Google, home to widely used products like Search, Gmail, and Android, manages security for over 2 billion active users. Under Adkins’ stewardship, the company aims to simultaneously reduce digital risk and foster the experimentation crucial to its success. “Security is not only about building walls—it’s about empowering our engineers to innovate safely,” Adkins told delegates at the recent RSA Conference in San Francisco.
This dual role, she says, requires a blend of technical rigor, transparent communication, and close collaboration across engineering and product teams. “We want our teams to push boundaries, but to do so within a framework where risks are understood and managed,” she explained.
Evolving Threats Require Evolving Defenses
The cybersecurity landscape is marked by an explosion in phishing attacks, ransomware campaigns, and exploitation of zero-day vulnerabilities. Data from Google’s own Threat Analysis Group (TAG) shows a 34% increase in state-sponsored attacks targeting cloud infrastructure in the last year. Adkins acknowledges that Google’s popularity makes it a frequent target, noting, “We see attacks every single day—they’re persistent, and they’re creative.”
Google’s approach is multi-layered, utilizing proprietary AI-powered detection methods, continuous vulnerability assessments, and a strong focus on end-user protections such as two-factor authentication and advanced password management tools. “People trust us with their information,” Adkins said. “That trust drives us to invest not just in the technology, but in the processes and people that protect it.”
Integrating Security with Product Design
A cornerstone of Google’s security strategy is the integration of risk assessment and protection mechanisms into every phase of product development. Adkins champions the philosophy of ‘secure by design,’ which mandates that security controls are baked into products from the earliest development stages.
“Security becomes a catalyst for better products when it’s part of the DNA, not an afterthought,” she affirmed. This collaborative approach also extends to regular “red team” exercises, where internal experts simulate real-world attacks to uncover and patch vulnerabilities before products reach the public.
Balancing Openness and Protection
Google’s open-source initiatives, such as Kubernetes and TensorFlow, have revolutionized the wider tech ecosystem but also present unique security challenges. Adkins points out that supporting open-source security isn’t just altruistic—it’s vital for Google’s own integrity. The company recently expanded funding and engineering resources to fortify commonly used open-source projects, aligning with White House recommendations to secure software supply chains.
“We all stand on the shoulders of shared code,” Adkins noted. “Making open-source safer helps everyone, including us.”
Empowering Users and the Industry
Beyond technical defenses, education and collaboration are pivotal to Google’s broader cybersecurity mission. The company regularly publishes threat intelligence and collaborates with law enforcement, academia, and industry partners. Initiatives like the Advanced Protection Program offer heightened safeguards for high-risk users, while Google’s Project Zero continues to expose and help patch critical vulnerabilities across the internet.
Adkins underscores the importance of this ecosystem approach: “No company is an island in cybersecurity. The threats are too vast, and the stakes are too high. We have to work together.”
Challenges Ahead and the Future of Security
Looking ahead, Adkins warns that AI-powered attacks and increasingly sophisticated social engineering tactics will require unprecedented adaptability. “Attackers move as fast as technology evolves. Our defenses must anticipate, not just react,” she advised.
Google’s plans include more aggressive investment in automation, threat intelligence, and ethical hacking programs. Adkins also advocates for increased diversity and inclusion within cybersecurity teams to surface a broader spectrum of vulnerabilities and solutions.
