GOOGLE SECURITY OPERATIONS / PRODUCT SURFACE

Playbooks / controlled response automation

Human-approved workflows for triage, enrichment, escalation and response orchestration.

Request scope ↗
SYNTHETIC / INSPECTABLE
RAW → UDM → DETECTION | metadata.event_type | principal.user.userid | security_result.rule | No tenant data. No live actions.

FREE / Explore

Original synthetic examples, prerequisites, field mappings and explicit limitations.

PRO / Scoped

Available only after scope, licensing and a verifiable delivery channel. No private artifact is exposed here.

CUSTOM / Engineer

Implementation, tuning and documentation for an authorized Google SecOps environment.