What GCP Cloud Armor is
Like AWS, the GCP WAF offering is quite substantial. They also have an 8KB limit, but offer a great solution for GCP native applications. The vendor site is cloud.google.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What GCP Cloud Armor covers
GCP Cloud Armor is in the catalog for these capabilities. Categories: API Security. Catalog tags: Included.
How to evaluate GCP Cloud Armor in a security program
Use GCP Cloud Armor as a stack candidate, not as diligence evidence. The oneNorma score for GCP Cloud Armor is 4/10 (percentile 15). If the real gap is in API Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what cloud.google.com publishes. Contrast it with pentesting and Security Cloud & Compliance.