There was one word that dominated the Google Cloud Security Summit: convergence. There were a dizzying number of dashboards that obstructed a clear approach to security. Google believes that improving security can only be achieved by keeping it simple.
Google Cloud won’t be introducing a new product at Security Summit, though it will unveil new features. Above all, the company doesn’t want to keep pushing new solutions. The company believes that organizations of all sizes are better served by keeping security software simple. And it believes the number of moving parts in such tools should be reduced. How did Google Cloud get to this point?
Through the entire portfolio
Fortunately, the convergence can be clearly explained. Thus, we see that Google Cloud offers the skin of the onion in which all of its security offerings overlap. For example, its core contains AI and threat intelligence, which (with Mandiant’s fieldwork, for example) keeps pace with the threat landscape.
In addition, there is first and foremost Google Cloud’s SecOps platform, cloud risk management, intelligence and frontline expertise. The former unifies SIEM, SOAR and attack surface management to take proactive action against threats. This now includes support for Gemini’s AI-powered security operations, which should save a lot of time in particular. Cloud risk management, in turn, goes beyond just Google Cloud, seeking to protect multi-cloud environments. And through threat intelligence, this has also proven to be a reality, as Mandiant demonstrated with its disclosure of vulnerabilities in Microsoft’s Azure Kubernetes service.
Frontline intelligence and expertise focuses on teamwork and threat hunting to stay proactive against cybercrime. And when things go wrong, this aspect of Google Cloud also provides incident response.
It's all covered by Enterprise Secure Access, which provides hundreds of millions of devices with endpoint protection, data protection, and zero-trust access.
Improvements everywhere
Since Google Cloud isn’t launching an entirely new product, the announcements are mostly based on a series of updates and upgrades. Examples include expanded PAM capabilities, better compatibility with Microsoft cloud services like Entra ID, and new VM secret features.
The full list of announcements is important, but less well-known than new solutions. However, it can be a good indicator of whether the security systems themselves are particularly good at the expense of a media product.
Read also: SentinelOne and Google Cloud continue to work together on autonomous security