The vulnerability findings index lets you locate detection results for the
`Vulnerability`, `Misconfiguration`, and `Observation`
[finding classes](https://docs.cloud.google.com/security-command-center/docs/finding-classes). You can filter by category,
monitored cloud resource, or detection service to review finding details.

| Name | Resource category | Detection service |
|---|---|---|
| [`API key APIs unrestricted`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#api_key_apis_unrestricted) | API | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`API key apps unrestricted`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#api_key_apps_unrestricted) | API | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`API key exists`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#api_key_exists) | API | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`API key not rotated`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#api_key_not_rotated) | API | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Cloud Asset API disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cloud_asset_api_disabled) | Cloud Asset Inventory | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Public Compute image`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#public_compute_image) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Confidential Computing disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#confidential_computing_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Compute project wide SSH keys allowed`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#compute_project_wide_ssh_keys_allowed) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Compute Secure Boot disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#compute_secure_boot_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Compute serial ports enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#compute_serial_ports_enabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Default service account used`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#default_service_account_used) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Disk CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#disk_cmek_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Disk CSEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#disk_csek_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Full API access`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#full_api_access) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`HTTP load balancer`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#http_load_balancer) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Instance OS Login disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#instance_os_login_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`IP forwarding enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#ip_forwarding_enabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`OS login disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#os_login_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Public IP address`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#public_ip_address) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Shielded VM disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#shielded_vm_disabled) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Weak SSL policy`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#weak_ssl_policy) | Compute Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Alpha cluster enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alpha_cluster_enabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Auto repair disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#auto_repair_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Auto upgrade disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#auto_upgrade_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Binary authorization disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#binary_authorization_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Cluster logging disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cluster_logging_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Cluster monitoring disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cluster_monitoring_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Cluster private Google access disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cluster_private_google_access_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Cluster secrets encryption disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cluster_secrets_encryption_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Cluster shielded nodes disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cluster_shielded_nodes_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`COS not used`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#cos_not_used) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Integrity monitoring disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#integrity_monitoring_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Intranode visibility disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#intranode_visibility_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`IP alias disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#ip_alias_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Legacy authorization enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#legacy_authorization_enabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Legacy metadata enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#legacy_metadata_enabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Master authorized networks disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#master_authorized_networks_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Network policy disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#network_policy_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Nodepool boot CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#nodepool_boot_cmek_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Nodepool secure boot disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#nodepool_secure_boot_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Over privileged account`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#over_privileged_account) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Over privileged scopes`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#over_privileged_scopes) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Pod security policy disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#pod_security_policy_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Private cluster disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#private_cluster_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Release channel disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#release_channel_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Web UI enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#web_ui_enabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Workload Identity disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#workload_identity_disabled) | Google Kubernetes Engine | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Dataproc CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#dataproc_cmek_disabled) | Managed Service for Apache Spark | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Dataproc image outdated`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#dataproc_image_outdated) | Managed Service for Apache Spark | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`BigQuery table CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#bigquery_table_cmek_disabled) | BigQuery | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Dataset CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#dataset_cmek_disabled) | BigQuery | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Public dataset`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#public_dataset) | BigQuery | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`DNSSEC disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#dnssec_disabled) | Cloud DNS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`RSASHA1 for signing`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#rsasha1_for_signing) | Cloud DNS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Egress deny rule not set`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#egress_deny_rule_not_set) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Firewall rule logging disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#firewall_rule_logging_disabled) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open Cassandra port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_cassandra_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open ciscosecure websm port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_ciscosecure_websm_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open directory services port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_directory_services_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open DNS port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_dns_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open elasticsearch port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_elasticsearch_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open firewall`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_firewall) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open FTP port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_ftp_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open HTTP port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_http_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open LDAP port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_ldap_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open Memcached port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_memcached_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open MongoDB port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_mongodb_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open MySQL port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_mysql_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open NetBIOS port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_netbios_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open OracleDB port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_oracledb_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open pop3 port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_pop3_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open PostgreSQL port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_postgresql_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open RDP port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_rdp_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open Redis port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_redis_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open SMTP port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_smtp_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open SSH port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_ssh_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open Telnet port`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_telnet_port) | Firewall | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Access Transparency disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#access_transparency_disabled) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Admin service account`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#admin_service_account) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Essential Contacts Not Configured`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#essential_contacts_not_configured) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`KMS role separation`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#kms_role_separation) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Non org IAM member`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#non_org_iam_member) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Open group IAM member`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#open_group_iam_member) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Over privileged service account user`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#over_privileged_service_account_user) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Primitive roles used`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#primitive_roles_used) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Redis role used on org`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#redis_role_used_on_org) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Service account role separation`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#service_account_role_separation) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Service account key not rotated`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#service_account_key_not_rotated) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`User managed service account key`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#user_managed_service_account_key) | IAM | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`KMS key not rotated`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#kms_key_not_rotated) | Cloud KMS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`KMS project has owner`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#kms_project_has_owner) | Cloud KMS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`KMS public key`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#kms_public_key) | Cloud KMS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Too many KMS users`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#too_many_kms_users) | Cloud KMS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Audit logging disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#audit_logging_disabled) | Logging | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Bucket logging disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#bucket_logging_disabled) | Logging | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Locked retention policy not set`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#locked_retention_policy_not_set) | Logging | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Log not exported`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#log_not_exported) | Logging | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Object versioning disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#object_versioning_disabled) | Logging | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Audit config not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#audit_config_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Bucket IAM not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#bucket_iam_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Custom role not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#custom_role_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Firewall not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#firewall_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Network not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#network_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Owner not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#owner_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Route not monitored`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#route_not_monitored) | Monitoring | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`MFA not enforced`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#mfa_not_enforced) | Authentication | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Default network`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#default_network) | Network | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`DNS logging disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#dns_logging_disabled) | Network | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Legacy network`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#legacy_network) | Network | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Load balancer logging disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#load_balancer_logging_disabled) | Network | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Org policy Confidential VM policy`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#org_policy_confidential_vm_policy) | Organization policy | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Org policy location restriction`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#org_policy_location_restriction) | Organization policy | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Pubsub CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#pubsub_cmek_disabled) | Pub/Sub | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB auto backup disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_auto_backup_disabled) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB backups disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_backups_disabled) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_cmek_disabled) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB log min error statement severity`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_log_min_error_statement_severity) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB log min messages`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_log_min_messages) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB log error verbosity`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_log_error_verbosity) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB public IP`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_public_ip) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AlloyDB SSL not enforced`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#alloydb_ssl_not_enforced) | AlloyDB | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Auto backup disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#auto_backup_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Public SQL instance`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#public_sql_instance) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SSL not enforced`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#ssl_not_enforced) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_cmek_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL contained database authentication`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_contained_database_authentication) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL cross DB ownership chaining`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_cross_db_ownership_chaining) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL external scripts enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_external_scripts_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL local infile`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_local_infile) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log checkpoints disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_checkpoints_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log connections disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_connections_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log disconnections disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_disconnections_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log duration disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_duration_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log error verbosity`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_error_verbosity) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log lock waits disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_lock_waits_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log min duration statement enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_min_duration_statement_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log min error statement`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_min_error_statement) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log min error statement severity`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_min_error_statement_severity) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log min messages`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_min_messages) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log executor stats enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_executor_stats_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log hostname enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_hostname_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log parser stats enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_parser_stats_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log planner stats enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_planner_stats_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log statement`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_statement) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log statement stats enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_statement_stats_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL log temp files`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_log_temp_files) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL no root password`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_no_root_password) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL public IP`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_public_ip) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL remote access enabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_remote_access_enabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL skip show database disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_skip_show_database_disabled) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL trace flag 3625`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_trace_flag_3625) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL user connections configured`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_user_connections_configured) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL user options configured`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_user_options_configured) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`SQL weak root password`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#sql_weak_root_password) | Cloud SQL | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Bucket CMEK disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#bucket_cmek_disabled) | Cloud Storage | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Bucket policy only disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#bucket_policy_only_disabled) | Cloud Storage | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Public bucket ACL`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#public_bucket_acl) | Cloud Storage | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Public log bucket`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#public_log_bucket) | Cloud Storage | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Flow logs disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#flow_logs_disabled) | Subnetwork | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Flow logs settings not recommended`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#vpc_flow_logs_settings_not_recommended) | Subnetwork | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Private Google access disabled`](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings#private_google_access_disabled) | Subnetwork | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`AWS findings`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#aws-findings) | AWS | [Security Health Analytics](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics) |
| [`Accessible Git repository`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Accessible SVN repository`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Accessible ENV File`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Cacheable password input`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Clear text password`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Insecure allow origin ends with validation`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Insecure allow origin starts with validation`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Invalid content type`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Invalid header`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Mismatching security header values`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Misspelled security header name`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Mixed content`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Outdated library`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Server side request forgery`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Session ID leak`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`SQL injection`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Struts insecure deserialization`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`XSS`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`XSS angular callback`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`XSS error`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`XXE reflected file leakage`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Prototype pollution`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Hsts Misconfiguration`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Content Security Policy Header Missing`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Content Security Policy Header Misconfigured`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Cross-Origin-Opener-Policy Header Missing`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`Clickjacking Protection Missing`](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#finding_types) | Web application | [Web Security Scanner](https://docs.cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview) |
| [`IAM role has excessive permissions`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#iam_role_has_excessive_permissions) | IAM | [IAM recommender](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#iamrec-source) |
| [`Service agent role replaced with basic role`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#service_agent_role_replaced_with_basic_role) | IAM | [IAM recommender](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#iamrec-source) |
| [`Service agent granted basic role`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#service_agent_granted_basic_role) | IAM | [IAM recommender](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#iamrec-source) |
| [`Unused IAM role`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#unused_iam_role) | IAM | [IAM recommender](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#iamrec-source) |
| [`Assumed identity has excessive permissions`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`Group has excessive permissions`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`User has excessive permissions`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`User is inactive`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`Group is inactive`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`Assumed identity is inactive`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`Overly permissive trust policy enforced on assumed identity`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`Assumed identity has lateral movement risk`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#ciem-findings) | IAM | [Cloud Infrastructure Entitlement Management](https://docs.cloud.google.com/security-command-center/docs/ciem-overview) |
| [`Floor settings violation`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#floor_settings_violation) | Model Armor | [Model Armor](https://docs.cloud.google.com/model-armor/overview) |
| [`SHA Canned Module Drifted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#sha_canned_module_drifted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`SHA Custom Module Drifted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#sha_custom_module_drifted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`SHA Custom Module Deleted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#sha_custom_module_deleted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Org Policy Canned Constraint Drifted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#org_policy_canned_constraint_drifted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Org Policy Canned Constraint Deleted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#org_policy_canned_constraint_deleted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Org Policy Custom Constraint Drifted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#org_policy_custom_constraint_drifted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Org Policy Custom Constraint Deleted`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#org_policy_custom_constraint_deleted) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Disable VPC External IPv6`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#disable_vpc_external_ip_v6_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Disable VPC Internal IPv6`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#disable_vpc_internal_ip_v6_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Require OS Login`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#require_os_login_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Restrict Authorized Networks`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#restrict_authorized_networks_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Require VPC Connector`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#require_vpc_connector_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Disabled Serial Port Access`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#disabled_serial_port_access_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Skip Default Network Creation`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#skip_default_network_creation_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Allowed Ingress`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#allowed_ingress_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Uniform Bucket Level Access`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#uniform_bucket_level_access_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`Allowed VPC Egress`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#allowed_vpc_egress_org_policy) | Security posture | [Security posture](https://docs.cloud.google.com/security-command-center/docs/security-posture-overview) |
| [`OS vulnerability`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#os_vulnerability) | Compute Engine | [VM Manager](https://docs.cloud.google.com/compute/docs/vm-manager) |
| [`Container image vulnerability`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#container_image_vulnerability) | Artifact Registry | [Artifact Registry vulnerability assessment](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#ar-vuln-assessment) |
| [`Software vulnerability`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#software_vulnerability) | Agent Platform | [AI Protection](https://docs.cloud.google.com/security-command-center/docs/configure-ai-protection) |
| [`Public sensitive data`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#public_sensitive_data) | Data asset | [Sensitive Data Protection](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#dlp) |
| [`Secrets in environment variables`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#secrets_in_environment_variables) | Serverless compute | [Sensitive Data Protection](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#dlp) |
| [`Secrets in storage`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#secrets_in_storage) | Data asset | [Sensitive Data Protection](https://docs.cloud.google.com/security-command-center/docs/concepts-security-sources#dlp) |
| [`Gemini model not protected by Model Armor`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#gemini_model_not_protected_by_model_armor) | AI Assets | [AI Discovery](https://docs.cloud.google.com/security-command-center/docs/ai-protection-overview#ai-discovery) |
| [`Gemini model detected`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#gemini_model_detected) | AI Assets | [AI Discovery](https://docs.cloud.google.com/security-command-center/docs/ai-protection-overview#ai-discovery) |
| [`Tuned model not protected by Model Armor`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#tuned_model_not_protected_by_model_armor) | AI Assets | [AI Discovery](https://docs.cloud.google.com/security-command-center/docs/ai-protection-overview#ai-discovery) |
| [`Tuned model detected`](https://docs.cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#tuned_model_detected) | AI Assets | [AI Discovery](https://docs.cloud.google.com/security-command-center/docs/ai-protection-overview#ai-discovery) |

## What's next

- [Security Health Analytics overview](https://docs.cloud.google.com/security-command-center/docs/concepts-security-health-analytics)
- [Remediating Security Health Analytics findings](https://docs.cloud.google.com/security-command-center/docs/how-to-remediate-security-health-analytics-findings)