The Google security specialist

Amastra is not a traditional software vendor; it is a specialized security consultancy built to navigate the increasingly complex Google Cloud security ecosystem. Founded by veterans of global systems integrators, the firm identifies a specific friction point in the market: the distance between high-level security strategy and the deep engineering required to make Google's security tools work for large organizations. Their work centers on Google SecOps, the platform that evolved from Chronicle, and Security Command Center Enterprise (SCCE).

Technical lineage

The founders, Alex Glowacki, Mitchell Rudoll, and Arnav Jain, bring experience from leadership roles at Deloitte, Accenture, and Target. They emphasize a technical lineage that pre-dates the modern Google Security Operations suite, describing their familiarity with the stack back to its origins as Backstory, before it was folded into the broader Google Cloud fabric. This history is relevant because Google's security narrative is a composite of several high-profile acquisitions, including Siemplify for SOAR capabilities and Mandiant for threat intelligence and incident response. Amastra functions as the technical glue that binds these disparate tools into a functional security operations center (SOC).

Modern security and AI

Beyond traditional SIEM and SOAR migrations, Amastra has established a practice in generative AI security. As enterprises deploy large language models via Vertex AI, they face new risks around data leakage and model poisoning. Amastra consults on the implementation of Model Armor and data loss prevention (DLP) frameworks to secure these agentic workflows. This goes beyond setting up a firewall; it involves defining the privacy and governance guardrails that allow an enterprise to use AI without compromising data integrity. The firm also assists with Chrome Enterprise Premium (CEP) tuning to harden the browser-based perimeter where many AI agents operate.

The boutique model

The company explicitly contrasts itself with the rigid deployment methods of larger firms. Their model uses what they call "Agentic Innovation," which involves proprietary AI-powered frameworks designed to reduce the time-to-value for security deployments. By using AI to automate the more routine aspects of security engineering, they aim to deliver the results of a much larger team with the speed of a boutique shop. This approach reflects a broader trend where service firms use the very tools they consult on to optimize their own internal delivery.

Market position

Based in the United States with hubs in Chicago, Oklahoma City, and Austin, Amastra occupies a strategic position as a Google Cloud partner. They serve organizations moving away from legacy SIEM platforms who require more than just a software license. By focusing exclusively on the Google stack, Amastra avoids the dilution of being a generalist, betting that the technical complexity of Google’s unified security fabric provides enough room for a specialized player to thrive. Their clients are typically global enterprises that need elite expertise to navigate the integration of AI models and security operations.