Security Command Center release notes

AI Protection supports data residency in the Kingdom of Saudi Arabia (KSA) for all Security Command Center service tiers.

For more information, see Planning for data residency.

The integration of Security Command Center with Application Design Center for application lifecycle security assessments is generally available (GA). Design-time findings are sent to Security Command Center on demand during deployment. This feature lets you filter findings by App Hub application at the app-enabled folder and project levels.

For more information, see Application lifecycle security assessments.

Vulnerability Assessment for Google Cloud is available in General Availability.

Security Command Center released new Malicious Skill runtime threat detectors for Google Kubernetes Engine (GKE), Cloud Run, and Agent Platform. These detectors identify when a malicious skill (an AI agent capability) is executed or loaded. A malicious skill is any malicious binary that has been tagged as an LLM skill by Google's threat intelligence.

For more information, see the following:

• Container Threat Detection overview
• Cloud Run Threat Detection overview
• Agent Platform overview

The Assured Open Source Software Premium tier supports JavaScript (NPM) packages for Node.js environments.

For more information, see Download NPM packages using direct repository access and List of supported NPM packages for the Assured Open Source Software premium tier.

For the Security Command Center Standard tier, AI Protection is supported for both projects and organizations.

Project-level activations for the Standard tier include access to the AI security dashboard, basic inventory view (excluding Gemini models), and baseline security findings.

Some features of AI Protection are only available for the Premium and Enterprise tiers or for organization-level activations. For more information, see Configure AI Protection.

Organizations that are enrolled in the data residency Preview program can update their organization's data residency and data encryption configuration. For more information, see Modify data residency or data encryption configuration.

Agent Platform Vulnerability Assessment (Preview) scans for plaintext secrets, such as credentials, access tokens, and API keys, in customer-deployed Gemini Enterprise Agent Platform containers. For more information, see Agent Platform Vulnerability Assessment.

Version 1.2.0 of the Google SCC ITSM app and version 1.3.0 of the Google SCC SIR app have been released.

To reflect this update, the ServiceNow integration guide is updated with the following changes:

• Added support for ServiceNow Yokohama, Zurich, and Australia versions.

• Added the following features:

  • Mute and unmute findings
  • Create mute rules
  • Create Configuration Item (CI) lookup rules
  • View the action log

• Updated setup instructions for Java KeyStore certificates.

• Added additional troubleshooting steps for maximum execution time exceeded errors, data collection issues, and ECC Queue timeout errors.

For more information, see Sending Security Command Center data to ServiceNow.

For the Security Command Center Premium tier, you can enable AI Protection at the project level.

Project-level activations include access to the AI security dashboard, AI threat detection, and AI vulnerability and misconfiguration findings.

Some features of AI Protection are only available for organization-level activations. For more information, see Configure AI Protection.

For the Security Command Center Premium tier, you can enable AI Protection at the project level.

Project-level activations include access to the AI security dashboard, AI threat detection, and AI vulnerability and misconfiguration findings.

For more information, see Configure AI Protection.

Key insights from Security Command Center are available on the Security & compliance page in Cloud Hub. This feature is available in General Availability.

You can integrate Security Command Center with Jira to review findings in your Jira project. For more information, see Integrate Jira with Security Command Center.

You can modify the data residency and data encryption configuration on the Premium and Standard tiers after you activate Security Command Center for your organization. For more information, see Modify data residency or data encryption configuration.

The Assured Open Source Software premium tier includes an updated list of curated binaries for the Go, Java, and Python languages.

For more information, see List of supported Java and Python packages for the Assured OSS premium tier and List of supported Go packages for the Assured OSS premium tier.

Security Command Center External Exposure is available in Preview for the Security Command Center Premium tier. The service helps you manage and reduce your external attack surface through automated asset discovery, Google Cloud network exposure path validation, and active exploitability testing.

For more information, see Detect exposed resources.

AI Protection supports data residency in the European Union (EU) for the Security Command Center Premium tier.

For more information, see Planning for data residency.

The following Security Command Center finding category names from AI Protection have new names that clarify that AI Protection detects Gemini foundation models:

• VERTEX_AI_MODEL_DETECTED changes to GEMINI_MODEL_DETECTED.
• VERTEX_AI_MODEL_NOT_PROTECTED_BY_MODEL_ARMOR changes to GEMINI_MODEL_NOT_PROTECTED_BY_MODEL_ARMOR.

For more information about AI Protection findings, see AI Protection overview.

Risk Engine detects toxic combinations that are related to Managed Service for Apache Spark (formerly known as Dataproc), including Lightning Engine.

Risk reports are updated to include more content in the Risk Engine introduction and the System attack exposure pages. For more information about what's included in risk reports, see Risk reports overview.

The following Compliance Manager frameworks were updated:

• CIS Critical Security Controls v8 (version 8.0)
• CIS GCP Foundations Benchmark v3.0 (version 7.0)
• CSA Cloud Controls Matrix v4.0.11 (version 7.0)
• ISO 27001:2022 (version 9.0)
• NIST 800-53 Revision 5 (version 9.0)
• NIST Cybersecurity Framework 1.1 (version 8.0)
• PCI DSS v4.0.1 (version 6.0)
• Qatar National Information Assurance Standard v2.1 (version 6.0)
• SOC 2017 (version 7.0)

The Security Command Center Enterprise service tier is deprecated. It will be shut down on May 21, 2027. By default, your organization will automatically move to the Premium service tier on that date.

Artifact guard is available in Preview to the Security Command Center Enterprise and Premium tiers. Artifact guard is a service that helps you prevent the deployment of vulnerable packages throughout the software development lifecycle.

Risk Engine detects toxic combinations that are related to Cloud Build resources.

Vulnerability Assessment for Google Cloud supports scanning XFS and NTFS disk partition types.

Vulnerability Assessment for Google Cloud supports scanning GKE clusters that have Image streaming enabled.

Compliance Manager can be enabled for a single project. For more information, see Enable Compliance Manager.

New Standard tier activations at the organization level support the enhanced Standard tier features. New Standard tier activations at the project level continue to support Standard-legacy tier features. For more information, see Standard tier enhanced and automatically activated for some customers.

When Security Command Center is activated at the project level only, you can enable Vulnerability Assessment for Google Cloud on the single project.

Security Command Center has new predefined rules and controls:

• Additional predefined security graph rules to support Agent Runtime

• Additional support in existing correlated threats rules for Agent Runtime

• Additional runtime detectors in Agent Platform Threat Detection

• Additional Event Threat Detection rules to support AI agents

Security Command Center findings that are related to AI security risks are available in the Security tab of the Gemini Enterprise Agent Platform. The feature helps provide comprehensive visibility into findings, active threats, and attack path simulations. This feature requires Security Command Center Premium or Enterprise.

For more information, see View security findings.

Through the Application Design Center, Security Command Center helps you perform proactive security assessments (Preview) throughout your application development lifecycle. This integration shows both design-time and runtime findings in Security Command Center. For more information, see Application lifecycle security assessments.

Data Security Posture Management has new controls in Preview. The controls help you secure Cloud Storage objects and include the following:

• Govern the minimum retention period for Cloud Storage objects
• Require Customer-Managed Encryption for Cloud Storage objects
• Restrict Public Access to Cloud Storage objects

For more information, see Advanced data governance and security cloud controls.

AI Protection supports agentic workloads in Preview, including Gemini Enterprise Agent Platform and Model Context Protocol (MCP) servers. This update includes the following:

• Agent Platform Vulnerability Assessment: Identifies software vulnerabilities (CVEs) in agentic workloads that are deployed with Gemini Enterprise Agent Platform. Findings are surfaced for vulnerabilities of HIGH or CRITICAL severity that are detected in your custom dependencies.
• Expanded detection and controls: Includes new threat detection findings and recommended security controls for AI agents and MCP servers.
• Enhanced inventory and filtering: Provides an updated AI security dashboard view and new filtering options for agentic resources in the console.

When you activate Security Command Center Standard or Premium tier for a project, several services are automatically enabled and service-specific service agents are provisioned with the required IAM roles and permissions.

For more information, see Activate for a project when Security Command Center is not active in the organization.

Cloud Run Threat Detection monitors Cloud Run worker pools. For a list of resources that Cloud Run Threat Detection monitors, see Supported resources.

Key insights from Security Command Center are available on the Security & compliance page in Cloud Hub. This feature is available in Preview.

Security Command Center Risk Engine supports Managed Service for Apache Spark resources in attack paths and Managed Service for Apache Spark clusters and jobs in high-value resource sets.

Risk Engine supports aiplatform.googleapis.com/ReasoningEngine in both attack paths and high value resource sets.

Risk Engine has launched enhanced heuristics to help identify default high-value resources.

If you are using the default high-value resource set, you might observe changes in the exposure scores of their findings, resources, and issues. For information about these changes, see Default high-value resource set.

The following Compliance Manager frameworks were updated:

• CIS GKE 1.7 (version 3.0)
• CIS Critical Security Controls v8 (version 6.0)
• CSA Cloud Controls Matrix v4.0.11 (version 5.0)
• ISO 27001:2022 (version 7.0)
• Qutar National Information Assurance Standard v2.1 (version 4.0)
• NIST 800-53 Revision 5 (version 7.0)
• NIST Cybersecurity Framework 1.1 (version 6.0)
• PCI DSS v4.0.1 (version 4.0)
• Security Essentials (version 12.0)
• SOC 2017 (version 5.0)

The names of Event Threat Detection rules pertaining to