Stepping Up the Cloud Security Game

This post details the development and initial deployment of Forseti, an open-source security tool for Google Cloud Platform, created in partnership with Google. Forseti provides an inventory of cloud resources, runs scanners to detect security misconfigurations (e.g., public GCS buckets, exposed CloudSQL instances, IAM policy violations, bogus firewall rules), and offers automated enforcement capabilities to fix identified issues. The post highlights the scale of auditing achieved and the benefits of automated alerting to asset owners.