Upgrade OWASP 3.0 / 3.3 policies → CRS 4.22

Paste or upload an exported Cloud Armor security policy. Every rule is translated deterministically, risk-tiered, and exported as ready-to-apply Terraform, JSON, or YAML. Nothing touches your GCP project.

Upload a policy exportgcloud JSON / YAML — no credentials needed

Review rule updatesRules displayed in priority order with risk-tier badges

Export upgraded policyTerraform HCL, JSON, or YAML for safe rollout

Security policy

Upload or paste an exported Cloud Armor policy below.

How to export your Google Cloud Armor Security Policy

Export Method	Supported Formats
gcloud CLI Recommended	JSON YAML	▾
Run either command in your terminal to describe or export your Cloud Armor policy: `# JSON format gcloud compute security-policies describe YOUR_POLICY_NAME --format=json > policy.json # YAML format gcloud compute security-policies export YOUR_POLICY_NAME --file-format=yaml --file-name=policy.yaml`
Terraform Manifest (.tf)	HCL	▾
If your Cloud Armor security policy was originally created or managed with Terraform, you can upload or paste your existing `.tf` resource file (containing `google_compute_security_policy`) directly into this tool.

Drag & drop your policy file or click to browse

.json.yaml.yml.tf

Analysis runs on the exported file only — no GCP authentication, nothing is stored.

Upgrade OWASP 3.0 / 3.3 policies → CRS 4.22

Security policy

✨ Executive Migration Summary

Risk distribution

Rule migration ledger

Upgraded Policy Export