> [!NOTE]
> Standard-legacy, Standard, Premium, and Enterprise (Deprecated) [service tiers](https://docs.cloud.google.com/security-command-center/docs/service-tiers)

> [!CAUTION]
> The Security Command Center Enterprise service tier will shut down on May 21, 2027. If your organization uses the Enterprise service tier, then the organization will automatically move to the Premium service tier on or after May 21, 2027. Contact your account representative or a [Google Cloud sales specialist](https://cloud.google.com/contact) if you have questions.

Security Command Center is a cloud-based risk management solution that helps security
professionals to prevent, detect, and respond to security issues. It helps to
keep your cloud environment secure by providing tools to monitor and manage the
following areas:

- **Vulnerability detection**: Discover and remediate problems such as misconfigurations, publicly exposed resources, leaked credentials, and resources with known risks. Monitor compliance against common security benchmarks like NIST, HIPAA, PCI-DSS, and CIS.
- **Threat detection and mitigation**: Detect and respond to active threats such as malware, cryptocurrency miners, container runtime attacks, and distributed denial-of-service (DDoS) attacks.
- **Postures and policies**: Define and deploy a security posture to monitor the status of your Google Cloud resources, and address posture drift when it happens. Check for and correct over-permissioned accounts.
- **Compliance and data security frameworks**: Define and deploy frameworks and cloud controls to monitor the status of your Google Cloud resources, enforce data security, and address drift when it happens.
- **Data export**: Export findings to BigQuery and Pub/Sub for further analysis.

For a complete list of services, see
[Service tier comparison](https://docs.cloud.google.com/security-command-center/docs/service-tiers).

Services that operate in each of these areas can generate *findings*. Findings
are records of threats or other issues that a service has found in your cloud
environments. Findings are generated by the following sources:

- **Built-in**: Security services that are part of Security Command Center.
- **Integrated** : Google Cloud security services that integrate with [organization-level activations](https://docs.cloud.google.com/security-command-center/docs/security-command-center-overview#activation-levels) of Security Command Center---for example, [Google Cloud Armor](https://docs.cloud.google.com/armor/docs), [Sensitive Data Protection](https://docs.cloud.google.com/sensitive-data-protection/docs), and [Agent Anomaly Detection](https://docs.cloud.google.com/gemini-enterprise-agent-platform/agent-anomalies-overview) ([Preview](https://cloud.google.com/products/#product-launch-stages)), an oversight and audit layer for AI agents deployed on Agent Runtime.
- **Third party** : Security services that have registered as Cloud Marketplace partners, such as [Snyk](https://docs.cloud.google.com/security-command-center/docs/how-to-configure-snyk-for-scc) and CrowdStrike Falcon, that work with organization-level activations of Security Command Center. [See all third party security services](https://console.cloud.google.com/marketplace/browse?filter=category:security-command-center-services).

For a list of available built-in, integrated, and third party security services,
and instructions for how to configure them, see
[Configure Security Command Center services](https://docs.cloud.google.com/security-command-center/docs/how-to-configure-security-command-center).

## Service tiers

Security Command Center is offered in three service tiers: Standard, Premium, and
Enterprise. Each tier determines the features and services that are available to
you in Security Command Center.

For more information about what each tier includes, see [Service tiers](https://docs.cloud.google.com/security-command-center/docs/service-tiers).

## Activation levels

You can [activate Security Command Center](https://docs.cloud.google.com/security-command-center/docs/activate-scc-overview)
on an individual project, which is known as *project-level activation* , or an
entire organization, which is known as *organization-level activation*.

The Enterprise tier requires an organization-level activation.

## What's next

- Learn about [service tiers](https://docs.cloud.google.com/security-command-center/docs/service-tiers).
- [Activate Security Command Center](https://docs.cloud.google.com/security-command-center/docs/activate-scc-overview).
- Learn about Security Command Center [detection services](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources).
- Learn how to [use Security Command Center in the Google Cloud console](https://docs.cloud.google.com/security-command-center/docs/how-to-use-security-command-center).
- [Configure your security services](https://docs.cloud.google.com/security-command-center/docs/how-to-configure-security-command-center).