Google Cloud

Google Security Operations, formerly known as Chronicle, is Google Cloud’s AI-powered platform for security operations. It helps organizations detect, investigate, and respond to cybersecurity threats through a unified experience spanning security information and event management (SIEM), security orchestration, automation and response (SOAR), and threat intelligence.

The platform collects and analyzes security telemetry at Google’s scale, applies threat intelligence to help identify priority risks, and offers curated detections maintained by Google threat researchers. Teams can search data and create detections using natural language with Gemini or author custom rules in YARA-L. Investigation tools include threat-focused case management, contextual alert graphs, entity stitching, flexible search, AI-generated summaries, and recommended response actions.

For response, Google Security Operations provides playbooks, case collaboration, and integrations with more than 300 security tools. Data pipeline capabilities help teams filter, redact, route, and transform telemetry. The service is available in Standard, Enterprise, and Enterprise Plus packages, with features varying by tier and pricing based on ingestion.