Google Cloud (GCP)

LiveIdentity & Access

Google Cloud (GCP) connector — read-only, agentless

Audits your Google Cloud (GCP) project security posture — project IAM (service-account keys, primitive-role sprawl, inactive and external principals, public bindings), enabled APIs and API-key restrictions, Cloud Audit Log coverage and retention, VPC firewall exposure (SSH/RDP open to the internet), and public Cloud Storage buckets. Read-only.

Ikonekta ang Google Cloud (GCP)← Bumalik sa lahat ng mga connector

Ano ang aming siniscan

Project IAM policy bindings, service accounts and their key metadata, API keys and their restrictions, and enabled APIs (never resource data or key material)
Audit-log configuration and retention, VPC firewall rules, and Cloud Storage bucket IAM policies (never object contents)

Read-only na pagsubaybay — walang pagbabago sa iyong Google Cloud (GCP) data maliban kung bubuksan mo ang auto-remediation at magbigay ng write access nang hiwalay.

Security findings

17 detection rules ay tumatakbo sa bawat Google Cloud (GCP) scan. Bawat finding ay may kasamang plain-language explanation, ang evidence sa likod nito at mga hakbang sa remediation.

CRITICALPublic exposure
GCP IAM binding grants access to all (public) users
CRITICALPublic exposure
GCP Cloud Storage bucket is public
HIGHStale access
GCP service-account key not rotated in over 90 days
HIGHOver permission
GCP service account has a project-level Owner/Editor role
HIGHExternal access
External user has access to the GCP project
HIGHMisconfig
GCP API key has no application (referrer/IP) restriction
HIGHPublic exposure
GCP firewall allows SSH/RDP from the entire internet
MEDIUMOver permission
GCP user has a project-level Owner/Editor primitive role
MEDIUMMisconfig
GCP organization does not enforce MFA (2-Step Verification)
MEDIUMMisconfig
GCP project has an overly-permissive API enabled
MEDIUMStale access
GCP API key not rotated in over 90 days
MEDIUMMisconfig
GCP Cloud Audit Logs are disabled for a service
MEDIUMMisconfig
Vertex AI is enabled with no vertexai.* org policy
MEDIUMMisconfig
Vendor AI-training data-contribution posture
LOWStale access
GCP service account has been inactive for over 90 days
LOWMisconfig
GCP log retention is shorter than 30 days
LOWMisconfig
GCP project still has the legacy default network

Paano ikonekta ang Google Cloud (GCP)

Hakbang 1
Mag-sign up o mag-log in sa 8200.dev
Hakbang 2
Pumunta sa Connectors → Google Cloud (GCP)
Hakbang 3
I-click ang Connect at mag-authorize sa pamamagitan ng Google Cloud (GCP)'s consent screen
Hakbang 4
Ang 8200.dev ay nag-scan nang automatic — ang mga resulta ay lilitaw sa loob ng ilang minuto

Ikonekta ang iyong unang source sa loob ng ilang minuto — libre, read-only, walang sales call.

Ikonekta ang Google Cloud (GCP)Tingnan ang lahat ng 23 connectors →