Peace of Mind Security for Every Google Cloud Platform

Automated, Continuous GCP Security Monitoring and Threat Detection for Google Cloud Platform and Multi-Cloud Environments

Google Cloud Platforms (GCP) are not immune from some of the biggest security risks. Potential threats to GCP include data breaches, credential and access management issues and identity protection. Achieving peace of mind requires partnering with a company that understands GCP security.

Lacework offers an automated, end-to-end GCP security and configuration solution that monitors threats for workloads and accounts in the Google Cloud Platform and across multi-cloud and containerized environments. Lacework is architected as a host-based intrusion detection that identifies and alerts based on behavioral anomalies that could pose threats to an organization’s data and resources.

Our GCP security platform accomplishes this in two fundamental ways:

• Lacework checks for a series of controls specific to GCP resources like storage classes and ACLs. It also monitors for processes like Cross-Origin Resource Sharing (CORS), access logs and other elements that can be targeted in the course of attacks. 
• Lacework builds baseline models of a data center’s behavior to perform anomaly detection that could indicate a security threat. These models are built and updated automatically and do not require manual rules or maintenance. 

Lacework enables security teams to efficiently protect assets deployed on GCP, from the initial configuration to live operations.

Security Built for Tomorrow, Today

For all GCP events and configurations, Lacework’s security solution monitors activities and behaviors of cloud entities beyond network traffic to detect anomalies indicative of misconfigurations, human error, malicious activities, and threats.

Lacework enables security teams to identify escalation of privileges, lateral movement, and misuse of GCP resources quickly so that breaches can be identified and stopped early. Lacework achieves this by:

• Making all risks and threats visible within the Lacework dashboard ranked by risk severity. These can also be delivered through the most common methods such as a Slack channel or a Jira ticket.
• Scheduling automatic checks, reviews, and alerts for configuration issues that run counter to controls established as best practices for securing GCP. 
• Providing support for common compliance standards such as SOC2, PCI DSS, and CIS benchmarks. An interactive report, generated from deep insights from activity happening in the environment, delivers insights into passed or failed controls with specific remediation recommendations to fix non-compliant configuration components. 

Lacework’s GCP security solution ensures continuous compliance by auditing your configuration daily and alerting you of any change that represents a degradation in compliance.

Compliance and Misconfiguration Identification

Lacework automatically checks, reviews, and alerts on configuration issues that run counter to controls established as best practices for securing GCP. Lacework supports common compliance standards such as SOC2, PCI DSS, and CIS benchmarks. An interactive report, generated from deep insights from activity happening in the environment, delivers insights into passed or failed controls with specific remediation recommendations to fix non-compliant configuration components. A similar report is available for security controls for Google Cloud Storage.

Lacework’s GCP security solution ensures continuous compliance by auditing your configuration daily and alerting you of any change that represents a degradation in compliance.