Having gone through a SOC2 security architecture deployment on GCP over the last 2 years, looking to trade notes with anyone else who has gone through this effort. We leveraged Web-Application-and-API-Protection (WAAP) and configuration monitoring (Dome9) from Checkpoint. But had to go through growing pains as Checkpoint had to port their products to GCP. Wondering if there are any alternatives directly from GCP or other vendors.