Out-of-the-box rules based on industry standards to mitigate against common web-application vulnerabilities and help provide protection from the OWASP Top 10.

Create custom rules using any combination of L3–L7 parameters and geolocation to help protect your deployment with a flexible rules language.

Easily monitor all of the metrics associated with your security policies in the Cloud Monitoring dashboard. You can also view suspicious application traffic patterns from Cloud Armor directly in the Security Command Center dashboard.

Get visibility into Cloud Armor decisions as well as the implicated policies and rules on a per-request basis via Cloud Logging.

Deploy Cloud Armor rules in preview mode to understand rule efficacy and impact on production traffic before enabling active enforcement.

Configure one or more security policies with a hierarchy of rules. Apply a policy at varying levels of granularity to one or many workloads.

Filter your incoming traffic based on IPv4 and IPv6 addresses or CIDRs. Identify and enforce access control based on geographic location of incoming traffic.

Help defend applications from DDoS or web attacks and enforce Layer 7 security policies whether your application is deployed on Google Cloud or in a hybrid or multicloud architecture.

Allow or deny traffic through a Cloud Armor security policy based on a curated Named IP List.