Threat model reports help identify potential threats, threat manifestations, and remediation strategies for Google Cloud services. Use these reports to manage your risk and understand the threat landscape that applies to your cloud workloads. Google provides these reports as part of our commitment to transparency and to help you onboard securely to Google Cloud. To create these reports, we partnered with Accenture, which completed an independent review.
These threat models are a probabilistic assessment based on currently known attack vectors, architectural assumptions, and the system's specified scope at the time of publication. These models are not exhaustive and are intended to serve as a baseline for Google Cloud customers' security and risk assessments and to guide risk reduction decisions.
For further help with threat modeling and to get insights that are specific to your environment, see Google Cloud Consulting services.
Report contents
Threat model reports are available at a service level. Each threat model report includes the following information:
- A description of the threat
- How the threat manifests
- Mitigation techniques
Available threat model reports
The following threat model report is available: