Cloud Inventory and Security Assessment

This section describes the discovery of cloud inventory such as cloud assets and resources. It also describes the security assessment giving full visibility into the public cloud security posture of all assets and resources.

Cloud Inventory

Qualys Cloud Inventory continuously discovers and tracks assets and resources such as VM Instances, Networks, Firewall Rules, Sub-networks, and Cloud Functions across all regions and multiple projects in the Google Cloud Platform and gives you an "at-a-glance" comprehensive picture of your cloud inventory and the location of assets across global regions. You can view all this information in one central place.

Features

The following are the key features of Cloud Inventory Assessment:

Provides a quick overview of inventory via pre-built dashboards and lets you personalize or build your own dashboard with custom widgets.
Collects rich metadata for every resource and shows associations across resources so you can understand scenarios such as which firewall rules are potentially public and unprotected and which related assets this is impacting.

Cloud Security Assessment

Qualys Cloud Security Assessment gives full visibility into the compliance posture of your cloud infrastructure against regional, industry, and government mandates by using reports and dashboards.

Refer to the TotalCloud User Guide for more details.

Features

The following are the key features of Cloud Security Assessment:

Provides a quick overview of inventory and security posture via dashboards
Lets you personalize or build your own with custom widgets based on queries or on other criteria, such as "Top 10 accounts based on failures' and 'Top 10 controls that are failing'
Out-of-box GCP policies like CIS Google Cloud Platform Foundation Benchmark and GCP Best Practices Policy
Continuously assess and report on resource mis-configurations by checking against the controls from out-of-box policies
Build your own policies and customize controls to suit your need
Ability to view, filter, and export misconfigurations