Google Security Operations Agentic SOC

Plans and prices

Every plan, in full

On the record

Alert triage

The Triage and Investigation agent investigates alerts, enriches them with threat intelligence, and provides verdicts with explanations.cloud.google.com · read 14 Nov 2026

Analyst oversight

Agentic automation combines AI agents with deterministic playbooks and retains analyst control over critical actions.cloud.google.com · read 14 Nov 2026

Detection engineering

The Detection Engineering agent creates and validates detection rules to address emerging coverage gaps.cloud.google.com · read 14 Nov 2026

Integrations

Google SecOps SOAR playbooks can orchestrate over 300 tools, including EDR, identity management, and network security tools.cloud.google.com · read 14 Nov 2026

Platform capabilities

Google SecOps includes threat-centric case management, alert graphing, entity stitching, and AI-generated case summaries and recommendations.cloud.google.com · read 14 Nov 2026

Purpose

Google Security Operations provides agentic defense for workflows including alert triage, threat hunting, and detection engineering.cloud.google.com · read 14 Nov 2026

Threat hunting

The Threat Hunting agent searches for novel attack patterns and stealthy behaviors using intelligence from Mandiant, VirusTotal, and Google.cloud.google.com · read 14 Nov 2026

Token entitlements

Enterprise Plus and Google Unified Security customers receive daily included token allotments tied to the annual contract value of their underlying eligible package.docs.cloud.google.com · read 14 Nov 2026

Token limits

Paid token consumption must be activated per tenant, and administrators can set daily consumption limits through the web interface or Chronicle API.docs.cloud.google.com · read 14 Nov 2026

Token metering

Generally available autonomous agents consume Security Tokens; standard chat panels, automated summaries, and preview agents do not.docs.cloud.google.com · read 14 Nov 2026

Trial status

The official trial period for Security Tokens has ended; interested customers are directed to their account representative.docs.cloud.google.com · read 14 Nov 2026

Who it is for

The platform is intended for security teams seeking to detect, investigate, and respond to cybersecurity threats.cloud.google.com · read 14 Nov 2026

Alternatives to Google Security Operations Agentic SOC

MD Microsoft Defender for BusinessAndroidiPhone & iPad+3 AB AgentSOC by JutsuWebAPI+1 CC ClearSkies Centric AI TDIRAndroidiPhone & iPad+1 A AiSOCWebAPI+1 CA Cognna Agentic SOCWebAPI+1 CC CrowdStrike Charlotte Agentic SOARWebAPI AE Alaris Enterprise PlatformWebAPI+1 AP Anomali PlatformWebAPI

Every alternative, ranked