Represented by AHEAD ↗, Carahsoft ↗, GuidePoint Security ↗, Kudelski Security ↗, Optiv ↗, Presidio ↗, TD SYNNEX ↗, World Wide Technology ↗
Google's zero trust implementation for secure access without VPN AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →
Tools & products
We build profiles from public sources and haven't extracted a capability list for Google. Closest sources we do hold:
Integrated by: 1Kosmos, 1Password, 42Crunch, 6Wind, ACI Learning, ANY.RUN, AVG, Abbey Labs, Above Security, Abstract Security, AccuKnox, Acme Security EDR, Acronis International GmbH, Acsense, Acuity Risk Management, Adaptive, Adaptive Security, Ahsay Systems Corporation, AiStrike, Aikido Security, Akeyless Security, Alice, Amplify Security, Anchore, Andesite, Andromeda Security, Anecdotes, Anjuna Security, AnubisNetworks, Anvilogic, Aona AI, Apono, AppOmni, Approov, Apptega, Aqua Security, AquilaX, Arcanna.ai, Arize AI, Asenion, Astrix Security, Attaxion, Auconet, AuditBoard, AuthZed, Avatier, AvePoint, Aviatrix, Axcient, Axiom Security, Axoflow, BMC Software, Bastion, Beta Systems, BetterCloud, Beyond Identity, Bitwarden, Black Duck, Blackpoint Cyber, Blink Ops, Bolster, BrandShield, Bridewell, Britive, CHEQ, CMD+CTRL Security, Cakewalk, Cambridge Intelligence, Carbide, CardinalOps, Caveonix, Censys, Cequence Security, Chainguard, CheckRed, Cisco, Claroty, Cleafy, ClearDATA, Clerk, CloudDefense.AI, Cloudcheckr, Cloudsmith, Coalfire, Coalition, Codenotary, Cofense, Cohesive Networks, Collibra, Commvault, Comodo, Complyan, Complyance, Compyl, Concentric AI, ConductorOne, ConnectSecure, ConnectWise, LLC, ControlMap, Conveyor, Conviso, Coralogix, CoreStack, Corelight, Corgea, Corsica Cybersecurity, Cosmian, Cotool, Credas, Cribl, CrowdSec, CrowdStrike, CultureAI, Curricula, Cybeats, Cyber Aware, CyberGuard360, CyberProof, Cyberfort / Auriga, Cyberhaven, Cybervergent, Cyble, Cyera, Cyjax, Cylera, Cylus, Cyolo, Cypago, Cyrebro – CyberHat, Cyscale Limited, Cyver, D3 Security, DTS Systeme GmbH, Darktrace, Dastra, Data Theorem, DataBahn, Databricks, Datto, Daylight Security, Descope, DeviceLock, Devolutions, Devtron, Didomi, DigitSec, Digital Hands, Discern Security, Dispel, DoControl, Domino Data Lab, Doppel, Dropzone AI, Duality Technologies, Dune Security, Duo Security, Dymo, ELLIO, ESET, EasyDMARC, Echo, Echoworx, Edge Delta, EdgeBit, Edgeless Systems, Edgescan, Egnyte, Elastic, Embed Security, EmpowerID, Engage Black, Entitle, Entro Security, Equixly, Eureka Security, Exabeam, Exaforce, Exeon, Expel, ExtraHop, F5, FTAPI Software, Faddom, Fastly, Fencer, Fiddler AI, Fidelis Security, FileCloud, FireMon, Firezone, First Recon AI, Flare, Fleet Device Management, Fortanix, Fortinet, Frame Security, FusionAuth, GTB Technologies, Gigamon, GitLab, GoodAccess, Grip Security, Group IB, Guardian360, Gurucul, HYCU, Hadrian, Haekka, Halo Security, Heimdal Security, Herd Security, HeroDevs, Hicomply, HiddenLayer, Hideez, HiveMQ, Hook Security, Huntbase, Huntress, Hyperproof, Hysolate, IDEE, IRONSCALES, ISMS.online, ISO2HANDLE, Illumio, ImmuniWeb, Immuta, Imperum, Imperva, InCountry, Incode Technologies, Indusface, Infisical, Infoblox, Informatica, InstaSafe Technologies, Intermedia, Intezer, Intruder, Invicti, JFrog, Jamcracker, Jit, JumpCloud, Kaseya, Keepnet Labs, Kentik, Kertos, Kiteworks, Kloudle, Konvu, LEET Security, LMNTRIX, LastPass, LayerX, Legato Security, Legion Security, Lema, Lightbeam, Liongard, LogCraft, LoginRadius, Loginsoft, Lumos, Mage Data, ManagedMethods, Material Security, Menlo Security, Mesh Security, MessageSolution, Inc., Metomic, MindTheHack, Mindflow, Mitigant, Mitigata, Monad, Moxso, Mycroft, N-able, NIST, Nagomi Security, Native Security, NetBird, NetLib Security, NetScaler, Netenrich, Netmaker, NeuVector Inc., NightVision, Nightfall AI, NinjaOne, Nirmata, NordLayer, Nubo Software, Nucleus Security, Nudge Security, ORION, Obsidian Security, OctoXLabs, Offensive360, Offroad, Olakai, Oleria, OneSpan, OneTrust, Onspring, Onyx Security, Oomnitza, OpenText Cybersecurity, Operant AI, Opsin, Optimal IdM, Optro, Orca Security, Ory Corp, OutThink, Owl Browser, Ox Security, P0 Security, PII Tools, PKWARE, Inc., Palo Alto Networks, Panther, Parablu, Passguard, Pathlock, Pentera, Perimeter81, Permiso, PhishFirewall, PhishingBox, Phoenix Security, PitchPoint Solutions, PlaxidityX, Plerion, Plexicus, Ploy, PointGuard AI, Pomerium, Portkey, Portnox, Precisely, Prelude Security, Privacera, Privado, Progress – formerly ipswitch, Promptfoo, Proofpoint, Prophet Security, Protegrity, ProtonMail, Prowler, Push Security, Qevlar AI, QueryPie, QuilrAI, RackSpace, Rapid7, RapidFort, Reach Security, Reco, Red Canary, RedSeal, RegScale, Resecurity, Rhebo, Risk Cognizance, Riverbed, Ruckus – CommScope, Runlayer, S4E.io, SAI360 INC., SMARTFENSE, SOC Jedi.AI, SOFTwarfare, SUSE, Safe Security, SailPoint, Salt Security, SandboxAQ, Sandfly Security, Saporo, ScalePad, Scalekit, Scrut Automation, Scytale, Searchlight Cyber, SecLogic, Seceon Inc, Secretarium, SecurEnvoy, SecureSky, Secureframe, SecurelyShare, Seemplicity, Sekoia.io, Sennovate Inc, SentinelOne, Seraphic, Serval, Sevii, ShadowDragon, ShardSecure, ShareFile, Signaturit, Silence Laboratories, Silverfort, Simbian, Sinaptic.AI, Skyflow, Skyhigh Security, Smallstep, Smarttech247, Sn1perSecurity LLC, Snyk, SoSafe, Socket, Socura, Sola Security, Spirion, Splunk, SpyCloud, Stairwell, Stellar Cyber, Strac, StrangeBee, Stream.Security, Strobes Security, Sumo Logic, Superscript, SurePath AI, Suridata, Swif, Synqly, Sysdig, Systancia, TCPWave, TRaViS ASM, Tailscale, Talon Cyber Security, Tamnoon, Team Cymru, Teleport, Teleskope, Tenable, Tenzir, Terralogic, ThreatAware, ThreatDefence, ThreatDown by Malwarebytes, Tigera, Token Security, Torq, Tracebit, Transcend, Trend Micro, TrueFoundry, Truffle Security, Trust3 AI, TrustArc, TrustLayer, TrustLogix, TrustWorks, Trustero, Trustle, Tuskira, Twingate, Ubiq Security, Ubisecure, UncommonX, Uno, Unosecur, UpGuard, Upstream Security, Upwind, Usercentrics, Valence Security, Vali Cyber, Valimail, Vamu, Vanta, Vaultree, Vectra AI, Veeam Software, Versa Networks, Very Good Security (VGS), Veza, Vijil, Vijilan, Virtru, Vorlon, WPMissionControl, Wazuh, Webz.io, Whalemate, Whistic, Willow, Wiz, XFA, XM Cyber, Zenity, ZeroFox, Zimperium, Zluri, Zscaler, Zygon, Zynap, c/side, eMudhra, eSentire, elba, enclaive, eperi, furl, heylogin, hoop.dev, iDenfy, ipqualityscore, isMalicious, keepit, keyfactor, mondoo, netcraft, plainid, productiv, prove, rebasoft, revel8, rmail, runZero, secfix, smartertools, specterops, spin.ai, tetrate, torii, utimaco, velotix, viso trust, zentera
0 of 5 independent trust signals established
Nothing about Google has been independently confirmed yet. That is a starting point, not a finding — every profile begins here, and it says nothing about the product.
Not yet established: Independently verified · Operating durability · Behaviour under stress · Disclosure posture · Momentum
Has anyone other than the vendor confirmed this?
Nothing here has been confirmed by an independent third party yet.
Is this a real, durable business?
How long this vendor has been operating, and who stands behind them.
What do they do when something goes wrong?
What their public record shows about handling vulnerabilities and outages.
Do they tell you the awkward things unprompted?
How much this vendor volunteers before you have to ask.
Are they still shipping, or coasting?
Whether this vendor is visibly still building.
Security headers (1/5) — checked 10/18/2026
Infrastructure & transparency signals
13 CVEs have an estimated 10%-or-higher chance of having already been exploited despite not appearing on CISA's KEV catalog. KEV is a curated record of confirmed cases rather than a complete census, so this is where its coverage is likely thinnest — an estimate from EPSS history, not a finding. Based on a median of 2 EPSS observations per CVE.
Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.
PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle) component 1.1 for J…
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when use…
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x befor…
Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive…
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Java…
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity o…
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive inf…
browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-as…
Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.
Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitra…
WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's U…
SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands…
The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS requ…
The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause…
WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, wh…
The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspe…
Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Dispos…
Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-midd…
Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009…
The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting atta…
Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the re…
Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a rel…
Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross…
Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location pr…
Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers…
Not a quality rating or endorsement — a measure of how much verified, disclosed data we actually have about this vendor. A low score usually means "we don't have much verified information yet," not "this is a bad vendor." Never used to sort or rank vendor lists.
The platform admin controls the formula's weights.
Product information on this page is auto-generated by 0-Doubt from public sources and not yet confirmed by the vendor or an independent analyst, unless an item is individually labelled otherwise. How trust works →