Google Cloud Security Operations Data Benefit Program

Overview

The Google Security Operations data benefit program allows customers to ingest eligible data sources up to the amounts indicated below. Ingestion of these data sources will not count toward eligible customer’s existing Google Security Operations data cap.

Eligible Data Sources

Data Source

Benefit Details

Notes & limitations

GCP Cloud Audit Logs

Up to 10GB/day

Includes Admin Activity & System Event logs. Data access logs may incur separate charges in Cloud Observability.

GCP CNAPP Alerts

Unlimited

Available for Google Security Command Center (SCC) alerts

Chrome Enterprise Logs & Alerts

Unlimited

Available for Chrome Enterprise Core or Premium logs and alerts

Google Workspace Logs

Up to 10GB/day

Includes standard Workspace log types

GCP Context Data

Unlimited

Includes entity and asset context from Cloud Asset Inventory

Approved Third-Party EDR Alerts

Unlimited

Applicable to alerts from Google approved third-party EDR vendors. Excludes raw logs.

Wiz Data Sources

Source-specific volume exemptions

Available to qualifying joint Wiz Defend customers. See the Wiz Data Benefits page for details and eligibility.

Eligibility Criteria

To qualify for this benefit, a customer must meet all of the following criteria:

  • New or Renewing Contract: Standard Google Cloud SecOps ingestion benefits apply to eligible contracts signed on or after February 1, 2026. Joint Wiz Defend ingestion benefits apply to eligible contracts signed on or after October 8th, 2026.
  • Eligible Subscriptions: Customer must subscribe to the Google Security Operations Enterprise or Enterprise Plus SKU (“Eligible Subscription(s)”). This benefit applies solely to the specific qualifying Eligible Subscription purchased and does not extend to other subscriptions, instances, or accounts held by customer.
  • Spend Threshold: Customer’s Eligible Subscription must meet Google’s then-current minimum Annual Contract Value (ACV) spending thresholds for the program.

Program Terms

  • Provisioning: Eligible customers will begin receiving the benefit once the customer’s applicable tenant(s) are provisioned and Google has activated the configuration. Benefits operate as daily or monthly allowances as specified for each eligible data source. Unused daily or monthly capacity does not roll over to subsequent periods and does not apply retroactively to data ingested before activation.
  • Duration: The benefits noted in this program are valid for the duration of a customer’s Eligible Subscription Order Term only. Google reserves the right to modify or discontinue this offer for future purchases or renewals. 
  • No Cash Value & Non-Cumulative: These benefits are non-transferable, cannot be exchanged for cash or other value, and may not be applied to other Google Cloud services. Ingestion benefits do not stack; eligible data sources cannot receive multiple or overlapping allowances across partner or promotional programs.
  • Right to Modify: Google reserves the right to modify the list of eligible data sources or program terms at its discretion.

Request a custom quote

With Google Cloud's pay-as-you-go pricing, you only pay for the services you use. Connect with our sales team to get a custom quote for your organization.
Google Cloud