AI fix guidance

Remediations

Plans that ship the fix

Every SecureMonitor finding is paired with an AI-authored remediation plan: step-by-step guidance, scoped risk, and an escalation path to a certified GCP engineer if you need one. From finding to fixed in minutes, not weeks.

Book a guided demo Compare to other modules

One plan per finding
Cost, security, performance, sustainability — all categories covered.
Risk + severity
Each plan tagged with risk level so engineering can prioritise safely.
Manual steps
Every step spelled out — console paths, exact button labels, validation.
Escalation built-in
Need help? Contact Zenta routes you to a certified GCP engineer.

Walkthrough

Inside Remediations.

Categorized plans, console-level steps, scoped risk — what an engineer actually gets.

A plan for everything

Every Finding, Categorized

1,878 plans generated across your org

All (1878)Cost (8)Security (1870)Vulnerability (0)Performance (0)Manageability (0)Sustainability (0)Reliability (0)

Console-level instructions

Remove Broad Public IP Ranges

CRITICAL

Step-by-step plan, generated by Pulse

●Open the Cloud SQL instances page in the GCP Console.
●Select project: acme-prod from the dropdown.
●Go to ‘Connections’ and review authorized networks.
●Remove broad ranges such as 0.0.0.0/0 and save.

+ 5 more steps in the full plan

Risk known up front

Scoped Before You Start

Manual steps9

SeverityCRITICAL

Risk levelMEDIUM

StateREADY TO START

Escalate to the Zenta team anytime

The full experience

The full Remediations tour.

What you see below is a preview. Share your details and we'll email you a private link to the full interactive tour of Remediations — every module, click-through, at your own pace.

app.zenta.ai / remediation-plans

Remediation Plans

AI-powered security and cost remediation

Remediation Plan

Search remediations…

All (1878)Cost (8)Security (1870)Vulnerability (0)Performance (0)Manageability (0)Sustainability (0)Reliability (0)

Remove Broad Public IP RangesCRITICALSECURITY
Cloud SQL instance ‘acme-orders-mysql’ has broad public IP ranges authorized, which could expose it to unauthorized access…
RC-dcecc6390af4READY TO START
Address Codeception Deserialization VulnerabilityCRITICALSECURITY
The codeception/codeception package is vulnerable to deserialization of user input, which may lead to arbitrary comman…
SF-f25156f7a73dbREADY TO START
Restrict Ingress Traffic Firewall RuleCRITICALSECURITY
The firewall rule ‘default-allow-https’ allows ingress traffic from any IP address (0.0.0.0/0), which increases the attack surface…
SF-57088e7f1023READY TO START
Secure Exposed Service AccountCRITICALSECURITY
The service account billing-alerts-svc@acme-prod.iam.gserviceaccount.com exposes valued resources…
SF-c8ee5f3aa01bREADY TO START

Total: 1878 • Page 1 of 188Previous123…Next

Remove Broad Public IP Ranges

Cloud SQL instance ‘acme-orders-mysql’ has broad public IP ranges authorized, which could expose it to unauthorized access. This recommendation suggests reviewing and removing these broad ranges for enhanced security.

Manual Steps Required

CRITICAL

Severity

MEDIUM

Risk Level

Step-by-Step Process

●Navigate to the Cloud SQL instances page in the Google Cloud Console.
●Select project: acme-prod from the project dropdown.
●Click on the instance named ‘acme-orders-mysql’ in the list.
●Go to the ‘Connections’ tab.
●Navigate to the ‘Networking’ tab.
●In the ‘Authorized networks’ section, review the list of authorized networks.
●Identify and remove any broad public IP ranges such as 0.0.0.0/0.
●Click ‘Save’ to apply the changes.
●Verify that the instance is no longer exposed to broad public IP ranges.

Interactive product tour

Take the Remediations tour yourself

An interactive, click-through tour of every Remediations module — explore at your own pace. Drop your details and we'll email you a private link. No call required. (Prefer a live walkthrough with an engineer? Book a guided demo.)

No call required
Explore at your own pace
All the modules

Why this exists

“60% of organisations that suffered a breach cited a known, unpatched vulnerability as the root cause. The fix existed. The execution didn't.”

— Ponemon Institute / Cost of a Breach 2024

/01

Authoring at scale

AI writes the plan. A human signs off.

Pulse generates the plan from the finding's metadata, then routes anything novel through a certified engineer for review before publishing.

/02

Time compression

Hours of research collapsed to minutes of execution.

Open the plan, follow the steps, validate, close. The same fix that takes a junior engineer half a day takes minutes.

/03

CloudCare layer

Stuck? Hand it to us.

Every plan ships with a Contact Zenta Team button. Our certified GCP engineers can implement the fix on your behalf — that's the CloudCare support layer baked into the platform.

Pairs with

Remediations doesn't work alone.

Security posture

SecureMonitor

Severity-driven triage on top of SCC. A 30-day trend tells you if posture is improving.

AI assistant

Ollie

Asks your environment, not the documentation. Pulls live data into every reply.

Live walkthrough

See Pulse in action,
today!

We walk you through every Pulse module — BillPulse, SecureMonitor, PulseArc, Ollie, Killswitch — on a representative GCP environment loaded with realistic data, together with a certified engineer from the D3V team. About 30 minutes.

Or explore all the modules

What you'll see in the demo

01Daily cost intelligence — daily run-rate, monthly forecast, and gross-vs-net at the project grain.
02Severity-ranked SCC findings with the matching AI remediation plan one click away.
03An interactive PulseArc map of resources with security overlay — a live document, not a drawing.
04Ollie answering plain-English questions about a realistic GCP environment, with sources.

hello@zenta.ai~24h reply

Free Cloud Security AssessmentSeparate offering

A one-off, no-charge audit that surfaces critical SCC findings in your GCP — a complimentary service from D3V to help teams understand their security gaps before adopting Pulse.

Get in touch