Security Command Center release notes

You can use the following MCP server endpoints to enable LLM agents to perform investigative and management tasks in Security Command Center.

• Security Command Center
• Security Command Center Management

This feature is in Preview.

Data Security Posture Management is deprecated. It will be shut down on February 1, 2027. Learn more about the controls and alternative detection capabilities.

AI Protection supports data residency in the Kingdom of Saudi Arabia (KSA) for all Security Command Center service tiers.

For more information, see Planning for data residency.

The integration of Security Command Center with Application Design Center for application lifecycle security assessments is generally available (GA). Design-time findings are sent to Security Command Center on demand during deployment. This feature lets you filter findings by App Hub application at the app-enabled folder and project levels.

For more information, see Application lifecycle security assessments.

Vulnerability Assessment for Google Cloud is available in General Availability.

Security Command Center released new Malicious Skill runtime threat detectors for Google Kubernetes Engine (GKE), Cloud Run, and Agent Platform. These detectors identify when a malicious skill (an AI agent capability) is executed or loaded. A malicious skill is any malicious binary that has been tagged as an LLM skill by Google's threat intelligence.

For more information, see the following:

• Container Threat Detection overview
• Cloud Run Threat Detection overview
• Agent Platform overview

The Assured Open Source Software Premium tier supports JavaScript (NPM) packages for Node.js environments.

For more information, see Download NPM packages using direct repository access and List of supported NPM packages for the Assured Open Source Software premium tier.

For the Security Command Center Standard tier, AI Protection is supported for both projects and organizations.

Project-level activations for the Standard tier include access to the AI security dashboard, basic inventory view (excluding Gemini models), and baseline security findings.

Some features of AI Protection are only available for the Premium and Enterprise tiers or for organization-level activations. For more information, see Configure AI Protection.

Organizations that are enrolled in the data residency Preview program can update their organization's data residency and data encryption configuration. For more information, see Modify data residency or data encryption configuration.

Agent Platform Vulnerability Assessment (Preview) scans for plaintext secrets, such as credentials, access tokens, and API keys, in customer-deployed Gemini Enterprise Agent Platform containers. For more information, see Agent Platform Vulnerability Assessment.

Version 1.2.0 of the Google SCC ITSM app and version 1.3.0 of the Google SCC SIR app have been released.

To reflect this update, the ServiceNow integration guide is updated with the following changes:

• Added support for ServiceNow Yokohama, Zurich, and Australia versions.

• Added the following features:

  • Mute and unmute findings
  • Create mute rules
  • Create Configuration Item (CI) lookup rules
  • View the action log

• Updated setup instructions for Java KeyStore certificates.

• Added additional troubleshooting steps for maximum execution time exceeded errors, data collection issues, and ECC Queue timeout errors.

For more information, see Sending Security Command Center data to ServiceNow.