October 15, 2026 · Google CloudFeature
Security Command Center Risk Engine adds EXTERNALLY_EXPOSED_VM_INSTANCE in Preview
To increase the precision of attack path analysis and provide attack exposure
scores that help you prioritize confirmed internet exposures,
Risk Engine attack path simulations support the
EXTERNALLY_EXPOSED_VM_INSTANCE
External Exposure finding category
(Preview). This
finding category identifies Compute Engine or Google Kubernetes Engine (GKE)
resources with a direct public IP address that allows host OS access.
For more information, see Detect exposed resources, Risk Engine feature support, and Overview of attack exposure scores and attack paths.
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.