Use Google Cloud Armor

Google Cloud Armor helps you protect your Cloud Run services from multiple types of threats, including distributed denial-of-service (DDoS) attacks and application attacks like cross-site scripting (XSS) and SQL injection (SQLi).

See Google Cloud Armor documentation to learn how to use Google Cloud Armor with Cloud Run.