Google Security Operations Agentic SOC

cloud.google.com · checked 14 Nov 2026

#10 · AI SOC Agents #7 · AI Cybersecurity Software

Visit cloud.google.com ↗ Alternatives Google Security Operations Agentic SOC vs Blacklight AI

How it plugs in

—Public API

NoOpen source

NoFree tier

Signal on AI SOC Agents4.8#10 of 22

Google Security Operations provides agentic defense for workflows including alert triage, threat hunting, and detection engineering.

Pricing

StandardOn request
EnterpriseOn request
Enterprise PlusOn request
Google SecOps Security TokensCommit and Overage; subscription tokens are annual · Add-on SKU for Google SecOps Enterprise, Enterprise Plus, or GUS · maximum individual term 12 months · included daily tokens for Enterprise Plus/GUS based on package ACVOn request

As cloud.google.com lists them, checked 22 Oct 2026.

Near it

All alternatives →

Runs on

Web
Windows
Mac
Linux
iOS
Android

Facts

Website: cloud.google.com
Price: Not published
Free trial: No
Alert triage: The Triage and Investigation agent investigates alerts, enriches them with threat intelligence, and provides verdicts with explanations.
Analyst oversight: Agentic automation combines AI agents with deterministic playbooks and retains analyst control over critical actions.
Detection engineering: The Detection Engineering agent creates and validates detection rules to address emerging coverage gaps.
Founded: 1998
Headquarters: Mountain View, California, United States
Integrations: Google SecOps SOAR playbooks can orchestrate over 300 tools, including EDR, identity management, and network security tools.
Platform capabilities: Google SecOps includes threat-centric case management, alert graphing, entity stitching, and AI-generated case summaries and recommendations.
Threat hunting: The Threat Hunting agent searches for novel attack patterns and stealthy behaviors using intelligence from Mandiant, VirusTotal, and Google.
Token entitlements: Enterprise Plus and Google Unified Security customers receive daily included token allotments tied to the annual contract value of their underlying eligible package.
Token limits: Paid token consumption must be activated per tenant, and administrators can set daily consumption limits through the web interface or Chronicle API.
Token metering: Generally available autonomous agents consume Security Tokens; standard chat panels, automated summaries, and preview agents do not.
Trial status: The official trial period for Security Tokens has ended; interested customers are directed to their account representative.

On these boards

Built Google Security Operations Agentic SOC?

Claim the page, then edit your card yourself from your member desk: its name, words, logo, screenshots, plans and links. Your desk shows how many readers open it.

Claim Google Security Operations Agentic SOC