Engage with a security company to run web scrapers that look out for users' authentication data on malicious websites and notify you if any is found.

Deploy intrusion detection software to your virtual machines to detect and log unauthorized access.

Schedule a disaster simulation exercise during which you can shut off all VMs in a zone to see how your application behaves.

Configure a read replica for your Cloud SQL instance in a different zone than the master, and then manually trigger a failover while monitoring KPIs for our REST API.