Google Sec-PaLM
Legacy branding — Google's security LLM is now Gemini in SecOps
Overview
Sec-PaLM was Google Cloud's security-tuned LLM behind the original Security AI Workbench. Google has since moved this capability to Gemini-branded products — Gemini in Google SecOps (Chronicle) and the experimental Sec-Gemini research model — so "Sec-PaLM" no longer reflects what's shipping.
Use cases
What you can produce with Google Sec-PaLM
- Threat and alert summarization (legacy, via Security AI Workbench)
- Malicious script explanation and triage assistance
- Trained on Mandiant + VirusTotal threat intelligence
- Superseded by "Gemini in Google SecOps" inside Chronicle
- Sec-Gemini experimental research model with public GitHub SDK/CLI
ASEAN Perspective
Google Sec-PaLM in Southeast Asia
ASEAN-region availability and pricing notes coming soon. Drop the editorial team a note via /contact/ if you can supply local context (Singapore/Malaysia/Indonesia/Thailand/Vietnam).
Treat this entry as a naming problem more than a product review. Sec-PaLM was real — a PaLM 2 variant fine-tuned on Mandiant and VirusTotal threat data, launched in 2023 inside Google Cloud's Security AI Workbench — but Google's own documentation for Chronicle/Google SecOps no longer mentions it by name. The security-AI capability that used to carry the Sec-PaLM label now ships as "Gemini in Google SecOps," and Google separately publishes an experimental research model called Sec-Gemini (with a public GitHub SDK) that isn't the same product as the enterprise Chronicle assistant. None of that means Google abandoned AI-assisted SecOps — quite the opposite, it's actively expanding it — but a buyer searching for "Sec-PaLM" in 2026 will find dead branding, not a purchase path. Anyone evaluating this space should look up Gemini in Google SecOps and Chronicle directly rather than shopping for Sec-PaLM by name.
What people say
There isn't a standalone review corpus for Sec-PaLM the way there is for named products on G2 or Gartner Peer Insights — it was never sold or reviewed as a discrete SKU. It shipped bundled inside Google Cloud's Security AI Workbench starting in 2023, fine-tuned on Mandiant frontline threat intelligence and VirusTotal data to explain suspicious scripts, summarize alerts and draft detection queries inside Chronicle. Coverage at the time was positive on the specific value of Mandiant-grade threat data feeding the model, a real differentiator few competitors can match — VirusTotal alone sees a huge volume of daily submissions Google can mine for training signal.
By 2026, Google's own Chronicle/Google SecOps documentation has fully moved to "Gemini in Google SecOps" branding, with dedicated sections for Gemini-powered investigation assistance and in-product help — Sec-PaLM doesn't appear in current docs at all. Separately, Google publishes Sec-Gemini, described as an experimental model "designed to enhance cybersecurity capabilities," released with a public SDK and CLI on GitHub (github.com/google/sec-gemini) — a research artifact aimed at security researchers, not the same thing as the commercial Gemini-in-SecOps assistant enterprise buyers get inside Chronicle.
Practically, this means the directory entry for "Google Sec-PaLM" is reviewing a name Google itself has retired. Buyers evaluating Google's security AI in July 2026 should be looking at Gemini in Google SecOps for the commercial product, and at Sec-Gemini only if they specifically want the free experimental research model. Both inherit Sec-PaLM's core idea — an LLM tuned on real threat intelligence rather than general web text — but neither is purchasable or discoverable under the Sec-PaLM name anymore.
Summary of public user & expert reviews, compiled by RECATOOLS.
About this listing
This entry was compiled from publicly available data including Google Sec-PaLM's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Google Sec-PaLM unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Google Sec-PaLM directly →
Spotted something out of date? Suggest an update →
Google Sec-PaLM in the news
More in Security & Safety
