Google Security Operations

GCPSecurity

Cloud-native SIEM and SOAR platform (formerly Chronicle) for ingesting security telemetry at scale, threat detection with Google threat intelligence, investigation and automated response playbooks.

Jurisdictional exposure

Provider HQ
USMountain View, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACCNEEAEUUKUSOther44 regions across 7 jurisdictions
Sovereign option
Yes — 1 sovereign-flagged region available

Sub-services (4)

Google SecOps SIEM

Petabyte-scale ingestion, normalisation (UDM) and search of security telemetry

Google SecOps SOAR

Case management and automated response playbooks

YARA-L detection rules

Custom and curated detection rules over normalised event data

Applied Threat Intelligence

Google and Mandiant threat intelligence matched against customer telemetry

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

44 regions
29 countries
1sovereign
Sovereign regions (1)
  • T-Systems Sovereign Cloud · FrankfurtT-Systems Sovereign Cloud powered by Google Cloud
Commercial regions (43)

Europe (13)

  • Belgium
  • Finland
  • Paris
  • Berlin
  • Frankfurt
  • Milan
  • Turin
  • Netherlands
  • Warsaw
  • Madrid
  • Stockholm
  • Zurich
  • London

North America (12)

  • Montréal
  • Toronto
  • Querétaro
  • Northern Virginia
  • Columbus
  • Iowa
  • Dallas
  • Las Vegas
  • Los Angeles
  • South Carolina
  • Salt Lake City
  • Oregon

South America (2)

  • São Paulo
  • Santiago

Asia (10)

  • Hong Kong
  • Delhi
  • Mumbai
  • Jakarta
  • Osaka
  • Tokyo
  • Singapore
  • Seoul
  • Taiwan
  • Bangkok

Oceania (2)

  • Melbourne
  • Sydney

Middle East (3)

  • Tel Aviv
  • Doha
  • Dammam

Africa (1)

  • Johannesburg

Tags

Equivalent services on other platforms

Pricing

Pricing model:subscription