalized pricing. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/products/secops-color.svg)

#### [Google Security Operations](https://docs.cloud.google.com/chronicle/docs)

Detect, investigate, and respond to cyber threats with SIEM and SOAR technology. Extract signals to find threats and automate the response. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/products/threat-intelligence-color.svg)

#### [Google Threat Intelligence](https://gtidocs.virustotal.com)

Know who's targeting your organization with unparalleled visibility into the global threat landscape. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/products/model-armor-color.svg)

#### [Model Armor](https://docs.cloud.google.com/model-armor)

Enhance AI security and safety by screening LLM prompts and responses. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/products/security-command-center-color.svg)

#### [Security Command Center](https://docs.cloud.google.com/security-command-center/docs)

Understand your security and data attack surface.

### Access management


Provide unified, federated identity with least privilege policies to reduce the risk of data breaches and other security incidents.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Access Context Manager](https://docs.cloud.google.com/access-context-manager/docs)

Allow organization administrators to define fine-grained, attribute-based access control for projects and resources in Google Cloud. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Certificate Authority Service](https://docs.cloud.google.com/certificate-authority-service/docs)

Simplify, automate, and customize the deployment, management, and security of private certificate authorities (CA). ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Identity and Access Management (IAM)](https://docs.cloud.google.com/iam/docs)

Establish fine-grained identity and access management for Google Cloud resources.

#### [Identity and Access Management (IAM) Recommender](https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview)

Identify excess permissions using policy insights.

#### [Plan identity and access management](https://docs.cloud.google.com/architecture/identity)

Plan your design for granting the right individuals access to the right resources for the right reasons.[](https://docs.cloud.google.com/architecture/identity)

#### [Ensure access and identity](https://www.cloudskillsboost.google/course_templates/645)

Study fundamental features of cloud security related to access management and identity.[](https://www.cloudskillsboost.google/course_templates/645)

#### [Security and IAM planning resources](https://docs.cloud.google.com/architecture/security-iam)

Plan your approach with Architecture Center resources across a variety of identity and access management topics.[](https://docs.cloud.google.com/architecture/security-iam)

### Application security


Protect your workloads against denial-of-service attacks, web application attacks, and other security threats.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Binary Authorization](https://docs.cloud.google.com/binary-authorization/docs)

Deploy only trusted containers on Google Kubernetes Engine. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Certificate Manager](https://docs.cloud.google.com/certificate-manager/docs)

Acquire and manage TLS (SSL) certificates for use with Cloud Load Balancing and Media CDN. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Identity-Aware Proxy (IAP)](https://docs.cloud.google.com/iap/docs)

Manage access to applications running in App Engine standard environment, App Engine flexible environment, Compute Engine, and GKE. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Fraud Defense](https://docs.cloud.google.com/recaptcha-enterprise/docs)

Protect your organization's website from fraudulent activity, spam, and abuse. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Secure Web Proxy](https://docs.cloud.google.com/secure-web-proxy/docs)

Migrate to Google Cloud while keeping your organization's existing security policies and requirements for outbound web traffic. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Web Risk](https://docs.cloud.google.com/web-risk/docs)

Detect malicious URLs on your organization's website and in client applications. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Google Cloud Armor](https://docs.cloud.google.com/armor/docs)

Help protect your services against DoS and web attacks. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Cloud Load Balancing](https://docs.cloud.google.com/load-balancing/docs)

Scale and distribute app access with high-performance load balancing.

#### [Detect malicious URLs in Web Risk](https://docs.cloud.google.com/web-risk/docs/detect-malicious-urls)

Follow guidance to install and run the sample app to detect malicious URLs in a Go environment.

### Auditing, monitoring, and logging


Collect, store, analyze, and monitor your organization's aggregated platform and system logs with a comprehensive solution.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Access Transparency](https://docs.cloud.google.com/assured-workloads/access-transparency/docs)

Get visibility over your organization's cloud provider through near real-time logs. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Audit Manager](https://docs.cloud.google.com/audit-manager/docs)

Provides assessments about your adherence to compliance requirements. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/observability-color.svg)

#### [Cloud Audit Logs](https://docs.cloud.google.com/logging/docs/audit)

Gain visibility into who did what, when, and where for all user activity on Google Cloud. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Cloud provider access management](https://docs.cloud.google.com/assured-workloads/cloud-provider-access-management/docs)

Use this group of products for progressively greater transparency and control over access to your content stored in Google Cloud. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Endpoint Verification](https://docs.cloud.google.com/endpoint-verification/docs)

Create an inventory of devices running Chrome OS and Chrome Browser that access your organization's data. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/operations-color.svg)

#### [Personalized Service Health](https://docs.cloud.google.com/service-health/docs)

Identify Google Cloud service disruptions relevant to your projects so you can manage and respond to them efficiently. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Unified Maintenance](https://docs.cloud.google.com/unified-maintenance/docs)

Manage planned maintenance across Google Cloud services. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/observability-color.svg)

#### [Cloud Logging](https://docs.cloud.google.com/logging/docs)

Store, search, analyze, monitor, and alert on log data and events from Google Cloud and AWS. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/observability-color.svg)

#### [Cloud Monitoring](https://docs.cloud.google.com/monitoring/docs)

Get visibility into the performance, availability, and overall health of cloud-powered applications. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Network Intelligence Center](https://docs.cloud.google.com/network-intelligence-center/docs)

Use a single console for comprehensive network monitoring, verification, and optimization.

### Cloud governance


Manage your resources in a secure and compliant way with visibility and control over your cloud environment.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Assured Workloads](https://docs.cloud.google.com/assured-workloads/docs)

Secure your workloads and accelerate your path to running compliant workloads on Google Cloud. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Cloud Asset Inventory](https://docs.cloud.google.com/asset-inventory/docs)

View, monitor, and analyze Google Cloud and Anthos assets across projects and services. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Organization Policy Service](https://docs.cloud.google.com/organization-policy)

Centralized and programmatic control over your organization's cloud resources. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Policy Intelligence](https://docs.cloud.google.com/policy-intelligence/docs)

Control resources and manage access through policies to proactively improve your security configuration. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Resource Manager](https://docs.cloud.google.com/resource-manager/docs)

Centralized and programmatic control over your organization's cloud resources.

#### [Risk Protection Program](https://docs.cloud.google.com/resource-manager/docs)

Reduce security risk and gain access to exclusive cyber insurance policies tailored for Google Cloud customers.

### Data security


Handle key management for secrets, disks, images, and log retention.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/devops-color.svg)

#### [API keys](https://docs.cloud.google.com/api-keys/docs)

Use key management for secrets, disks, images, and log retention. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Cloud External Key Manager](https://docs.cloud.google.com/kms/docs/ekm)

Control the location and distribution of your externally-managed keys. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Cloud HSM](https://docs.cloud.google.com/kms/docs/hsm)

Protect cryptographic keys with a fully managed hardware security module service. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Cloud Key Management Service](https://docs.cloud.google.com/kms/docs)

Manage encryption keys on Google Cloud. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Confidential Computing](https://docs.cloud.google.com/confidential-computing/confidential-vm/docs)

Protect data in-use with Confidential VM, Confidential GKE, Confidential Dataflow, Confidential Managed Service for Apache Spark, and Confidential Space. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Secret Manager](https://docs.cloud.google.com/secret-manager/docs)

Store API keys, passwords, certificates, and other sensitive data. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Sensitive Data Protection](https://docs.cloud.google.com/sensitive-data-protection/docs)

Discover and redact sensitive data.

### Network security


Centrally manage network resources, establish scalable segmentation for different security zones, and detect network threats.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Chrome Enterprise Premium](https://docs.cloud.google.com/chrome-enterprise-premium/docs)

Use a zero-trust solution that enables secure access with integrated threat and data protection. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Spectrum Access System](https://docs.cloud.google.com/spectrum-access-system/docs)

Manage the wireless communications of devices transmitting in the Citizens Broadband Radio Spectrum (CBRS) band. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Google Cloud Armor](https://docs.cloud.google.com/armor/docs)

Help protect your services against DoS and web attacks. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Cloud Next Generation Firewall](https://docs.cloud.google.com/firewall/docs)

Implement advanced protection capabilities and pervasive coverage to protect your Google Cloud workloads from internal and external attacks. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Identity-Aware Proxy (IAP)](https://docs.cloud.google.com/iap/docs)

Use identity and context to guard access to your applications and VMs. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Cloud Interconnect](https://docs.cloud.google.com/network-connectivity/docs/interconnect)

Connect your infrastructure to Google Cloud on your terms, from anywhere. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Cloud Intrusion Detection System](https://docs.cloud.google.com/intrusion-detection-system/docs)

Get alerts when Cloud Intrusion Detection System detects malicious activity. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Cloud VPN](https://docs.cloud.google.com/network-connectivity/docs/vpn)

Connect your infrastructure to Google Cloud on your terms, from anywhere. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [VPC Service Controls](https://docs.cloud.google.com/vpc-service-controls/docs)

Protect sensitive data in Google Cloud services using security perimeters.

### Related products, guides, and sites

#### Gemini Cloud Assist for security and compliance

#### [Understand data protection and privacy](https://docs.cloud.google.com/gemini/docs/cloud-assist/analyze-and-optimize-cloud-resources#understand_data_protection_and_privacy_security_controls)

Get help with secrets and Cloud KMS keys.

#### [Get a regulatory control recommendation](https://docs.cloud.google.com/gemini/docs/cloud-assist/analyze-and-optimize-cloud-resources#get_a_regulatory_control_recommendation)

Get recommendations for which Assured Workload control package to use.

#### Compliance and privacy

#### [Compliance center](https://docs.cloud.google.com/security/compliance)

View certifications, documentation, and third-party audits to help support your compliance.

#### [Privacy resource center](https://docs.cloud.google.com/privacy)

Discover how we protect the privacy of Google Cloud and Google Workspace customers. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Assured Workloads](https://docs.cloud.google.com/assured-workloads/docs)

Secure your workloads and accelerate your path to running compliant workloads.

#### [Policy violation notifications support](https://support.google.com/cloud/answer/7002354)

View answers to frequently asked questions about Google Cloud policy violations.[](https://support.google.com/cloud/answer/7002354)

#### [Data residency service availability](https://docs.cloud.google.com/terms/data-residency)

View a list of services that can be configured for data location.[](https://docs.cloud.google.com/terms/data-residency) ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Sovereign Controls by Partners](https://docs.cloud.google.com/sovereign-controls-by-partners/docs)

Meet digital sovereignty requirements for Google Cloud by Partners.

#### Secure software supply chain

![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/devops-color.svg)

#### [Software supply chain security](https://docs.cloud.google.com/software-supply-chain-security/docs/sds/overview)

Use a modular set of Google Cloud products to protect your software supply chain. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/devops-color.svg)

#### [Artifact Registry](https://docs.cloud.google.com/artifact-registry/docs)

Store, manage, and secure container images and language packages. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/devops-color.svg)

#### [Artifact Analysis](https://docs.cloud.google.com/artifact-analysis/docs/artifact-analysis)

Provide software composition analysis, metadata storage and retrieval. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Assured Open Source Software](https://docs.cloud.google.com/assured-open-source-software/docs)

Provide enterprise users of open source software with trusted OSS packages. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/devops-color.svg)

#### [Cloud Build](https://docs.cloud.google.com/build/docs)

Continuously build, test, and deploy containers using the Google Cloud infrastructure. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Binary Authorization](https://docs.cloud.google.com/binary-authorization/docs)

Deploy only trusted containers on Google Kubernetes Engine.

#### Authentication and identity

#### [Authentication methods](https://docs.cloud.google.com/docs/authentication)

Basics of authentication methods and concepts for Google Cloud services and get help with implementation or troubleshooting. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Cloud Identity](https://docs.cloud.google.com/identity/docs)

Manage user identities, devices, and applications from one console. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Identity Platform](https://docs.cloud.google.com/identity-platform/docs)

Add Google-grade identity and access management to your apps. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Managed Service for Microsoft Active Directory](https://docs.cloud.google.com/managed-microsoft-ad/docs)

Use a highly available, hardened service running Microsoft Active Directory (AD). ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Titan Security Keys](https://docs.cloud.google.com/titan-security-key)

Provides phishing-resistant 2nd factor of authentication for high-value users.[](https://docs.cloud.google.com/titan-security-key)

#### [Ensure access and identity](https://www.cloudskillsboost.google/course_templates/645)

Study fundamental features of cloud security related to access management and identity.[](https://www.cloudskillsboost.google/course_templates/645)

#### Additional products and resources

![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/operations-color.svg)

#### [Backup and DR Service](https://docs.cloud.google.com/backup-disaster-recovery/docs)

A managed backup and disaster recovery (DR) service for centralized and application-consistent data protection in Google Cloud. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/business-intelligence-color.svg)

#### [Anti Money Laundering AI](https://docs.cloud.google.com/financial-services/anti-money-laundering/docs)

Increase anti money laundering detection accuracy and efficiency. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/networking-color.svg)

#### [Network Service Tiers](https://docs.cloud.google.com/network-tiers/docs)

Optimize connectivity between systems on the internet and your Google Cloud instances.

#### [Risk Protection Program](https://docs.cloud.google.com/risk-protection-program)

Evaluate your organization's security posture and connect with insurance partners to obtain exclusive cyber insurance coverage and personalized pricing. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/compute-color.svg)

#### [Shielded VM](https://docs.cloud.google.com/compute/shielded-vm/docs)

VMs on Google Cloud hardened by a set of security controls that help defend against rootkits and bootkits.