If Google Cloud are VAPT certified?

[Nisheet Singh]

Dear folks, 

I am from Non-IT background and now trying to host one my solution in GCP. Can someone please help me if GCP is VAPT certified and if yes then how/where can I get that certificate?

Many thanks in advance!

Regards,

Nisheet

[Sohail Alvi]

Hello,

Google doesn't share the results of Vulnerability Assessment and Penetration Test with customers.  Details on our Penetration Testing and  Vulnerability Reward Program can be found at this link and [1] and  additional information on this support page [2].

Regarding network vulnerabilities scan, I would like to introduce Cloud Security Command Center (Cloud SCC) [3], Cloud SCC enables you to filter and view vulnerability and threat findings in many different ways, like filtering on a specific finding type, resource type, or for a specific asset. Also please refer to the following link [4] which you can find google security overview.

Thank you,

[1] https://www.google.com/about/appsecurity/

[2] https://support.google.com/cloud/answer/6262505?hl=en

[3] https://cloud.google.com/security-command-center/docs/how-to-view-vulnerabilities-threats

[4] https://cloud.google.com/security/overview/