GOOGLE SECURITY OPERATIONS / PRODUCT SURFACE

Integrations / ingest, map, normalize

Connectors, API boundaries and RAW-to-UDM normalization patterns with explicit compatibility notes.

Request scope ↗
SYNTHETIC / INSPECTABLE
RAW → UDM → DETECTION | metadata.event_type | principal.user.userid | security_result.rule | No tenant data. No live actions.

FREE / Explore

Original synthetic examples, prerequisites, field mappings and explicit limitations.

PRO / Scoped

Available only after scope, licensing and a verifiable delivery channel. No private artifact is exposed here.

CUSTOM / Engineer

Implementation, tuning and documentation for an authorized Google SecOps environment.