Google LLC today launched a new cloud security service that aims to help ensure its customer stay in compliance with any regulations they need to adhere to.

Security Health Analytics is a security service that integrates with Google’s Cloud Security Command Center. In a blog post, Google Cloud product manager Kyle Olive said it enables companies to identify misconfigurations and compliance violations with Google Cloud resources and take action to remedy them.

Google said the service is necessary because the more that companies take advantage of cloud computing to build apps and services and push these into production, the greater the risk of falling out of compliance. The problem is that using multiple cloud products often leads to what’s known as “shadow IT,” in which organizations are no longer aware of which services are running where and how secure they might be.

Security Health Analytics provides a way for Google Cloud customers to check that all of their resources are properly configured and that they’re compliant with Center for Internet Security benchmarks, which detail the best practices for the secure configuration of cloud infrastructure.

The service has already proven popular with AirAsia Group Berhad, a low-cost carrier based in Malaysia that currently serves more than 150 destinations worldwide. AirAsia’s business has a massive information technology operation with thousands of virtual machines running in Google’s cloud. It also makes extensive use of services such as Google Kubernetes Engine and App Engine for application development, and Security Health Analytics helps it to ensure that everything is running as it should.

“Being able to go to the new Security Health Analytics dashboard eliminates the guesswork of what we have running and if it is secure,” said Muhammad Faeez Bin Azmi, an information security and automation solution architect at AirAsia. “Now anyone on our team, even non-security professionals, can go to this dashboard and see a list of the misconfigured assets and compliance violations across all of our GCP resources. We can also see the severity of misconfigurations, which helps us prioritize our response.”

Security Health Analytics also provides suggestions on how to fix any compliance issues it finds. A click on a finding through the dashboard will throw up a step-by-step remediation plan to fix it.

Google said Security Health Analytics is available now in beta testing.

Image: Google