What GCP Analysis is
Of the cloud providers, GCP offers the best native tooling to scan and remediate container vulnerabilities. Combined with Google Distroless images, Google offers robust out of the box image protection capabilities for containerized environments. The vendor site is www.google.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What GCP Analysis covers
GCP Analysis is in the catalog for these capabilities. Categories: Container Vulnerability. Catalog tags: Included and Best for Startups.
How to evaluate GCP Analysis in a security program
Use GCP Analysis as a stack candidate, not as diligence evidence. The oneNorma score for GCP Analysis is 5.3/10 (percentile 57). If the real gap is in Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.google.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
