GCP Security Assessment

Key controls for Google Cloud projects and IAM. 8 questions, about 5 minutes. For google cloud administrators and security teams.

Your answers are scored in this browser and are not sent anywhere unless you ask us for the report.

Prefer facts to answers? Run the free live Zero Trust check on one cloud account, read-only.

0 of 8 answered
Identity · question 1 of 8Are basic roles (Owner, Editor) avoided in favor of predefined roles?
Identity · question 2 of 8Are service account keys avoided or rotated, with workload identity used where possible?
Detection · question 3 of 8Is Security Command Center enabled for the organization?
Storage · question 4 of 8Is public access prevention enforced on Cloud Storage?
Network · question 5 of 8Are firewall rules free of 0.0.0.0/0 on SSH and RDP?
Logging · question 6 of 8Are Data Access audit logs enabled for sensitive services?
Organization · question 7 of 8Do organization policies constrain regions, external sharing and resource creation?
Cost · question 8 of 8Is billing export to BigQuery enabled?