Google Cloud Security Check: find misconfigurations before others do
We review your Google Cloud environment read-only for typical security gaps – from public storage buckets to overly broad permissions – and rate every finding by risk. Free of charge and without obligation.
- Read-only access, no changes
- Results report with prioritized actions
- 30-minute review of the results
In brief
The Google Cloud Security Check is a free, read-only review of your existing Google Cloud environment. We analyze configurations, permissions and the security findings from Security Command Center and show you which risks to tackle first.
What we look at on the security side
Misconfigurations are among the most common causes of security incidents in the cloud. We check your environment for the typical gaps and show you which ones to close first.
Public storage buckets
Buckets whose content anyone on the internet can read.
Open firewall rules
Ports such as SSH or RDP that can be reached from the entire internet.
Overly broad permissions
Owner and Editor rights for people and services that don’t need them.
Service account keys
Long-lived keys that aren’t rotated or are lying around unused.
Organization policies
Missing guardrails, for example for permitted regions or public IP addresses.
Logging and audit logs
Whether important access and changes are recorded in a traceable way.
Three steps to your results
Book an initial consultation
In 30 minutes, we clarify your goals, which projects should be reviewed and how the check works.
Set up read access
You give us read access to configurations and security findings. No changes to your infrastructure, no access to code or to the content of your data.
Review the results
You receive a results report with all findings, rated by risk, and a prioritized list of actions. We go through it with you in 30 minutes.
Using Google’s own tools
We use the security tools Google itself provides and add our experience from projects. A person reviews and rates every finding before it goes on your list.
Which permissions we need – and what we see
Read permissions required
You can revoke the roles at any time after the check.
What we see
What we don’t see
Read-only
We only read. Changes happen only if you commission us afterwards.
People decide
No machine writes your action list. We review every recommendation ourselves.
No lock-in
The results belong to you. You decide whether and with whom you implement them.
Data residency and GDPR
We work from Germany and, on request, under a data processing agreement.
What happens next
Fix findings
We close the gaps with you, from public buckets to cleaning up permissions.
Set guardrails
With organization policies, we make sure the same mistakes don’t happen again.
Monitor continuously
On request, we keep an eye on the security of your Google Cloud on an ongoing basis as a managed service.
Let’s take 30 minutes to look at the security of your Google Cloud
- Clarify projects and goals
- Set up read access together
- Schedule the results review
