> [!NOTE]
> Standard, Premium, and Enterprise (Deprecated) [service tiers](https://docs.cloud.google.com/security-command-center/docs/service-tiers)

> [!CAUTION]
> The Security Command Center Enterprise service tier will shut down on May 21, 2027. If your organization uses the Enterprise service tier, then the organization will automatically move to the Premium service tier on or after May 21, 2027. Contact your account representative or a [Google Cloud sales specialist](https://cloud.google.com/contact) if you have questions.

AI Protection provides tools to visualize your organization's or project's AI asset
inventory, investigate security findings, and review proposed mitigations for
risks and threats. This guide describes how to manage AI security using the AI
Security dashboard and the Assets page.

Your Security Command Center service tier determines the features that are available
on the **AI Security** dashboard and **AI resources** tab on the **Assets** page.
For information about features available with each service tier, see
[AI Protection overview](https://docs.cloud.google.com/security-command-center/docs/ai-protection-overview).

## Before you begin

- [Configure AI Protection](https://docs.cloud.google.com/security-command-center/docs/configure-ai-protection).
- Grant the required Identity and Access Management (IAM) roles to users who access the **AI Security** dashboard and **Assets
  \> AI resources** tab. For more information, see [Required
  roles](https://docs.cloud.google.com/security-command-center/docs/configure-ai-protection#required-roles).

## Use the AI Security dashboard

The AI Security dashboard lets you visualize your organization's or project's AI asset
inventory and review proposed mitigations for risks and threats.

### Access the AI Security dashboard

To access the AI Security dashboard, in the Google Cloud console, go to the **Risk
overview \> AI security** page:


[Go to AI security](https://console.cloud.google.com/projectselector2/security/command-center/overview/ai-security?supportedpurview=organizationId,project)

<br />

> [!NOTE]
> **Note:** To view the dashboard, you need one of the IAM roles in the [Required
> roles](https://docs.cloud.google.com/security-command-center/docs/configure-ai-protection#required-roles) section.

For more information, see [AI Security
dashboard](https://docs.cloud.google.com/security-command-center/docs/assess-risk#ai-protection).

### Understand risk management for AI systems

This section identifies potential risks to your AI systems, displaying the top
risks in your AI inventory.

To view a visualization and details for a specific issue, click the issue.

### View AI threats

This section highlights the most recent threats to your AI resources.

In this section, you can do the following:

- To see all threats to your AI resources, click **View all**.
- To see detailed information about a specific threat, click the threat.

### Visualize your AI inventory

This section provides a visual summary of your AI asset inventory, including
projects that use generative AI, active custom models (and Gemini models for Premium and Enterprise (Deprecated) service tiers), and
the datasets used to train third-party models.

In this section, you can do the following:

- To view details about your inventory, click any node in the visualization.
- To view a detailed list of individual assets, click the tooltip. This list includes custom-built models or Gemini models (available for Premium and Enterprise (Deprecated) service tiers).
- To view details about a model, click the model. This view displays details such as the endpoints where the model is hosted and the training dataset. If Sensitive Data Protection is enabled, the datasets view also indicates whether the dataset contains sensitive data.

### Review AI framework findings summary

This section helps you assess findings generated by AI security policies and
data security policies. It includes the following cards:

- **Findings** : This section displays a summary of findings generated by AI
  security policies and data security policies, such as `Gemini model detected`
  and `Gemini model not protected by Model Armor` (findings related to
  Gemini models are available for Premium and Enterprise (Deprecated) service tiers).

  - To view all findings, click **View all findings**.
  - To view findings for a specific category, click the finding count next to that category.
  - To view details for an individual finding, click the finding.
- **Sensitive data in Vertex AI datasets** : Displays a summary of findings
  related to sensitive data in your datasets, as reported by
  Sensitive Data Protection. For more information, see [Introduction to
  Gemini Enterprise Agent Platform](https://docs.cloud.google.com/vertex-ai/docs/start/introduction-unified-platform).

### Examine Model Armor findings

This section displays a graph of the total number of prompts and responses
scanned by Model Armor along with the number of detected issues.
The graph also provides summary statistics for specific issue types, such as
prompt injection, jailbreak attempts, and sensitive data exposure.

For agentic workloads, you can configure Model Armor on Agent
Gateway to screen prompts and
responses to and from agents.

This graph uses the metrics that Model Armor publishes to
Cloud Monitoring. For more information, see [Model Armor
overview](https://docs.cloud.google.com/model-armor/overview).

## Review Agent Platform Vulnerability Assessment findings


> [!WARNING]
>
> **Preview**
>
>
> This feature is
>
> subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the
> [Service Specific
> Terms](https://docs.cloud.google.com/terms/service-terms#1).
>
> Pre-GA features are available "as is" and might have limited support.
>
> For more information, see the
> [launch stage descriptions](https://cloud.google.com/products/#product-launch-stages).

<br />

Findings generated by Agent Platform Vulnerability Assessment include information about the location
and type of the secret, but don't include the secret value.

To review findings generated by Agent Platform Vulnerability Assessment, do the following:

1. In the Google Cloud console, go to the **Findings** page of Security Command Center.

   [Go to Findings](https://console.cloud.google.com/security/command-center/findingsv2)
2. Select your Google Cloud project or organization.
3. In the **Quick filters** section, in the **Class** subsection, select **Secrets**. The query results update to display only matching findings.
4. To view the details of a specific finding, click the finding name in the **Category** column. The details panel for the finding opens and displays the **Summary** tab.
5. On the **Summary** tab, under the **Was detected** section, view the **Description** , and then click the following links for more detail:
   - **Files**: See information about where the secret was found.
   - **View Secret details**: See the type of secret identified.

## Inspect AI resources

In addition to the AI Security dashboard, you can inspect and query your
organization's or project's AI asset inventory on the **Assets** page in the
Google Cloud console by using the **AI resources** tab.

The **AI resources** tab provides a detailed, filterable view of your discovered
AI systems and assets, including the following:

- Models
- Endpoints
- Data sources
- Pipelines
- Agents
- Model Context Protocol (MCP) servers
- Notebooks

You can use the **AI resources** tab to assist with the following:

- **Understand your AI inventory**: View comprehensive lists of active AI assets across your organization or project, filtered by project, location, or resource type.
- **Perform security investigations**: Examine the full metadata, change history, and associated IAM policies of specific AI assets.
- **Examine related findings**: Quickly view all security findings associated with a specific AI asset to evaluate its risk exposure and determine necessary remediation steps.

For more information about viewing and filtering AI assets in the console, see
[Inspect assets that are monitored by
Security Command Center](https://docs.cloud.google.com/security-command-center/docs/work-with-resources-in-the-console#quick-filters-secops-console).

## What's next

- [Learn more about AI Protection](https://docs.cloud.google.com/security-command-center/docs/ai-protection-overview).
- [Configure AI Protection](https://docs.cloud.google.com/security-command-center/docs/configure-ai-protection).
- [Assess risk using the AI Security dashboard](https://docs.cloud.google.com/security-command-center/docs/assess-risk#ai-protection).