Google LLC is always on the lookout for ways to boost uptake of its public cloud computing services, adding new features and establishing partnerships to compete more effectively with rivals such as Amazon Web Services Inc. and Microsoft Corp.

And these days, no aspect of the cloud is more important than security. As Google has often said, “If you put security first, everything else will follow.” Keeping with that spirit, the company today announced more than 20 new security features and enhancements for its three main cloud services, the Google Cloud Platform, G Suite and Chrome Enterprise.

In a blog post, Google’s vice president of security and privacy Gerhard Eschelbeck outlined some of the highlights from today’s announcement, including a new feature called VPC Service Controls.

Built for Google’s cloud platform, VPC Service Controls are designed to keep sensitive data private when using Google’s cloud storage and data processing services. Eschelbeck said it can be thought of as a kind of firewall for application programming interface services, providing controls over which users can access GCP resources with Access Context Manager. It also helps enterprises to configure private communication between cloud resources and hybrid VPC networks.

“Imagine constructing an invisible border around everything in an app that prevents its data from escaping, and having the power to set up, reconfigure and tear down these virtual perimeters at will,” Eschelbeck said.

More centralized security controls

A second new feature is the Cloud Security Command Center for GCP, which is still under development but available for alpha testers. Eschelbeck describes Cloud Security Command Center as a “security and risk platform” for Google’s cloud that works by gathering data and identifying potential threats, before preventing them from doing any damage. It consolidates visibility into services such as App Engine, Compute Engine, Cloud Storage and Cloud Datastore, helping administrators understand any changes in these environments and mitigate any unauthorized alterations.

“Cloud SCC provides deep views into the security status and health of GCP services such as App Engine, Compute Engine, Cloud Storage, and Cloud Datastore,” Jennifer Lin, director of product management for GCP security and privacy, wrote in a second blog post. The full breadth of Google Cloud Platform security updates are in Lin’s post. Google has added seven new security capabilities in all, including new tools that  provide secure access to cloud services, prevent denial of service attacks and introduce greater transparency.

Additional protections for G Suite users

Google’s G Suite customers also get a raft of security updates covering its productivity tools. In a third post, Suzanne Frey, director of security, trust and privacy at G Suite, introduced new antiphishing capabilities as well as mobile management tools designed to secure vulnerable endpoints such as smartphones and tablets. Both capabilities have been switched on by default and are available immediately, Frey said.

“With these announcements, Google Cloud is continuing to provide more control and insight to customers, while offering them the peace of mind that many of the fundamental aspects of security are taken care of and constantly evolving along with the threat landscape,” said Doug Cahill, a senior analyst with ESG Research.

Image: cocoparisienne/pixabay