CyberIndexBeta

Product

Distributed cloud firewall service for Google Cloud workloads, offered in Essentials, Standard and Enterprise tiers. Cloud NGFW's fully distributed, stateful inspection firewall engine is built natively into our software defined networking fabric and enforced at each workload. Policy objects, such as Google Cloud Threat Intelligence lists , domain name (FQDN) objects , and geolocation objects , provide advanced protection for firewall rules. Register today for the Google Cloud Security Summit: Master security at the speed of AI with insights from leading industry voices. It is available as a cloud instance.

Current Version
Cloud · no version
Market
Enterprise
Licence
Free tier available
Price
Free · paid plans
Record Created
2026-09-19
Last Updated
2026-10-10

Vendor

Google's presence in this index is not a security business but two components of much larger platforms. Google Play Protect is the malware scanning built into Android devices with Google services, which scans applications at install time and periodically afterwards; it is on by default on billions of phones, which makes it the baseline Android security product rather than one a user selects. Cloud Next Generation Firewall is the firewall service within Google Cloud, protecting workloads that run there. Neither is sold as a standalone product and neither has a price of its own — Play Protect comes with the phone and the firewall is billed as part of cloud usage. Play Protect does appear in the mobile testing that AV-TEST and AV-Comparatives run, which is unusual for a platform-builtin, and its results are worth reading in the same way Microsoft Defender's are on Windows: as the standard a paid Android product has to beat to be worth installing. Vendor page →

Country
United States
Headquarters
Mountain View, United States
Year Established
1998
Customers
13M organisations
Users
2.8B devices protected
Revenue
$402.8B (2025)

Platforms

Cloudnative

Target Market

Enterprise primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)native
SSL/TLS Inspectionkeynative
VPN GatewaykeyNot known
SD-WANnot supported
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeCloud

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryFree tier availablenot statedno recurring chargeNot known

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedSD-WAN: not supportedevidence
  • 2026-10-06Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-06Capability addedIntrusion Detection (IDS): built inevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-06Capability addedStateful Inspection: built inevidence
  • 2026-09-20Pricing plan addedPrice: free tier availableevidence
  • 2026-09-20Platform addedRuns on Cloudevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.