Remediating Web Security Scanner findings | Security Command Center

<!doctype html> <html lang="en" dir="ltr"> <head> <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/webhistory"> <meta property="og:site_name" content="Google Cloud"> <meta property="og:type" content="website"><meta name="theme-color" content="#039be5"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/_pwa/cloud/manifest.json" crossorigin="use-credentials"> <link rel="preconnect" href="//www.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.googleapis.com" crossorigin> <link rel="preconnect" href="//apis.google.com" crossorigin> <link rel="preconnect" href="//www.google-analytics.com" crossorigin><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"> <link rel="stylesheet" href="//fonts.googleapis.com/css2?family=Material+Icons&family=Material+Symbols+Outlined&display=block"><link rel="stylesheet" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/css/app.css"> <link rel="shortcut icon" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/favicon.ico"> <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png"><link rel="canonical" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings"><link rel="search" type="application/opensearchdescription+xml" title="Google Cloud" href="https://cloud.google.com/s/opensearch.xml"> <link rel="alternate" hreflang="en" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings" /><link rel="alternate" hreflang="x-default" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings" /><link rel="alternate" hreflang="zh-Hans" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=zh-cn" /><link rel="alternate" hreflang="fr" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=fr" /><link rel="alternate" hreflang="de" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=de" /><link rel="alternate" hreflang="id" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=id" /><link rel="alternate" hreflang="it" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=it" /><link rel="alternate" hreflang="ja" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=ja" /><link rel="alternate" hreflang="ko" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=ko" /><link rel="alternate" hreflang="pt-BR" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=pt-br" /><link rel="alternate" hreflang="es-419" href="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings?hl=es-419" /><title>Remediating Web Security Scanner findings  |  Security Command Center  |  Google Cloud</title> <meta property="og:title" content="Remediating Web Security Scanner findings  |  Security Command Center  |  Google Cloud"><meta property="og:url" content="https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings"><meta property="og:image" content="https://cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="630"><meta property="og:locale" content="en"><meta name="twitter:card" content="summary_large_image"><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Article", "headline": "Remediating Web Security Scanner findings" } </script><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "Security Command Center", "item": "https://cloud.google.com/security-command-center" },{ "@type": "ListItem", "position": 2, "name": "Documentation", "item": "https://cloud.google.com/security-command-center/docs" },{ "@type": "ListItem", "position": 3, "name": "Remediating Web Security Scanner findings", "item": "https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings" }] } </script> <link rel="stylesheet" href="/extras.css"></head> <body class="" template="page" theme="cloud-theme" type="article" layout="docs" free-trial display-toc pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <a href="#main-content" class="skip-link button"> Skip to main content </a> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar><cloudx-track userCountry="SG"></cloudx-track> <cloudx-utils-init></cloudx-utils-init> <devsite-header keep-tabs-visible> <div class="devsite-header--inner nocontent"> <div class="devsite-top-logo-row-wrapper-wrapper"> <div class="devsite-top-logo-row-wrapper"> <div class="devsite-top-logo-row"> <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" visually-hidden aria-label="Open menu"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> <div class="devsite-top-logo-row-middle"> <div class="devsite-header-upper-tabs"> <cloudx-tabs-nav class="upper-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Upper tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/docs" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs" track-type="nav" track-metadata-position="nav - docs-home" track-metadata-module="primary nav" aria-label="Documentation, selected" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" > Documentation </a> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/tech-area-overviews" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-type="nav" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > Technology areas </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Technology areas" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/ai-ml" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/ai-ml" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> AI and ML </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-development" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-development" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application development </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-hosting" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-hosting" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application hosting </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/compute-area" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/compute-area" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Compute </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/data" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/data" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Data analytics and pipelines </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/databases" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/databases" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Databases </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/dhm-cloud" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/dhm-cloud" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Distributed, hybrid, and multicloud </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/generative-ai" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/generative-ai" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Generative AI </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/industry" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/industry" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Industry solutions </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/networking" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/networking" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Networking </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/observability" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/observability" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Observability and monitoring </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/security" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/security" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Security </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/storage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/storage" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Storage </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/cross-product-overviews" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-type="nav" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > Cross-product tools </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Cross-product tools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/access-resources" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/access-resources" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Access and resources management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/costs-usage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/costs-usage" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Costs and usage management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/devtools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/devtools" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud SDK, languages, frameworks, and tools </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/iac" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/iac" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Infrastructure as code </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/migration" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/migration" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Migration </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/" track-type="nav" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > Related sites </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Related sites" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Home </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/free" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/free" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Free Trial and Free Tier </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/architecture" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/architecture" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Architecture Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/blog" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Blog </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/contact" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/contact" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Contact Sales </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/developers" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/developers" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" track-type="nav" track-metadata-eventdetail="https://developers.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" track-type="nav" track-metadata-eventdetail="https://console.cloud.google.com/marketplace" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/marketplace/docs" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/marketplace/docs" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace Documentation </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" track-type="nav" track-metadata-eventdetail="https://www.cloudskillsboost.google/paths" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Skills Boost </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/solutions" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/solutions" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Solution Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/support-hub" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/support-hub" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Support </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" track-type="nav" track-metadata-eventdetail="https://www.youtube.com/@googlecloudtech" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Tech Youtube Channel </div> </a> </li> </ul> </div> </div> </div> </tab> </nav> </cloudx-tabs-nav> </div> <devsite-search enable-signin enable-search enable-suggestions project-name="Security Command Center" tenant-name="Google Cloud" project-scope="/security-command-center/docs" url-scoped="https://cloud.google.com/s/results/security-command-center/docs" > <form class="devsite-search-form" action="https://cloud.google.com/s/results" method="GET"> <div class="devsite-search-container"> <button type="button" search-open class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button> <div class="devsite-searchbox"> <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-expanded="false" aria-haspopup="listbox" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" role="combobox" type="text" value="" > <div class="devsite-search-image material-icons" aria-hidden="true"> </div> <div class="devsite-search-shortcut-icon-container" aria-hidden="true"> <kbd class="devsite-search-shortcut-icon">/</kbd> </div> </div> </div> </form> <button type="button" search-close class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button> </devsite-search> </div> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> <devsite-user enable-profiles fp-auth id="devsite-user"> <span class="button devsite-top-button" aria-hidden="true" visually-hidden>Sign in</span> </devsite-user> </div> </div> </div> <div class="devsite-collapsible-section "> <div class="devsite-header-background"> <div class="devsite-product-id-row" hidden> <div class="devsite-product-description-row"> </div> </div> <div class="devsite-doc-set-nav-row"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/security-command-center" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Security Command Center" > Security Command Center </a> </li> </ul> <cloudx-tabs-nav class="lower-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Lower tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/security-command-center/docs/security-command-center-overview" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/security-command-center/docs/security-command-center-overview" track-type="nav" track-metadata-position="nav - guides" track-metadata-module="primary nav" aria-label="Guides, selected" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" > Guides </a> </tab> <tab > <a href="https://cloud.google.com/security-command-center/docs/reference/authentication" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/security-command-center/docs/reference/authentication" track-type="nav" track-metadata-position="nav - reference" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" > Reference </a> </tab> <tab > <a href="https://cloud.google.com/security-command-center/docs/samples" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/security-command-center/docs/samples" track-type="nav" track-metadata-position="nav - samples" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" > Samples </a> </tab> <tab > <a href="https://cloud.google.com/security-command-center/docs/resources" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/security-command-center/docs/resources" track-type="nav" track-metadata-position="nav - resources" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" > Resources </a> </tab> </nav> </cloudx-tabs-nav> <div class="devsite-product-button-row"> <a href="https://cloud.google.com/contact" class="cta-button-secondary button " track-metadata-position="nav" data-overflow="devsite-tabs-wrapper" data-overflow-container="left" track-name="sales" data-overflow-wrapper="tab" track-metadata-eventDetail="nav" track-type="contact" >Contact Us</a> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary " track-type="freeTrial" data-overflow-container="right" data-overflow="devsite-top-logo-row" track-name="gcpCta" track-metadata-position="nav" track-metadata-eventDetail="nav" referrerpolicy="no-referrer-when-downgrade" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" >Start free</a> </div> </div> </div> </div> </div> </devsite-header> <devsite-book-nav scrollbars > <div class="devsite-book-nav-filter" > <span class="filter-list-icon material-icons" aria-hidden="true"></span> <input type="text" placeholder="Filter" aria-label="Type to filter" role="searchbox"> <span class="filter-clear-button hidden" data-title="Clear filter" aria-label="Clear filter" role="button" tabindex="0"></span> </div> <nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu"> <div class="devsite-mobile-header"> <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> </div> <div class="devsite-book-nav-wrapper"> <div class="devsite-mobile-nav-top"> <ul class="devsite-nav-list"> <li class="devsite-nav-item"> <a href="/docs" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Documentation" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Documentation </span> </a> <ul class="devsite-nav-responsive-tabs"> <li class="devsite-nav-item"> <a href="/security-command-center/docs/security-command-center-overview" class="devsite-nav-title gc-analytics-event devsite-nav-has-children devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Guides" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip menu="_book"> Guides </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/security-command-center/docs/reference/authentication" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Reference </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/security-command-center/docs/samples" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Samples" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Samples </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/security-command-center/docs/resources" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Resources" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Resources </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/tech-area-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Technology areas" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Technology areas </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Technology areas"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Technology areas"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/cross-product-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Cross-product tools" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Cross-product tools </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Cross-product tools"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Cross-product tools"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Related sites" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Related sites </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Related sites"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Related sites"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/" class="devsite-nav-title gc-analytics-event " track-metadata-eventDetail="nav" track-metadata-position="nav" track-name="console" track-type="globalNav" referrerpolicy="no-referrer-when-downgrade" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Console" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Console </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="cta-button-secondary button" track-metadata-position="nav" data-overflow="devsite-tabs-wrapper" data-overflow-container="left" track-name="sales" data-overflow-wrapper="tab" track-metadata-eventDetail="nav" track-type="contact" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Us" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Us </span> </a> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary" track-type="freeTrial" data-overflow-container="right" data-overflow="devsite-top-logo-row" track-name="gcpCta" track-metadata-position="nav" track-metadata-eventDetail="nav" referrerpolicy="no-referrer-when-downgrade" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Start free" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Start free </span> </a> </li> </ul> </div> <div class="devsite-mobile-nav-bottom"> <ul class="devsite-nav-list" menu="_book"> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Discover</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/security-command-center-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-command-center-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-command-center-overview" ><span class="devsite-nav-text" tooltip>Product overview</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/service-tiers" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/service-tiers" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/service-tiers" ><span class="devsite-nav-text" tooltip>Service tiers</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-data-security-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-data-security-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-data-security-overview" ><span class="devsite-nav-text" tooltip>Data and infrastructure security overview</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Activate Security Command Center</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/activate-scc-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/activate-scc-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/activate-scc-overview" ><span class="devsite-nav-text" tooltip>Activation overview</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/data-residency-support" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/data-residency-support" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/data-residency-support" ><span class="devsite-nav-text" tooltip>Plan for data residency</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-scan-latency-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-scan-latency-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-scan-latency-overview" ><span class="devsite-nav-text" tooltip>When to expect findings</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Control access with IAM</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/access-control" ><span class="devsite-nav-text" tooltip>Overview of access control with IAM</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/access-control-org" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/access-control-org" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/access-control-org" ><span class="devsite-nav-text" tooltip>Control access with organization-level activations</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/access-control-project" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/access-control-project" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/access-control-project" ><span class="devsite-nav-text" tooltip>Control access with project-level activations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Activate Security Command Center Standard or Premium</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/activate-scc-for-an-organization" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/activate-scc-for-an-organization" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/activate-scc-for-an-organization" ><span class="devsite-nav-text" tooltip>Activate Security Command Center Standard or Premium for an organization</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/activate-scc-for-a-project" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/activate-scc-for-a-project" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/activate-scc-for-a-project" ><span class="devsite-nav-text" tooltip>Activate Security Command Center Standard or Premium for a project</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/activate-scc-project-level-limitations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/activate-scc-project-level-limitations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/activate-scc-project-level-limitations" ><span class="devsite-nav-text" tooltip>Feature availability with project-level activations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Activate Security Command Center Enterprise for an organization</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/activate-enterprise-tier" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/activate-enterprise-tier" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/activate-enterprise-tier" ><span class="devsite-nav-text" tooltip>Activate Security Command Center Enterprise</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/connect-scc-to-aws" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/connect-scc-to-aws" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/connect-scc-to-aws" ><span class="devsite-nav-text" tooltip>Connect to AWS for vulnerability detection</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/configure-secops-users" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/configure-secops-users" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/configure-secops-users" ><span class="devsite-nav-text" tooltip>Control access to features in the SecOps console</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/map-users-in-secops" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/map-users-in-secops" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/map-users-in-secops" ><span class="devsite-nav-text" tooltip>Map and authenticate users to SOAR features in the SecOps console</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/integrate-ticketing-systems" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/integrate-ticketing-systems" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/integrate-ticketing-systems" ><span class="devsite-nav-text" tooltip>Integrate Security Command Center Enterprise with ticketing systems</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/connect-secops-aws" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/connect-secops-aws" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/connect-secops-aws" ><span class="devsite-nav-text" tooltip>Connect to AWS for log ingestion</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/security-command-center/docs/connect-secops-azure" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/connect-secops-azure" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/connect-secops-azure" ><span class="devsite-nav-text" tooltip>Connect to Azure for log ingestion</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/activate-sensitive-data-discovery" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/activate-sensitive-data-discovery" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/activate-sensitive-data-discovery" ><span class="devsite-nav-text" tooltip>Enable sensitive data discovery</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/integrate-aoss-with-scc" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/integrate-aoss-with-scc" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/integrate-aoss-with-scc" ><span class="devsite-nav-text" tooltip>Integrate with Assured OSS</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/advanced-configuration-threat-management" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/advanced-configuration-threat-management" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/advanced-configuration-threat-management" ><span class="devsite-nav-text" tooltip>Advanced configuration for threat management</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/enterprise-security-operations-software-update" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/enterprise-security-operations-software-update" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/enterprise-security-operations-software-update" ><span class="devsite-nav-text" tooltip>Update the Enterprise use case for SOAR </span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure additional Security Command Center Enterprise features</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/working-with-soar-settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/working-with-soar-settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/working-with-soar-settings" ><span class="devsite-nav-text" tooltip>Manage SOAR settings in the SecOps console</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/update-aws-settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/update-aws-settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/update-aws-settings" ><span class="devsite-nav-text" tooltip>Update AWS settings for vulnerabilities</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Use the Security Command Center consoles</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-security-command-center" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-security-command-center" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-security-command-center" ><span class="devsite-nav-text" tooltip>Use Security Command Center in the Google Cloud console</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/scce-consoles-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/scce-consoles-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/scce-consoles-overview" ><span class="devsite-nav-text" tooltip>Use Security Command Center Enterprise consoles</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Configure Security Command Center</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-sources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-sources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-sources" ><span class="devsite-nav-text" tooltip>Choose security sources</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-security-command-center" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-security-command-center" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-security-command-center" ><span class="devsite-nav-text" tooltip>Configure Security Command Center services</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/optimize-security-command-center" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/optimize-security-command-center" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/optimize-security-command-center" ><span class="devsite-nav-text" tooltip>Security Command Center best practices</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/cryptomining-detection-best-practices" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/cryptomining-detection-best-practices" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/cryptomining-detection-best-practices" ><span class="devsite-nav-text" tooltip>Cryptomining detection best practices</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Integrate with other services</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-secops-soar" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-secops-soar" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-secops-soar" ><span class="devsite-nav-text" tooltip>Google Security Operations SOAR</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-scc-cortex-xsoar" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-scc-cortex-xsoar" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-scc-cortex-xsoar" ><span class="devsite-nav-text" tooltip>Cortex XSOAR</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-scc-elastic-stack-docker" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-scc-elastic-stack-docker" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-scc-elastic-stack-docker" ><span class="devsite-nav-text" tooltip>Elastic Stack using Docker</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-scc-elastic-stack" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-scc-elastic-stack" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-scc-elastic-stack" ><span class="devsite-nav-text" tooltip>Elastic Stack</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-scc-servicenow" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-scc-servicenow" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-scc-servicenow" ><span class="devsite-nav-text" tooltip>ServiceNow</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-scc-splunk" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-scc-splunk" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-scc-splunk" ><span class="devsite-nav-text" tooltip>Splunk</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-configure-scc-qradar" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-scc-qradar" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-scc-qradar" ><span class="devsite-nav-text" tooltip>QRadar</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/security-command-center/docs/how-to-configure-snyk-for-scc" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-configure-snyk-for-scc" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-configure-snyk-for-scc" ><span class="devsite-nav-text" tooltip>Snyk</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Work with findings</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/review-manage-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/review-manage-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/review-manage-findings" ><span class="devsite-nav-text" tooltip>Review and manage findings in the console</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-build-findings-query-console" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-build-findings-query-console" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-build-findings-query-console" ><span class="devsite-nav-text" tooltip>Edit findings queries in the console</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/work-with-resources-in-the-console" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/work-with-resources-in-the-console" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/work-with-resources-in-the-console" ><span class="devsite-nav-text" tooltip>Inspect assets monitored by Security Command Center</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Mute findings</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-mute-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-mute-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-mute-findings" ><span class="devsite-nav-text" tooltip>Mute findings in Security Command Center</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/dynamic-mute-migrate" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/dynamic-mute-migrate" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/dynamic-mute-migrate" ><span class="devsite-nav-text" tooltip>Migrate from static to dynamic mute rules</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-security-marks" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-security-marks" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-security-marks" ><span class="devsite-nav-text" tooltip>Annotate findings and assets with security marks</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure notifications and exports</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-export-data" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-export-data" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-export-data" ><span class="devsite-nav-text" tooltip>Export Security Command Center data</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-notifications" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-notifications" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-notifications" ><span class="devsite-nav-text" tooltip>Enable finding notifications for Pub/Sub</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-analyze-findings-in-big-query" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-analyze-findings-in-big-query" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-analyze-findings-in-big-query" ><span class="devsite-nav-text" tooltip>Stream findings to BigQuery</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/export-cloud-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/export-cloud-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/export-cloud-logging" ><span class="devsite-nav-text" tooltip>Export logs to Cloud Logging</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-enable-real-time-notifications" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-enable-real-time-notifications" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-enable-real-time-notifications" ><span class="devsite-nav-text" tooltip>Enable real-time email and chat notifications</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Finding reference</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/finding-classes" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/finding-classes" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/finding-classes" ><span class="devsite-nav-text" tooltip>Finding classes</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/finding-severity-classifications" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/finding-severity-classifications" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/finding-severity-classifications" ><span class="devsite-nav-text" tooltip>Finding severities</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/finding-states" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/finding-states" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/finding-states" ><span class="devsite-nav-text" tooltip>Finding states</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Work with cases</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/cases-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/cases-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/cases-overview" ><span class="devsite-nav-text" tooltip>Cases overview</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/secops-workdesk" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/secops-workdesk" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/secops-workdesk" ><span class="devsite-nav-text" tooltip>Using the workdesk</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/determine-ownership-posture-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/determine-ownership-posture-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/determine-ownership-posture-findings" ><span class="devsite-nav-text" tooltip>Determine ownership for posture findings</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/group-findings-in-cases" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/group-findings-in-cases" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/group-findings-in-cases" ><span class="devsite-nav-text" tooltip>Group findings in cases</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/mute-findings-in-cases" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/mute-findings-in-cases" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/mute-findings-in-cases" ><span class="devsite-nav-text" tooltip>Mute findings in cases</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/assign-itsm-tickets" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/assign-itsm-tickets" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/assign-itsm-tickets" ><span class="devsite-nav-text" tooltip>Assign tickets in cases</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/working-with-alerts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/working-with-alerts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/working-with-alerts" ><span class="devsite-nav-text" tooltip>Working with alerts</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Work with playbooks</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/playbooks-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/playbooks-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/playbooks-overview" ><span class="devsite-nav-text" tooltip>Playbooks overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/automate-recommendations-playbook" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/automate-recommendations-playbook" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/automate-recommendations-playbook" ><span class="devsite-nav-text" tooltip>Automate IAM recommendations using playbooks</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/playbooks-public-bucket-acl" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/playbooks-public-bucket-acl" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/playbooks-public-bucket-acl" ><span class="devsite-nav-text" tooltip>Enable public bucket remediation</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Manage security postures</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-overview" ><span class="devsite-nav-text" tooltip>Security posture overview</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-security-posture" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-security-posture" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-security-posture" ><span class="devsite-nav-text" tooltip>Manage a security posture</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Posture templates</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-essentials-secure-default-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-essentials-secure-default-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-essentials-secure-default-template" ><span class="devsite-nav-text" tooltip>Secure by default, essentials</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-extended-secure-default-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-extended-secure-default-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-extended-secure-default-template" ><span class="devsite-nav-text" tooltip>Secure by default, extended</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-essentials-secure-ai-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-essentials-secure-ai-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-essentials-secure-ai-template" ><span class="devsite-nav-text" tooltip>Secure AI, essentials</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-extended-secure-ai-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-extended-secure-ai-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-extended-secure-ai-template" ><span class="devsite-nav-text" tooltip>Secure AI, extended</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Google Cloud services</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-essentials-bigquery-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-essentials-bigquery-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-essentials-bigquery-template" ><span class="devsite-nav-text" tooltip>BigQuery</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-essentials-storage-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-essentials-storage-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-essentials-storage-template" ><span class="devsite-nav-text" tooltip>Cloud Storage, essentials</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-extended-storage-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-extended-storage-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-extended-storage-template" ><span class="devsite-nav-text" tooltip>Cloud Storage, extended</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-essentials-vpc-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-essentials-vpc-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-essentials-vpc-template" ><span class="devsite-nav-text" tooltip>VPC networking, essentials</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-extended-vpc-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-extended-vpc-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-extended-vpc-template" ><span class="devsite-nav-text" tooltip>VPC networking, extended</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Compliance standards</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-cis-20-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-cis-20-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-cis-20-template" ><span class="devsite-nav-text" tooltip>CIS Benchmark 2.0</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-iso-27001-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-iso-27001-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-iso-27001-template" ><span class="devsite-nav-text" tooltip>ISO 27001</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-nist-800-53-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-nist-800-53-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-nist-800-53-template" ><span class="devsite-nav-text" tooltip>NIST 800-53</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-pci-dss-template" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-pci-dss-template" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-pci-dss-template" ><span class="devsite-nav-text" tooltip>PCI DSS</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Validate infrastructure as code</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/validate-iac" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/validate-iac" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/validate-iac" ><span class="devsite-nav-text" tooltip>Validate IaC against your policies</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/supported-iac-assets-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/supported-iac-assets-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/supported-iac-assets-policies" ><span class="devsite-nav-text" tooltip>Supported asset types and policies for IaC validation</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/iac-validation-cloud-build" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/iac-validation-cloud-build" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/iac-validation-cloud-build" ><span class="devsite-nav-text" tooltip>Integrate IaC validation with Cloud Build</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/iac-validation-jenkins" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/iac-validation-jenkins" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/iac-validation-jenkins" ><span class="devsite-nav-text" tooltip>Integrate IaC validation with Jenkins</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/iac-validation-github-actions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/iac-validation-github-actions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/iac-validation-github-actions" ><span class="devsite-nav-text" tooltip>Integrate IaC validation with GitHub Actions</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/iac-validation-tutorial" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/iac-validation-tutorial" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/iac-validation-tutorial" ><span class="devsite-nav-text" tooltip>Create a sample IaC validation report</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/security-posture-custom-constraints" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/security-posture-custom-constraints" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/security-posture-custom-constraints" ><span class="devsite-nav-text" tooltip>Manage security posture resources by using custom constraints</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Assess risk</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Assess risk with attack exposure scores and attack paths</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/attack-exposure-learn" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/attack-exposure-learn" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/attack-exposure-learn" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/attack-exposure-define-high-value-resource-set" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/attack-exposure-define-high-value-resource-set" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/attack-exposure-define-high-value-resource-set" ><span class="devsite-nav-text" tooltip>Define your high-value resource set</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/attack-exposure-supported-features" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/attack-exposure-supported-features" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/attack-exposure-supported-features" ><span class="devsite-nav-text" tooltip>Risk Engine feature support</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-sources#dlp" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-sources#dlp" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-sources#dlp" ><span class="devsite-nav-text" tooltip>Identify high-sensitivity data with Sensitive Data Protection</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Detect and investigate threats</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect threats on Google Cloud</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect threats to containers</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-container-threat-detection-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-container-threat-detection-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-container-threat-detection-overview" ><span class="devsite-nav-text" tooltip>Container Threat Detection overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-test-container-threat-detection" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-test-container-threat-detection" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-test-container-threat-detection" ><span class="devsite-nav-text" tooltip>Test Container Threat Detection</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-container-threat-detection" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-container-threat-detection" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-container-threat-detection" ><span class="devsite-nav-text" tooltip>Use Container Threat Detection</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect threats from event logging</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-event-threat-detection-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-event-threat-detection-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-event-threat-detection-overview" ><span class="devsite-nav-text" tooltip>Event Threat Detection overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-test-event-threat-detection" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-test-event-threat-detection" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-test-event-threat-detection" ><span class="devsite-nav-text" tooltip>Test Event Threat Detection</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-event-threat-detection" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-event-threat-detection" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-event-threat-detection" ><span class="devsite-nav-text" tooltip>Use Event Threat Detection</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Custom modules for Event Threat Detection</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/custom-modules-etd-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/custom-modules-etd-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/custom-modules-etd-overview" ><span class="devsite-nav-text" tooltip>Overview of custom modules for Event Threat Detection</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/use-custom-modules-etd" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/use-custom-modules-etd" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/use-custom-modules-etd" ><span class="devsite-nav-text" tooltip>Create and manage custom modules</span></a></li></ul></div></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect and review sensitive actions</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-sensitive-actions-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-sensitive-actions-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-sensitive-actions-overview" ><span class="devsite-nav-text" tooltip>Sensitive Actions Service overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-test-sensitive-actions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-test-sensitive-actions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-test-sensitive-actions" ><span class="devsite-nav-text" tooltip>Test Sensitive Actions</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-sensitive-actions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-sensitive-actions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-sensitive-actions" ><span class="devsite-nav-text" tooltip>Use Sensitive Actions</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect threats to VMs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-vm-threat-detection-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-vm-threat-detection-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-vm-threat-detection-overview" ><span class="devsite-nav-text" tooltip>Virtual Machine Threat Detection overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-vm-threat-detection" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-vm-threat-detection" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-vm-threat-detection" ><span class="devsite-nav-text" tooltip>Using Virtual Machine Threat Detection</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/vmtd-allow-access-vpcsc" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/vmtd-allow-access-vpcsc" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/vmtd-allow-access-vpcsc" ><span class="devsite-nav-text" tooltip>Allow VM Threat Detection to access VPC Service Controls perimeters</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/investigate-vmtd-kernel-tampering-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/investigate-vmtd-kernel-tampering-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/investigate-vmtd-kernel-tampering-findings" ><span class="devsite-nav-text" tooltip>Inspect a VM for signs of kernel memory tampering</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-sources#anomaly_detection" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-sources#anomaly_detection" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-sources#anomaly_detection" ><span class="devsite-nav-text" tooltip>Detect external anomalies</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-investigate-threats" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-investigate-threats" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-investigate-threats" ><span class="devsite-nav-text" tooltip>Investigate and respond to threats</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/investigate-threat-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/investigate-threat-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/investigate-threat-findings" ><span class="devsite-nav-text" tooltip>Detect and investigate threats across cloud platforms</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Manage vulnerabilities</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/vulnerabilities-prioritize-remediation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/vulnerabilities-prioritize-remediation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/vulnerabilities-prioritize-remediation" ><span class="devsite-nav-text" tooltip>Prioritize the remediation of vulnerabilities</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/filter-vulnerability-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/filter-vulnerability-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/filter-vulnerability-findings" ><span class="devsite-nav-text" tooltip>Filter vulnerability findings</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect and remediate toxic combinations</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/toxic-combinations-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/toxic-combinations-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/toxic-combinations-overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/toxic-combinations-manage" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/toxic-combinations-manage" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/toxic-combinations-manage" ><span class="devsite-nav-text" tooltip>Manage toxic combinations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Assess software vulnerabilities</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Assess vulnerabilities on Google Cloud</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-sources#vm_manager" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-sources#vm_manager" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-sources#vm_manager" ><span class="devsite-nav-text" tooltip>VM Manager</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-sources#gke-security-posture-dashboard" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-sources#gke-security-posture-dashboard" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-sources#gke-security-posture-dashboard" ><span class="devsite-nav-text" tooltip>Kubernetes security posture scanning</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Assess vulnerabilities on AWS</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/vulnerability-assessment-aws-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/vulnerability-assessment-aws-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/vulnerability-assessment-aws-overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/vulnerability-assessment-aws-enable" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/vulnerability-assessment-aws-enable" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/vulnerability-assessment-aws-enable" ><span class="devsite-nav-text" tooltip>Enable and use Vulnerability Assessment for AWS</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/update-aws-settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/update-aws-settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/update-aws-settings" ><span class="devsite-nav-text" tooltip>Modify or disable AWS settings for vulnerabilities</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/vulnerability-assessment-aws-role-policy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/vulnerability-assessment-aws-role-policy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/vulnerability-assessment-aws-role-policy" ><span class="devsite-nav-text" tooltip>Role policy for Vulnerability Assessment for AWS</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Assess vulnerabilities in web applications</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-web-security-scanner-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-web-security-scanner-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-web-security-scanner-overview" ><span class="devsite-nav-text" tooltip>Web Security Scanner overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-web-security-scanner" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-web-security-scanner" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-web-security-scanner" ><span class="devsite-nav-text" tooltip>Use Web Security Scanner</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-web-security-scanner-custom-scans" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-web-security-scanner-custom-scans" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-web-security-scanner-custom-scans" ><span class="devsite-nav-text" tooltip>Set up custom scans using Web Security Scanner</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-remediate-web-security-scanner-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-remediate-web-security-scanner-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-remediate-web-security-scanner-findings" ><span class="devsite-nav-text" tooltip>Remediate Web Security Scanner findings</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Assess misconfigurations</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect misconfigurations across cloud platforms</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-health-analytics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-health-analytics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-health-analytics" ><span class="devsite-nav-text" tooltip>Security Health Analytics overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-use-security-health-analytics" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-use-security-health-analytics" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-use-security-health-analytics" ><span class="devsite-nav-text" tooltip>Use Security Health Analytics</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-remediate-security-health-analytics-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-remediate-security-health-analytics-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-remediate-security-health-analytics-findings" ><span class="devsite-nav-text" tooltip>Remediate Security Health Analytics findings</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Custom modules for Security Health Analytics</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/custom-modules-sha-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/custom-modules-sha-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/custom-modules-sha-overview" ><span class="devsite-nav-text" tooltip>Overview of custom modules for Security Health Analytics</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/custom-modules-sha-create" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/custom-modules-sha-create" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/custom-modules-sha-create" ><span class="devsite-nav-text" tooltip>Use custom modules with Security Health Analytics</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/custom-modules-sha-code" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/custom-modules-sha-code" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/custom-modules-sha-code" ><span class="devsite-nav-text" tooltip>Code custom modules for Security Health Analytics</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/custom-modules-sha-test" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/custom-modules-sha-test" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/custom-modules-sha-test" ><span class="devsite-nav-text" tooltip>Test custom modules for Security Health Analytics</span></a></li></ul></div></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Detect identity and access misconfigurations across cloud platforms</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/ciem-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/ciem-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/ciem-overview" ><span class="devsite-nav-text" tooltip>Cloud Infrastructure Entitlement Management overview</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/ciem-enable-service" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/ciem-enable-service" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/ciem-enable-service" ><span class="devsite-nav-text" tooltip>Enable the CIEM detection service</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/ciem-identity-access-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/ciem-identity-access-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/ciem-identity-access-findings" ><span class="devsite-nav-text" tooltip>Investigate identity and access findings</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/ciem-identity-access-cases" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/ciem-identity-access-cases" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/ciem-identity-access-cases" ><span class="devsite-nav-text" tooltip>Review cases for identity and access issues</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-security-sources#dlp" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-security-sources#dlp" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-security-sources#dlp" ><span class="devsite-nav-text" tooltip>Send Sensitive Data Protection results to Security Command Center</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-vulnerabilities-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-vulnerabilities-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-vulnerabilities-findings" ><span class="devsite-nav-text" tooltip>Vulnerabilities finding reference</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Protect your AI applications</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/model-armor-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/model-armor-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/model-armor-overview" ><span class="devsite-nav-text" tooltip>Model Armor overview</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/key-concepts-model-armor" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/key-concepts-model-armor" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/key-concepts-model-armor" ><span class="devsite-nav-text" tooltip>Key concepts</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/get-started-model-armor" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/get-started-model-armor" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/get-started-model-armor" ><span class="devsite-nav-text" tooltip>Get started with Model Armor</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/model_armor_floor_settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/model_armor_floor_settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/model_armor_floor_settings" ><span class="devsite-nav-text" tooltip>Model Armor floor settings</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/manage-model-armor-templates" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/manage-model-armor-templates" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/manage-model-armor-templates" ><span class="devsite-nav-text" tooltip>Create and manage Model Armor templates</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/sanitize-prompts-responses" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/sanitize-prompts-responses" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/sanitize-prompts-responses" ><span class="devsite-nav-text" tooltip>Sanitize prompts and responses</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/audit-logging-model-armor" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/audit-logging-model-armor" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/audit-logging-model-armor" ><span class="devsite-nav-text" tooltip>Model Armor audit logging</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Manage compliance</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/compliance-management" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/compliance-management" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/compliance-management" ><span class="devsite-nav-text" tooltip>Assess and report compliance</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Enhance code security</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-configure-support-for-vpc-sc" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-configure-support-for-vpc-sc" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-configure-support-for-vpc-sc" ><span class="devsite-nav-text" tooltip>Configure Assured OSS support for VPC Service Controls</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-remote-repository-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-remote-repository-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-remote-repository-access" ><span class="devsite-nav-text" tooltip>Set up remote repository access</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Set up direct repository access</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-download-java-packages" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-download-java-packages" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-download-java-packages" ><span class="devsite-nav-text" tooltip>Download Java packages</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-download-python-packages" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-download-python-packages" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-download-python-packages" ><span class="devsite-nav-text" tooltip>Download Python packages</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-security-metadata-fields" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-security-metadata-fields" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-security-metadata-fields" ><span class="devsite-nav-text" tooltip>Security metadata fields</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-access-security-metadata" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-access-security-metadata" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-access-security-metadata" ><span class="devsite-nav-text" tooltip>Access security metadata and verify packages</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/aoss-supported-packages-premium" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/aoss-supported-packages-premium" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/aoss-supported-packages-premium" ><span class="devsite-nav-text" tooltip>List of supported Java and Python packages</span></a></li> <li class="devsite-nav-item devsite-nav-preview"><a href="/security-command-center/docs/code-security-findings-snyk" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/code-security-findings-snyk" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/code-security-findings-snyk" ><span class="devsite-nav-text" tooltip>Review code-related security findings from Snyk</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Use the Security Command Center API</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-list-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-list-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-list-findings" ><span class="devsite-nav-text" tooltip>List security findings</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-add-manage-security-marks" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-add-manage-security-marks" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-add-manage-security-marks" ><span class="devsite-nav-text" tooltip>Add and manage security marks</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create, manage, and filter Notification Configs</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-manage-notifications" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-manage-notifications" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-manage-notifications" ><span class="devsite-nav-text" tooltip>Create and manage Notification Configs</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-filter-notifications" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-filter-notifications" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-filter-notifications" ><span class="devsite-nav-text" tooltip>Filter notifications</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create and manage security sources and findings</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-create-manage-security-sources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-create-manage-security-sources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-create-manage-security-sources" ><span class="devsite-nav-text" tooltip>Create and manage security sources</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-create-manage-findings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-create-manage-findings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-create-manage-findings" ><span class="devsite-nav-text" tooltip>Create and manage security findings</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Discover and list assets</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-configure-asset-discovery" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-configure-asset-discovery" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-configure-asset-discovery" ><span class="devsite-nav-text" tooltip>Configure asset discovery</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-api-list-assets" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-api-list-assets" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-api-list-assets" ><span class="devsite-nav-text" tooltip>List assets</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Monitor</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Audit logging</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/security-command-center/docs/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/audit-logging" ><span class="devsite-nav-text" tooltip>Security Command Center</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/audit-logging-security-center-management" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/audit-logging-security-center-management" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/audit-logging-security-center-management" ><span class="devsite-nav-text" tooltip>Security Command Center Management</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/audit-logging-web-security" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/audit-logging-web-security" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/audit-logging-web-security" ><span class="devsite-nav-text" tooltip>Web Security Scanner</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/audit-logging-security-posture" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/audit-logging-security-posture" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/audit-logging-security-posture" ><span class="devsite-nav-text" tooltip>Security Posture</span></a></li><li class="devsite-nav-item"><a href="/security-command-center/docs/audit-logging-aoss" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/audit-logging-aoss" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/audit-logging-aoss" ><span class="devsite-nav-text" tooltip>Assured Open Source Software</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Troubleshoot</span> </div></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/troubleshooting" ><span class="devsite-nav-text" tooltip>Troubleshooting</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/concepts-scc-errors" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/concepts-scc-errors" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/concepts-scc-errors" ><span class="devsite-nav-text" tooltip>Configuration error findings</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/how-to-remediate-scc-errors" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/how-to-remediate-scc-errors" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/how-to-remediate-scc-errors" ><span class="devsite-nav-text" tooltip>Remediate configuration error findings</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/error-messages" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/error-messages" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/error-messages" ><span class="devsite-nav-text" tooltip>Error messages</span></a></li> <li class="devsite-nav-item"><a href="/security-command-center/docs/faq" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /security-command-center/docs/faq" track-type="bookNav" track-name="click" track-metadata-eventdetail="/security-command-center/docs/faq" ><span class="devsite-nav-text" tooltip>FAQ</span></a></li> </ul> <ul class="devsite-nav-list" menu="Technology areas" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/ai-ml" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: AI and ML" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > AI and ML </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-development" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application development" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application development </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-hosting" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application hosting" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application hosting </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/compute-area" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Compute" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Compute </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/data" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Data analytics and pipelines" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Data analytics and pipelines </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/databases" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Databases" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Databases </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/dhm-cloud" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Distributed, hybrid, and multicloud" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Distributed, hybrid, and multicloud </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/generative-ai" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Generative AI" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Generative AI </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/industry" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Industry solutions" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Industry solutions </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/networking" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Networking" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Networking </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/observability" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Observability and monitoring" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Observability and monitoring </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/security" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Security" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Security </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/storage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Storage" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Storage </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Cross-product tools" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/access-resources" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Access and resources management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Access and resources management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/costs-usage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Costs and usage management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Costs and usage management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/devtools" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud SDK, languages, frameworks, and tools" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud SDK, languages, frameworks, and tools </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/iac" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Infrastructure as code" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Infrastructure as code </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/migration" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Migration" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Migration </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Related sites" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Home" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Home </span> </a> </li> <li class="devsite-nav-item"> <a href="/free" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Free Trial and Free Tier" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Free Trial and Free Tier </span> </a> </li> <li class="devsite-nav-item"> <a href="/architecture" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Architecture Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Architecture Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Blog" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Blog </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Sales" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Sales </span> </a> </li> <li class="devsite-nav-item"> <a href="/developers" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace </span> </a> </li> <li class="devsite-nav-item"> <a href="/marketplace/docs" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace Documentation" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace Documentation </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Skills Boost" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Skills Boost </span> </a> </li> <li class="devsite-nav-item"> <a href="/solutions" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Solution Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Solution Center </span> </a> </li> <li class="devsite-nav-item"> <a href="/support-hub" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Support" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Support </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Tech Youtube Channel" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Tech Youtube Channel </span> </a> </li> </ul> </div> </div> </nav> </devsite-book-nav> <section id="gc-wrapper"> <main role="main" id="main-content" class="devsite-main-content" has-book-nav has-sidebar > <div class="devsite-sidebar"> <div class="devsite-sidebar-content"> <devsite-toc class="devsite-nav" role="navigation" aria-label="On this page" depth="2" scrollbars ></devsite-toc> <devsite-recommendations-sidebar class="nocontent devsite-nav"> </devsite-recommendations-sidebar> </div> </div> <devsite-content> <article class="devsite-article"><style> /* Styles inlined from /security-command-center/css/tiers.css */ body[type=article] p.scc-tiers { font-size: 0.9rem; font-style: italic; margin-block-start: -1rem; } body[type=article] h2 + p.scc-tiers, body[type=article] h3 + p.scc-tiers { margin-block-start: -1.25rem; } </style> <div class="devsite-article-meta nocontent" role="navigation"> <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb"> <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud" > Home </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/security-command-center" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="Security Command Center" > Security Command Center </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/security-command-center/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="3" track-type="globalNav" track-name="breadcrumb" track-metadata-position="3" track-metadata-eventdetail="Security Command Center" > Documentation </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/security-command-center/docs/security-command-center-overview" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="4" track-type="globalNav" track-name="breadcrumb" track-metadata-position="4" track-metadata-eventdetail="" > Guides </a> </li> </ul> <devsite-thumb-rating position="header"> </devsite-thumb-rating> </div> <devsite-feedback position="header" project-name="Security Command Center" product-id="5059916" bucket="Documentation" context="Security Command Center feedback link" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="header" class="nocontent" project-feedback-url="https://issuetracker.google.com/issues/new?component=709980&template=1322867" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" project-support-url="https://cloud.google.com/security-command-center/docs/support" > <button> Send feedback </button> </devsite-feedback> <h1 class="devsite-page-title" tabindex="-1"> Remediating Web Security Scanner findings </h1> <devsite-feature-tooltip ack-key="AckCollectionsBookmarkTooltipDismiss" analytics-category="Site-Wide Custom Events" analytics-action-show="Callout Profile displayed" analytics-action-close="Callout Profile dismissed" analytics-label="Create Collection Callout" class="devsite-page-bookmark-tooltip nocontent" dismiss-button="true" id="devsite-collections-dropdown" dismiss-button-text="Dismiss" close-button-text="Got it"> <devsite-bookmark></devsite-bookmark> <span slot="popout-heading"> Stay organized with collections </span> <span slot="popout-contents"> Save and categorize content based on your preferences. </span> </devsite-feature-tooltip> <div class="devsite-page-title-meta"><devsite-view-release-notes></devsite-view-release-notes></div> <devsite-toc class="devsite-nav" depth="2" devsite-toc-embedded > </devsite-toc> <div class="devsite-article-body clearfix "> <p>This page explains how to interpret, reproduce, and remediate Web Security Scanner findings.</p> <p> The IAM roles for Security Command Center can be granted at the organization, folder, or project level. Your ability to view, edit, create, or update findings, assets, and security sources depends on the level for which you are granted access. To learn more about Security Command Center roles, see <a href="/security-command-center/docs/access-control">Access control</a>. </p> <h2 id="vulnerability_classes" data-text="Vulnerability classes" tabindex="-1">Vulnerability classes</h2> <p>Web Security Scanner detects the following classes of vulnerabilities:</p> <ul> <li>Cross-site scripting (XSS)</li> <li>Server-side request forgery</li> <li>Flash injection</li> <li>Mixed-content</li> <li>Outdated or vulnerable libraries</li> <li>Clear text passwords</li> <li>Insecure origin validation</li> <li>Invalid headers</li> <li>Misspelled headers</li> <li>Accessible repositories</li> <li>SQL injection</li> <li>XML injection</li> <li>Prototype pollution</li> </ul> <p>If any of these vulnerabilities are found, then the result is highlighted for you to explore in detail.</p> <h2 id="impact_on_logs" data-text="Impact on logs" tabindex="-1">Impact on logs</h2> <p>Traces of Web Security Scanner scans appear in your log files. For example, Web Security Scanner generates requests for unusual strings like <code translate="no" dir="ltr">~sfi9876</code> and <code translate="no" dir="ltr">/sfi9876</code>. This process enables the scan to examine your application's error pages. These intentionally invalid page requests appear in your logs.</p> <h2 id="finding-deactivation" data-text="Deactivation of findings after remediation" tabindex="-1">Deactivation of findings after remediation</h2> <p>After you remediate a vulnerability, Web Security Scanner does not automatically set the state of the corresponding Security Command Center finding to <code translate="no" dir="ltr">INACTIVE</code>. Unless you change the state manually, the state of findings that are generated by Web Security Scanner in Security Command Center remain <code translate="no" dir="ltr">ACTIVE</code>.</p> <p>If you are using the standalone version of Web Security Scanner, after you remediate a vulnerability and Web Security Scanner can no longer detect it, subsequent vulnerability reports do not include the vulnerability. A record of the vulnerability remains in the past vulnerability reports.</p> <p>Web Security Scanner runs managed scans weekly.</p> <p>For more information about Web Security Scanner scans, see <a href="/security-command-center/docs/concepts-web-security-scanner-overview#scan_types">Scan types</a>.</p> <h2 id="remediate-findings" data-text="Remediating Web Security Scanner findings" tabindex="-1">Remediating Web Security Scanner findings</h2> <p>This section explains how to remediate different types of Web Security Scanner findings. For strategies to defend against common application-level attacks that are outlined in <a href="https://owasp.org/www-project-top-ten/">OWASP Top 10</a>, see <a href="/architecture/owasp-top-ten-mitigation">OWASP Top 10 mitigation options on Google Cloud</a>.</p> <h3 id="xss" data-text="XSS" tabindex="-1"><code translate="no" dir="ltr">XSS</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">XSS</code></p> <p>Web Security Scanner cross-site scripting (XSS) injection testing simulates an injection attack by inserting a benign test string into user-editable fields and then performing various user actions. Custom detectors observe the browser and DOM during this test to determine whether an injection was successful and assess its potential for exploitation.</p> <p>If the JavaScript contained within the test string cleanly executes, it starts the Chrome debugger. When a test string is able to execute, it's possible to inject and run JavaScript on the page. If an attacker found this issue, they could execute JavaScript of their choosing as the user (victim) who clicks a malicious link.</p> <p>In some circumstances, the application under test might modify the test string before it's parsed by the browser. For example, the application might validate the input or limit the size of a field. When the browser tries to run this modified test string, it is likely to break and throw a JavaScript execution error. The error indicates an injection issue, but it might not be possible to exploit it.</p> <p>To address this issue, you need to confirm if the issue is an XSS vulnerability by manually verifying if the test string modifications can be evaded. For detailed information about how to verify this vulnerability, see <a href="https://www.google.com/about/appsecurity/learning/xss/" class="external">Cross-site scripting</a>.</p> <p>There are various ways to fix this issue. The recommended fix is to escape all output and use a templating system that supports contextual auto-escaping.</p> <h3 id="xss_angular_callback" data-text="XSS angular callback" tabindex="-1"><code translate="no" dir="ltr">XSS angular callback</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">XSS_ANGULAR_CALLBACK</code></p> <p>A cross-site scripting (XSS) vulnerability in AngularJS modules can occur when Angular interpolates a user-provided string. Injecting user-provided values into an AngularJS interpolation can allow the following attacks:</p> <ul> <li>An attacker can inject arbitrary code into the page rendered by browsers.</li> <li>An attacker can perform actions on behalf of the victim browser in the page's origin.</li> </ul> <p>To reproduce this potential vulnerability, follow the Reproduction URL link in the Google Cloud console after you run the scan. This link directly opens an alert dialog or injects the string <code translate="no" dir="ltr">XSSDETECTED</code> to prove that the attack can execute code. If the string is injected, you can open the developer tools of your browser and search for <code translate="no" dir="ltr">XSSDETECTED</code> to find the exact position of the injection.</p> <h3 id="xss_error" data-text="XSS error" tabindex="-1"><code translate="no" dir="ltr">XSS error</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">XSS_ERROR</code></p> <p>An <code translate="no" dir="ltr">XSS_ERROR</code> finding is a potential XSS bug due to JavaScript breakage. In some circumstances, the application under test might modify the test string before the browser parses it. When the browser tries to run this modified test string, it is likely to break and throw a JavaScript execution error. This error indicates an injection issue, but it might not be possible to exploit it.</p> <p>To address this issue, you need to confirm if the issue is an XSS vulnerability by manually verifying if the test string modifications can be evaded. For detailed information about how to verify this vulnerability, see <a href="https://www.google.com/about/appsecurity/learning/xss/" class="external">Cross-site scripting</a>.</p> <h3 id="server_side_request_forgery" data-text="Server side request forgery" tabindex="-1"><code translate="no" dir="ltr">Server side request forgery</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">SERVER_SIDE_REQUEST_FORGERY</code></p> <p>A <code translate="no" dir="ltr">SERVER_SIDE_REQUEST_FORGERY</code> vulnerability lets a web application user gain access to internal data by forcing a server to make a request (like an HTTP request) to a restricted service endpoint. For example, an attacker can exploit this vulnerability to retrieve data from the Google Cloud metadata service.</p> <p>To fix this issue, use an allowlist to limit the domains and IP addresses that the web application can make requests to.</p> <h3 id="rosetta_flash" data-text="Rosetta flash" tabindex="-1"><code translate="no" dir="ltr">Rosetta flash</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">ROSETTA_FLASH</code></p> <p>Web Security Scanner might find that the value of a request parameter is reflected back at the beginning of a response, for example, in requests using JSONP. This vulnerability is also known as flash injection. Under certain circumstances, an attacker can cause the browser to execute the response as if it was a Flash file provided by the vulnerable web application.</p> <p>To fix this issue, don't include user controllable data at the start of an HTTP response.</p> <h3 id="mixed_content" data-text="Mixed content" tabindex="-1"><code translate="no" dir="ltr">Mixed content</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">MIXED_CONTENT</code></p> <p>Web Security Scanner passively observes the HTTP traffic and detects when a request for a JavaScript or CSS file is performed over HTTP while in the context of an HTTPS page. In this scenario, a man-in-the-middle attacker could tamper with the HTTP resource and gain full access to the website that loads the resource or to monitor the actions taken by users.</p> <p>To fix this issue, use relative HTTP links, for example, replace <code translate="no" dir="ltr">http://</code> with <code translate="no" dir="ltr">//</code>.</p> <h3 id="outdated_library" data-text="Outdated library" tabindex="-1"><code translate="no" dir="ltr">Outdated library</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">OUTDATED_LIBRARY</code></p> <p>Web Security Scanner might find that the version of an included library is known to contain a security issue. Web Security Scanner is a signature-based scanner that attempts to identify the version of the library in use and checks the version against a known list of vulnerable libraries. False positives are possible if the version detection fails or if the library has been manually patched.</p> <p>To fix this issue, update to a known secure version of the included library.</p> <h3 id="struts_insecure_deserialization" data-text="Struts insecure deserialization" tabindex="-1"><code translate="no" dir="ltr">Struts insecure deserialization</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">STRUTS_INSECURE_DESERIALIZATION</code></p> <p>Web Security Scanner might find that your web application is using an <a href="https://struts.apache.org/">Apache Struts</a> version that is vulnerable to remote command injection attacks. The affected Struts versions can incorrectly parse an attacker's invalid Content-Type HTTP header. This vulnerability allows the malicious commands to be executed under the privileges of the web server.</p> <p>The following are the vulnerable Apache Struts versions:</p> <ul> <li>2.3.x versions earlier than 2.3.32</li> <li>2.5.x versions earlier than 2.5.10.1</li> </ul> <p>To fix this issue, upgrade Apache Struts to the latest version.</p> <p>For more information on the Apache Struts vulnerability, see <a href="https://nvd.nist.gov/vuln/detail/cve-2017-5638">CVE-2017-5638</a>.</p> <h3 id="cacheable_password_input" data-text="Cacheable password input" tabindex="-1"><code translate="no" dir="ltr">Cacheable password input</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">CACHEABLE_PASSWORD_INPUT</code></p> <p>Web Security Scanner might find that for a password input, the web application uses an <code translate="no" dir="ltr"><input></code> element that doesn't have the <code translate="no" dir="ltr">type</code> attribute set to <code translate="no" dir="ltr">password</code>. This can cause browsers to cache the user-entered password in the regular browser cache instead of a secure password storage.</p> <p>To fix this issue, in the <code translate="no" dir="ltr"><input></code> element, add the <code translate="no" dir="ltr">type</code> attribute and set it to <code translate="no" dir="ltr">password</code>—for example, <code translate="no" dir="ltr"><input type="password"></code>. This attribute obscures the characters that the user enters in the password field.</p> <h3 id="clear_text_password" data-text="Clear text password" tabindex="-1"><code translate="no" dir="ltr">Clear text password</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">CLEAR_TEXT_PASSWORD</code></p> <p>Web Security Scanner might find that the application appears to be transmitting a password field in clear text. An attacker can eavesdrop network traffic and sniff the password field.</p> <p>To protect sensitive information that passes between client and server, always take the following precautions:</p> <ul> <li>Use TLS/SSL certificates.</li> <li>Always use HTTPS on pages that include password fields.</li> <li>Make sure that form action attributes always point to an HTTPS URL.</li> </ul> <h3 id="insecure_allow_origin_ends_with_validation" data-text="Insecure allow origin ends with validation" tabindex="-1"><code translate="no" dir="ltr">Insecure allow origin ends with validation</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">INSECURE_ALLOW_ORIGIN_ENDS_WITH_VALIDATION</code></p> <p>Web Security Scanner might find that a cross-site HTTP or HTTPS endpoint validates only a suffix of the <code translate="no" dir="ltr">Origin</code> request header before reflecting it inside the <code translate="no" dir="ltr">Access-Control-Allow-Origin</code> response header. If validation is misconfigured, the endpoint might grant access to a malicious domain that has the same suffix as an allowlisted domain. For example, if the endpoint's validator matches domains like <code translate="no" dir="ltr">*google.com</code>, it might erroneously grant access to <code translate="no" dir="ltr">maliciousdomaingoogle.com</code>.</p> <p>To fix this issue, validate that the expected root domain is part of the <code translate="no" dir="ltr">Origin</code> header value before reflecting it in the <code translate="no" dir="ltr">Access-Control-Allow-Origin</code> response header. For subdomain wildcards, prepend the dot to the root domain—for example, <code translate="no" dir="ltr">.endsWith(".google.com")</code>.</p> <h3 id="insecure_allow_origin_starts_with_validation" data-text="Insecure allow origin starts with validation" tabindex="-1"><code translate="no" dir="ltr">Insecure allow origin starts with validation</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">INSECURE_ALLOW_ORIGIN_STARTS_WITH_VALIDATION</code></p> <p>Web Security Scanner might find that a cross-site HTTP or HTTPS endpoint validates only a prefix of the <code translate="no" dir="ltr">Origin</code> request header before reflecting it inside the <code translate="no" dir="ltr">Access-Control-Allow-Origin</code> response header. If validation is misconfigured, the endpoint might grant access to a malicious domain that has the same prefix as an allowlisted domain. For example, if the endpoint's validator only checks if the requesting domain contains <code translate="no" dir="ltr">google.com</code>, it might erroneously grant access to <code translate="no" dir="ltr">google.com.maliciousdomain.com</code>.</p> <p>To fix this finding, validate that the expected domain fully matches the <code translate="no" dir="ltr">Origin</code> header value before reflecting it in the <code translate="no" dir="ltr">Access-Control-Allow-Origin</code> response header—for example, <code translate="no" dir="ltr">.equals(".google.com")</code>.</p> <h3 id="session_id_leak" data-text="Session ID leak" tabindex="-1"><code translate="no" dir="ltr">Session ID leak</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">SESSION_ID_LEAK</code></p> <p>Web Security Scanner might find a session identifier in the <code translate="no" dir="ltr">Referer</code> request header of your web application's cross-domain requests. Domains receiving the <code translate="no" dir="ltr">Referer</code> can use the session identifier to impersonate a user (by using their token) or uniquely identify the user.</p> <p>To fix this finding, store session identifiers in cookies, instead of the URL. In addition, secure your cookies using the following attributes:</p> <ul> <li><a href="https://owasp.org/www-community/HttpOnly">HTTPOnly</a>: an attribute that makes cookies inaccessible to client-side scripts</li> <li><a href="https://owasp.org/www-community/controls/SecureCookieAttribute">Secure</a>: an attribute that makes cookies transmissible through HTTPS only</li> </ul> <h3 id="invalid_content_type" data-text="Invalid content type" tabindex="-1"><code translate="no" dir="ltr">Invalid content type</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">INVALID_CONTENT_TYPE</code></p> <p>Web Security Scanner might find that a resource was loaded that doesn't match the response's Content-Type HTTP header. In this scenario, the application returns sensitive content with an invalid content type, or without an <code translate="no" dir="ltr">X-Content-Type-Options: nosniff</code> header.</p> <p>To fix this issue, ensure the following:</p> <ul> <li>JSON responses are served with the Content-Type header <code translate="no" dir="ltr">application/json</code></li> <li>Other sensitive responses are served with appropriate MIME types</li> <li>Serve content with the HTTP header <code translate="no" dir="ltr">X-Content-Type-Options: nosniff</code></li> </ul> <h3 id="invalid_header" data-text="Invalid header" tabindex="-1"><code translate="no" dir="ltr">Invalid header</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">INVALID_HEADER</code></p> <p>Web Security Scanner might find that a security header has a syntax error, resulting in a malformed or invalid valued header. As a result, the browser ignores these headers.</p> <p>Valid headers are described in the following sections.</p> <h4 id="referrer-policy_header" data-text="Referrer-Policy header" tabindex="-1">Referrer-Policy header</h4> <p>A <a href="https://www.w3.org/TR/referrer-policy/#referrer-policies">valid referrer policy</a> contains one of the following values:</p> <ul> <li>An empty string</li> <li><code translate="no" dir="ltr">no-referrer</code></li> <li><code translate="no" dir="ltr">no-referrer-when-downgrade</code></li> <li><code translate="no" dir="ltr">same-origin</code></li> <li><code translate="no" dir="ltr">origin</code></li> <li><code translate="no" dir="ltr">strict-origin</code></li> <li><code translate="no" dir="ltr">origin-when-cross-origin</code></li> <li><code translate="no" dir="ltr">strict-origin-when-cross-origin</code></li> <li><code translate="no" dir="ltr">unsafe-url</code></li> </ul> <h4 id="x-frame-options_header" data-text="X-Frame-Options header" tabindex="-1">X-Frame-Options header</h4> <p>A valid X-Frame-Options header can only have the following values:</p> <ul> <li><code translate="no" dir="ltr">DENY</code>: disallow all framing</li> <li><code translate="no" dir="ltr">SAMEORIGIN</code>: allow framing if the top-level URL is same origin</li> <li><code translate="no" dir="ltr">ALLOW-FROM URL</code></li> </ul> <p>Chrome does not support <code translate="no" dir="ltr">ALLOW-FROM URL</code>. Multiple X-Frame-Options are not allowed.</p> <h4 id="x-content-type-options_header" data-text="X-Content-Type-Options header" tabindex="-1">X-Content-Type-Options header</h4> <p>A valid X-Content-Type-Options header can only have one value: <code translate="no" dir="ltr">nosniff</code>.</p> <h4 id="x-xss-protection_header" data-text="X-XSS-Protection header" tabindex="-1">X-XSS-Protection header</h4> <p>A valid X-XSS-Protection header must start with either <code translate="no" dir="ltr">0</code> ("disable") or <code translate="no" dir="ltr">1</code> ("enable"). Then, only if you enable the protection, you can add up to two options:</p> <ul> <li><code translate="no" dir="ltr">mode=block</code> shows a blank page instead of filtering the XSS</li> <li><code translate="no" dir="ltr">report=URL</code> sends reports to <code translate="no" dir="ltr">URL</code></li> </ul> <p>Separate options with semicolons, for example <code translate="no" dir="ltr">1; mode=block; report=URI</code>. Make sure that you don't have a trailing semicolon.</p> <h3 id="misspelled_security_header_name" data-text="Misspelled security header name" tabindex="-1"><code translate="no" dir="ltr">Misspelled security header name</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">MISSPELLED_SECURITY_HEADER_NAME</code></p> <p>Web Security Scanner might find a misspelled security header name. In its misspelled form, the security header is ineffective and must be fixed.</p> <p>To reproduce this vulnerability, check for the misspelling in the network tab of your browser's developer tools.</p> <h3 id="mismatching_security_header_values" data-text="Mismatching security header values" tabindex="-1"><code translate="no" dir="ltr">Mismatching security header values</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">MISMATCHING_SECURITY_HEADER_VALUES</code></p> <p>Web Security Scanner might find that the response has duplicated, security-related response headers with conflicting values. Some security-related HTTP headers have undefined behavior if declared twice in the response with mismatching values.</p> <p>To fix this issue, keep only one of these mismatching headers.</p> <h3 id="accessible_repository" data-text="Accessible repository" tabindex="-1">Accessible repository</h3> <p>Web Security Scanner might find an accessible GIT or SVN repository in the application. This condition can lead to configuration and source code leaks.</p> <p>To reproduce the vulnerability, click the reproduction URL in the finding report.</p> <h3 id="xxe_reflected_file_leakage" data-text="XXE reflected file leakage" tabindex="-1"><code translate="no" dir="ltr">XXE reflected file leakage</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">XXE_REFLECTED_FILE_LEAKAGE</code></p> <p>Web Security Scanner might find an XML External Entity (XXE) vulnerability on a web application that parses XML from user inputs. An attacker can provide an XML that contains an external entity. This external entity can reference content that the application has access to—for example, files on the application's host machine. When the application's XML parser processes the malicious XML, it can leak the contents of files on its host.</p> <p>To fix this finding, configure your XML parsers to disallow external entities.</p> <p>For more information on this vulnerability, see <a href="https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing">XML External Entity (XXE) Processing</a>.</p> <h3 id="sql_injection" data-text="SQL injection" tabindex="-1"><code translate="no" dir="ltr">SQL injection</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">SQL_INJECTION</code></p> <p>Web Security Scanner might find an SQL injection vulnerability. Attackers can create inputs that manipulate the query structure of the underlying SQL query running on the server. These inputs let them exfiltrate data from the database and, in some cases, modify data. To resolve this finding, use parameterized queries to prevent user input from influencing the structure of the SQL query.</p> <p>For more information on this vulnerability, see <a href="https://owasp.org/www-community/attacks/SQL_Injection">SQL Injection</a>.</p> <h3 id="prototype_pollution" data-text="Prototype pollution" tabindex="-1"><code translate="no" dir="ltr">Prototype pollution</code></h3> <p>Category name in the API: <code translate="no" dir="ltr">PROTOTYPE_POLLUTION</code></p> <p>Web Security Scanner might find a prototype pollution vulnerability on a web application whose object properties are assigned attacker-controllable values. Attackers can create inputs that make the application vulnerable to cross-site scripting or other client-side vulnerabilities.</p> <p>To fix this finding, delete the deprecated <code translate="no" dir="ltr"><strong>proto</strong></code> property and make the <code translate="no" dir="ltr">Object.prototype</code> object immutable. If this mitigation is incompatible with your code, change the vulnerable code portion to only copy expected values from attacker-controllable inputs.</p> <h2 id="verify_the_issue" data-text="Verify the issue" tabindex="-1">Verify the issue</h2> <aside class="special"><strong>Important:</strong><span> If you disable browser protections for testing, do not use the browser for anything other than testing your own security issues.</span></aside> <p>When Web Security Scanner reports an issue, you need to verify the issue's location. This section explains how to use finding reports to reproduce and verify vulnerabilities.</p> <ol> <li><p>Go to the Web Security Scanner page in the Google Cloud console.</p> <p><a href="https://console.cloud.google.com/security/web-scanner" target="console" track-type="quickstart" track-name="consoleLink" class="button button-primary">Go to Web Security Scanner</a> </p></li> <li><p>Select a project. A page appears with a list of your managed and custom scans.</p></li> <li><p>Under <strong>Scan configs</strong>, select the scan that contains the finding you want to verify. A page opens with details for the scan.</p></li> <li><p>Navigate to the <strong>Results</strong> tab, expand a category, and select a finding to see its details.</p></li> <li><p>The verification method differs based on the finding category. Use a test browser and follow the instructions below.</p> <ul> <li><strong>Cross-site scripting</strong>: Following the <strong>Reproduction URL</strong> produces an empty popup in the browser, indicating the scan successfully injected benign code into a script.</li> <li><strong>Outdated library</strong>: Following the <strong>Vulnerable URL</strong> returns a page with the text "Exploited," indicating the scan successfully injected benign code into a script.</li> <li><strong>Mixed content</strong> Following the <strong>URL of the HTTPS page</strong> returns a warning about a mixed content vulnerability. The finding report identifies the vulnerable resource under <strong>URL of the resource served over HTTP</strong>.</li> <li><strong>Flash injection</strong>: Web Security Scanner may return findings in this category, but most modern browsers are protected against flash injection. It is unlikely that these findings can be exploited.</li> <li><strong>Prototype pollution</strong>: Follow the URL in the <strong>Reproduction URL</strong> field and search for changes on the <code translate="no" dir="ltr">Object.prototype</code> object introduced by the payload, with the following JavaScript snippets. <ul> <li><code translate="no" dir="ltr">({}).__secret_injected_property</code></li> <li><code translate="no" dir="ltr">({}).__defineGetter__.__secret_injected_property</code></li> <li><code translate="no" dir="ltr">({}).hasOwnProperty.__secret_injected_property</code></li> </ul></li> </ul></li> </ol> <p>Content Security Policy (CSP) enforcement might still prevent the JavaScript code from running. This condition can make it more difficult to reproduce the XSS. If you experience this issue, check the browser log console for details about the CSP violation that occurred.</p> <devsite-hats-survey class="nocontent" hats-id="mwETRvWii0eU5NUYprb0Y9z5GVbc" listnr-id="83405"></devsite-hats-survey> </div> <devsite-thumb-rating position="footer"> </devsite-thumb-rating> <devsite-feedback position="footer" project-name="Security Command Center" product-id="5059916" bucket="Documentation" context="Security Command Center feedback link" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="footer" class="nocontent" project-feedback-url="https://issuetracker.google.com/issues/new?component=709980&template=1322867" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" project-support-url="https://cloud.google.com/security-command-center/docs/support" > <button> Send feedback </button> </devsite-feedback> <div class="devsite-floating-action-buttons"> </div> </article> <devsite-content-footer class="nocontent"> <p>Except as otherwise noted, the content of this page is licensed under the <a href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 License</a>, and code samples are licensed under the <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache 2.0 License</a>. For details, see the <a href="https://developers.google.com/site-policies">Google Developers Site Policies</a>. Java is a registered trademark of Oracle and/or its affiliates.</p> <p>Last updated 2025-02-14 UTC.</p> </devsite-content-footer> <devsite-notification > </devsite-notification> <div class="devsite-content-data"> <template class="devsite-thumb-rating-feedback"> <devsite-feedback position="thumb-rating" project-name="Security Command Center" product-id="5059916" bucket="Documentation" context="Security Command Center feedback link" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="thumb-rating" class="nocontent" project-feedback-url="https://issuetracker.google.com/issues/new?component=709980&template=1322867" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" project-support-url="https://cloud.google.com/security-command-center/docs/support" > <button> Need to tell us more? </button> </devsite-feedback> </template> <template class="devsite-content-data-template"> [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-02-14 UTC."],[],[]] </template> </div> </devsite-content> </main> <devsite-footer-promos class="devsite-footer"> </devsite-footer-promos> <devsite-footer-linkboxes class="devsite-footer"> <nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links"> <ul class="devsite-footer-linkboxes-list"> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Why Google</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/why-google-cloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-name="choosing google cloud"track-metadata-module="footer"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/why-google-cloud/"track-type="footer link"track-metadata-child_headline="why google"> Choosing Google Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/trust-center/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="cloud.google.com/security/"track-metadata-child_headline="why google"track-metadata-position="footer"track-type="footer link"track-name="trust and security"track-metadata-module="footer"> Trust and security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/modern-infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-module="footer"track-type="footer link"track-metadata-child_headline="why google"track-name="modern infrastructure cloud"track-metadata-eventDetail="cloud.google.com/solutions/modern-infrastructure/"track-metadata-position="footer"> Modern Infrastructure Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/multicloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/multicloud/"track-metadata-child_headline="why google"track-type="footer link"track-metadata-module="footer"track-name="multicloud"> Multicloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-type="footer link"track-metadata-position="footer"track-name="global infrastructure"track-metadata-module="footer"track-metadata-child_headline="why google"track-metadata-eventDetail="cloud.google.com/infrastructure/"> Global infrastructure </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/customers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-child_headline="why google"track-name="customers and case studies"track-metadata-module="footer"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/customers/"track-type="footer link"> Customers and case studies </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/analyst-reports/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-module="footer"track-name="analyst reports"track-metadata-eventDetail="cloud.google.com/analyst-reports/"track-metadata-child_headline="why google"track-type="footer link"track-metadata-position="footer"> Analyst reports </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/whitepapers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-position="footer"track-metadata-child_headline="why google"track-type="footer link"track-name="whitepapers"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/whitepapers/"> Whitepapers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/blog/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/blog/"track-type="footer link"track-name="blog"track-metadata-child_headline="engage"track-metadata-module="footer"> Blog </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Products and pricing</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/pricing/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-eventDetail="cloud.google.com/pricing/"track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"track-name="google cloud pricing"track-metadata-child_headline="products and pricing"> Google Cloud pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//workspace.google.com/pricing.html" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="workspace.google.com/pricing.html"target="_blank"track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="products and pricing"track-name="google workspace pricing"track-type="footer link"> Google Workspace pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/products/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-name="see all products"track-metadata-child_headline="products and pricing"track-metadata-eventDetail="cloud.google.com/products/"track-metadata-module="footer"track-metadata-position="footer"> See all products </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Solutions</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/solutions/infrastructure-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-module="footer"track-metadata-position="footer"track-type="footer link"track-name="infrastructure modernization"track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/infrastructure-modernization/"> Infrastructure modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/databases/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-child_headline="solutions"track-name="databases"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/databases"track-metadata-position="footer"> Databases </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/application-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-name="application development"track-metadata-child_headline="solutions"track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/application-modernization/"track-metadata-position="footer"track-metadata-module="footer"> Application modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/smart-analytics/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.google.com/solutions/smart-analytics/"track-metadata-module="footer"track-metadata-position="footer"track-metadata-child_headline="solutions"track-name="smart analytics"track-type="footer link"> Smart analytics </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/ai/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-position="footer"track-type="footer link"track-name="artificial intelligence"track-metadata-module="footer"track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/ai/"> Artificial Intelligence </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/security/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-position="footer"track-name="security"track-metadata-child_headline="solutions"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/security/"> Security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://workspace.google.com/enterprise/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-type="footer link"target="_blank"track-metadata-child_headline="solutions"track-name="productivity and work transformation"track-metadata-module="footer"track-metadata-eventDetail="workspace.google.com/enterprise/"track-metadata-position="footer"> Productivity & work transformation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#industry-solutions" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-position="footer"track-metadata-child_headline="solutions"track-name="industry solutions"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/#industry-solutions"track-type="footer link"> Industry solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/devops/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-eventDetail="cloud.google.com/solutions/devops/"track-type="footer link"track-metadata-position="footer"track-metadata-child_headline="solutions"track-name="devops solutions"track-metadata-module="footer"> DevOps solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#section-14" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-child_headline="solutions"track-name="small business solutions"track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/#section-14"track-metadata-position="footer"track-metadata-module="footer"> Small business solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="solutions"track-name="see all solutions"> See all solutions </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Resources</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/affiliate-program/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-eventDetail="cloud.google.com/affiliate-program/"track-metadata-child_headline="resources"track-type="footer link"track-metadata-position="footer"track-name="google cloud affiliate program"track-metadata-module="footer"> Google Cloud Affiliate Program </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-child_headline="resources"track-type="footer link"track-name="google cloud documentation"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/docs/"track-metadata-position="footer"> Google Cloud documentation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/get-started/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-child_headline="resources"track-type="footer link"track-name="google cloud quickstarts"track-metadata-eventDetail="cloud.google.com/docs/get-started/"track-metadata-module="footer"track-metadata-position="footer"> Google Cloud quickstarts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/marketplace/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/marketplace/"track-metadata-child_headline="resources"track-metadata-module="footer"track-metadata-position="footer"track-name="google cloud marketplace"> Google Cloud Marketplace </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/discover/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="resources"track-name="learn about cloud computing"track-type="footer link"track-metadata-eventDetail="learn/"> Learn about cloud computing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/support-hub/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-eventDetail="cloud.google.com/support-hub/"track-metadata-module="footer"track-metadata-child_headline="resources"track-metadata-position="footer"track-name="support"track-type="footer link"> Support </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/samples" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-child_headline="resources"track-type="footer link"track-name="code samples"track-metadata-eventDetail="cloud.google.com/docs/samples"track-metadata-position="footer"track-metadata-module="footer"> Code samples </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/architecture/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-eventDetail="cloud.google.com/architecture/"track-metadata-child_headline="resources"track-type="footer link"track-metadata-position="footer"track-name="cloud architecture center"track-metadata-module="footer"> Cloud Architecture Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/training/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-name="training"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/training/"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="resources"> Training </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/certification/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-type="footer link"track-name="certifications"track-metadata-child_headline="resources"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/certification"track-metadata-position="footer"> Certifications </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//developers.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" target="_blank"track-metadata-eventDetail="developers.google.com"track-type="footer link"track-metadata-position="footer"track-name="google developers"track-metadata-module="footer"track-metadata-child_headline="resources"> Google for Developers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/startup/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-name="google cloud for startups"track-metadata-module="footer"track-metadata-child_headline="resources"track-metadata-eventDetail="cloud.google.com/startup/"track-type="footer link"track-metadata-position="footer"> Google Cloud for Startups </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//status.cloud.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-metadata-module="footer"track-metadata-eventDetail="status.cloud.google.com"track-metadata-position="footer"track-metadata-child_headline="resources"track-type="footer link"track-name="system status"target="_blank"> System status </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/release-notes" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 14)" track-type="footer link"track-metadata-child_headline="resources"track-name="release notes"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/release-notes/"track-metadata-position="footer"> Release Notes </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Engage</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/contact/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer"track-name="contact sales"track-metadata-child_headline="engage"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/contact/"> Contact sales </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/find-a-partner" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="cloud.google.com/find-a-partner"track-metadata-position="footer"track-metadata-module="footer"target="_blank"track-metadata-child_headline="engage"track-name="find a partner"track-type="footer link"> Find a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/partners/become-a-partner/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer"track-metadata-child_headline="engage"track-name="become a partner"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/partners/become-a-partner/"track-type="footer link"> Become a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/events/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.withgoogle.com/events"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="engage"track-name="events"track-metadata-module="footer"> Events </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/podcasts/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-eventDetail="cloud.google.com/podcasts/"track-metadata-position="footer"track-metadata-module="footer"rel="noopener"track-metadata-child_headline="engage"track-name="podcasts"track-type="footer link"target="_blank"> Podcasts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/developers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-eventDetail="cloud.google.com/developers/"track-name="developer center"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-child_headline="engage"> Developer Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudpresscorner.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-name="press corner"track-type="footer link"track-metadata-eventDetail="www.googlecloudpresscorner.com"track-metadata-child_headline="engage"track-metadata-position="footer"track-metadata-module="footer"target="_blank"rel="noopener"> Press Corner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" target="_blank"track-metadata-position="footer"track-metadata-module="footer"rel="noopener"track-metadata-child_headline="engage"track-name="google cloud on youtube"track-type="footer link"track-metadata-eventDetail="www.youtube.com/googlecloud"> Google Cloud on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloudplatform" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" rel="noopener"track-name="google cloud tech on youtube"track-type="footer link"track-metadata-eventDetail="www.youtube.com/googlecloudplatform"target="_blank"track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="engage"> Google Cloud Tech on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//x.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-child_headline="engage"track-name="follow on x"rel="noopener"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="x.com/googlecloud"target="_blank"track-metadata-position="footer"> Follow on X </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-name="join user research"track-metadata-module="footer"track-metadata-eventDetail="userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="engage"target="_blank"> Join User Research </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//careers.google.com/cloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-type="footer link"track-name="we are hiring join google cloud"track-metadata-child_headline="engage"track-metadata-eventDetail="careers.google.com/cloud"track-metadata-position="footer"target="_blank"track-metadata-module="footer"> We're hiring. Join Google Cloud! </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudcommunity.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-metadata-child_headline="engage"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="www.googlecloudcommunity.com"track-metadata-position="footer"track-name="google cloud community"target="_blank"rel="noopener"> Google Cloud Community </a> </li> </ul> </li> </ul> </nav> </devsite-footer-linkboxes> <devsite-footer-utility class="devsite-footer"> <div class="devsite-footer-utility nocontent"> <nav class="devsite-footer-utility-links" aria-label="Utility links"> <ul class="devsite-footer-utility-list"> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//about.google/" data-category="Site-Wide Custom Events" data-label="Footer About Google link" track-metadata-module="utility footer" track-metadata-position="footer" target="_blank" track-type="footer link" track-name="about google" track-metadata-eventDetail="//about.google/" > About Google </a> </li> <li class="devsite-footer-utility-item devsite-footer-privacy-link"> <a class="devsite-footer-utility-link gc-analytics-event" href="//policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link" track-name="privacy" track-type="footer link" track-metadata-eventDetail="//policies.google.com/privacy" track-metadata-position="footer" track-metadata-module="utility footer" target="_blank" > Privacy </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//www.google.com/intl/en/policies/terms/regional.html" data-category="Site-Wide Custom Events" data-label="Footer Site terms link" track-metadata-module="utility footer" track-metadata-eventDetail="//www.google.com/intl/en/policies/terms/regional.html" track-type="footer link" track-metadata-position="footer" track-name="site terms" target="_blank" > Site terms </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="/product-terms/" data-category="Site-Wide Custom Events" data-label="Footer Google Cloud terms link" track-type="footer link" track-metadata-module="utility footer" track-name="google cloud terms" track-metadata-eventDetail="/product-terms/" track-metadata-position="footer" > Google Cloud terms </a> </li> <li class="devsite-footer-utility-item glue-cookie-notification-bar-control"> <a class="devsite-footer-utility-link gc-analytics-event" href="#" data-category="Site-Wide Custom Events" data-label="Footer Manage cookies link" track-type="footer link" track-metadata-position="footer" track-metadata-eventDetail="#" track-metadata-module="utility footer" aria-hidden="true" track-name="Manage cookies" > Manage cookies </a> </li> <li class="devsite-footer-utility-item devsite-footer-carbon-button"> <a class="devsite-footer-utility-link gc-analytics-event" href="/sustainability" data-category="Site-Wide Custom Events" data-label="Footer Our third decade of climate action: join us link" track-metadata-position="footer" track-metadata-module="utility footer" track-metadata-eventDetail="/sustainability/" track-name="Our third decade of climate action: join us" track-type="footer link" > Our third decade of climate action: join us </a> </li> <li class="devsite-footer-utility-item devsite-footer-utility-button"> <span class="devsite-footer-utility-description">Sign up for the Google Cloud newsletter</span> <a class="devsite-footer-utility-link gc-analytics-event" href="/newsletter/" data-category="Site-Wide Custom Events" data-label="Footer Subscribe link" track-metadata-module="utility footer" track-name="subscribe" track-metadata-position="footer" track-type="footer link" track-metadata-eventDetail="/newsletter/" > Subscribe </a> </li> </ul> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> </nav> </div> </devsite-footer-utility> <devsite-panel></devsite-panel> </section></section> <devsite-sitemask></devsite-sitemask> <devsite-snackbar></devsite-snackbar> <devsite-tooltip ></devsite-tooltip> <devsite-heading-link></devsite-heading-link> <devsite-analytics> <script type="application/json" analytics>[]</script> <script type="application/json" tag-management>{"at": "True", "ga4": [], "ga4p": [], "gtm": [{"id": "GTM-5CVQBG", "purpose": 1}], "parameters": {"internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "Security Command Center", "signedIn": "False", "tenant": "cloud", "recommendations": {"sourcePage": "", "sourceType": 0, "sourceRank": 0, "sourceIdenticalDescriptions": 0, "sourceTitleWords": 0, "sourceDescriptionWords": 0, "experiment": ""}, "experiment": {"ids": ""}}}</script> </devsite-analytics> <devsite-badger></devsite-badger> <cloudx-user></cloudx-user> <cloudx-free-trial-eligible-store freeTrialEligible='true'></cloudx-free-trial-eligible-store> <cloudx-pricing-socket></cloudx-pricing-socket> <cloudx-experiments type="TestAACodivertedExperiment" path="/virtual/TestAACodivertedExperiment/configureExperiment" location="SG" variant="variant2" ></cloudx-experiments> <cloudx-experiment-ids userCountry="SG" devsiteExperimentIdList="[39300012, 39300022, 39300118, 39300195, 39300251, 39300317, 39300322, 39300325, 39300346, 39300354, 39300364, 39300373, 39300412, 39300421, 39300436, 39300472, 39300487, 39300496, 39300498, 39300570]"> </cloudx-experiment-ids> <script nonce="5z7MT9MICxXK4jfr5iG/ux0lvpvLrN"> (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i; t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0]; E.parentNode.insertBefore(t,E);})(window, document, 'script', 'https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/js/app_loader.js', '[2,"en",null,"/js/devsite_app_module.js","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud","https://cloud-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/cloud/manifest.json","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/images/video-placeholder.svg","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/favicon.ico","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg","https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"],1,null,[1,6,8,12,14,17,21,25,50,52,63,70,75,76,80,87,91,92,93,97,98,100,101,102,103,104,105,107,108,109,110,112,113,116,117,118,120,122,124,125,126,127,129,130,131,132,133,134,135,136,138,140,141,147,148,149,151,152,156,157,158,159,161,163,164,168,169,170,179,180,182,183,186,191,193,196],"AIzaSyAP-jjEJBzmIyKR4F-3XITp8yM9T1gEEI8","AIzaSyB6xiKGDR5O3Ak2okS4rLkauxGUG7XP0hg","cloud.google.com","AIzaSyAQk0fBONSGUqCNznf6Krs82Ap1-NV6J4o","AIzaSyCCxcqdrZ_7QMeLCRY20bh_SXdAYqy70KY",null,null,null,["Search__enable_dynamic_content_confidential_banner","Profiles__enable_complete_playlist_endpoint","Profiles__enable_completequiz_endpoint","Search__enable_suggestions_from_borg","Profiles__enable_developer_profiles_callout","Profiles__enable_release_notes_notifications","Cloud__enable_cloud_facet_chat","Cloud__enable_cloud_shell","Profiles__enable_awarding_url","MiscFeatureFlags__enable_project_variables","TpcFeatures__enable_mirror_tenant_redirects","Cloud__enable_free_trial_server_call","Profiles__enable_profile_collections","MiscFeatureFlags__emergency_css","DevPro__enable_cloud_innovators_plus","Concierge__enable_pushui","Search__enable_ai_search_summaries","Cloud__enable_llm_concierge_chat","DevPro__enable_developer_subscriptions","Cloud__enable_cloudx_ping","MiscFeatureFlags__enable_view_transitions","Experiments__reqs_query_experiments","MiscFeatureFlags__developers_footer_dark_image","MiscFeatureFlags__developers_footer_image","Profiles__enable_dashboard_curated_recommendations","Concierge__enable_concierge_restricted","Search__scope_to_project_tenant","CloudShell__cloud_shell_button","MiscFeatureFlags__enable_explain_this_code","Profiles__enable_public_developer_profiles","Cloud__enable_legacy_calculator_redirect","CloudShell__cloud_code_overflow_menu","TpcFeatures__enable_unmirrored_page_left_nav","MiscFeatureFlags__enable_firebase_utm","Profiles__enable_page_saving","MiscFeatureFlags__enable_variable_operator","BookNav__enable_tenant_cache_key","Cloud__enable_cloud_dlp_service","Search__enable_ai_eligibility_checks","Profiles__enable_join_program_group_endpoint","Analytics__enable_clearcut_logging","Profiles__enable_completecodelab_endpoint","Cloud__enable_cloud_shell_fte_user_flow","Profiles__require_profile_eligibility_for_signin","Profiles__enable_stripe_subscription_management","Search__enable_ai_search_summaries_restricted","EngEduTelemetry__enable_engedu_telemetry","Profiles__enable_recognition_badges","Cloud__enable_cloudx_experiment_ids","Search__enable_page_map"],null,null,"AIzaSyBLEMok-5suZ67qRPzx0qUtbnLmyT_kCVE","https://developerscontentserving-pa.clients6.google.com","AIzaSyCM4QpTRSqP5qI4Dvjt4OAScIN8sOUlO-k","https://developerscontentsearch-pa.clients6.google.com",1,4,1,"https://developerprofiles-pa.clients6.google.com",[2,"cloud","Google Cloud","cloud.google.com",null,"cloud-dot-devsite-v2-prod.appspot.com",null,null,[1,1,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,1,[1],[null,null,null,[1,20],"/terms/recommendations"],[1],null,[1],[1,null,1],[1,1,null,null,1,null,["/vertex-ai/"]]],null,[22,null,null,null,null,null,"/images/cloud-logo.svg","/images/favicons/onecloud/apple-icon.png",null,null,null,null,1,1,1,[6,5],[],null,null,[[],[],[],[],[],[],[],[]],null,1,null,null,null,null,[]],[],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[6,1,14,15,22,23,29,37],null,[[null,null,null,null,null,null,[1,[["docType","Choose a content type",[["ApiReference",null,null,null,null,null,null,null,null,"API reference"],["Sample",null,null,null,null,null,null,null,null,"Code sample"],["ReferenceArchitecture",null,null,null,null,null,null,null,null,"Reference architecture"],["Tutorial",null,null,null,null,null,null,null,null,"Tutorial"]]],["category","Choose a topic",[["AiAndMachineLearning",null,null,null,null,null,null,null,null,"Artificial intelligence and machine learning (AI/ML)"],["ApplicationDevelopment",null,null,null,null,null,null,null,null,"Application development"],["BigDataAndAnalytics",null,null,null,null,null,null,null,null,"Big data and analytics"],["Compute",null,null,null,null,null,null,null,null,"Compute"],["Containers",null,null,null,null,null,null,null,null,"Containers"],["Databases",null,null,null,null,null,null,null,null,"Databases"],["HybridCloud",null,null,null,null,null,null,null,null,"Hybrid and multicloud"],["LoggingAndMonitoring",null,null,null,null,null,null,null,null,"Logging and monitoring"],["Migrations",null,null,null,null,null,null,null,null,"Migrations"],["Networking",null,null,null,null,null,null,null,null,"Networking"],["SecurityAndCompliance",null,null,null,null,null,null,null,null,"Security and compliance"],["Serverless",null,null,null,null,null,null,null,null,"Serverless"],["Storage",null,null,null,null,null,null,null,null,"Storage"]]]]]],[1],null,1],[[null,null,null,null,null,["GTM-5CVQBG"],null,null,null,null,null,[["GTM-5CVQBG",2]],1],null,null,null,null,null,1],"mwETRvWii0eU5NUYprb0Y9z5GVbc",4,null,null,null,null,null,null,null,null,null,null,null,null,null,"cloud.devsite.google"],null,"pk_live_5170syrHvgGVmSx9sBrnWtA5luvk9BwnVcvIi7HizpwauFG96WedXsuXh790rtij9AmGllqPtMLfhe2RSwD6Pn38V00uBCydV4m",1]') </script> <devsite-a11y-announce></devsite-a11y-announce> </body> </html>

CINXE.COM

Remediating Web Security Scanner findings | Security Command Center | Google Cloud