About

Who you’ll work with.

Varun Brahmkshatriya

Founder

I ran security operations at Peloton Interactive, and before that I worked security at The RealReal. Seven years of it: detection engineering, cloud security, and the part that does not fit on a CV, which is being the person who decides at 1am whether the thing on the screen is real.

Both are US companies with the stack, the scale and the compliance obligations this service is built for, so the work is not a theory I am testing on you.

In the first year I am accountable for every account personally. The analysts named on yours work alongside me, and the number of accounts we take is limited by that on purpose.

Selected work

  • SIEM pipelines across 30+ cloud, SaaS and network sources
  • EDR taken to 95%+ endpoint visibility
  • Vulnerability remediation time cut by 80%

MS in Informatics, Northeastern University · AWS Certified Security – Specialty

Why Sentryx exists

A company of 150 people can be held to the same security obligation as a company of 15,000, and the obligation is binary. An auditor, a customer questionnaire or an underwriter either sees continuous detection or it does not. There is no partial credit. Meanwhile the cost of satisfying it in-house is a step: one analyst covers one shift, and continuous coverage takes several. That is the gap, and it is structural. It does not close by trying harder.

India’s working day covers the Americas’ night. The shift that is most expensive and lowest-quality to staff in the US is the one we staff best, because for us it is daytime. That is geography doing the work, which is why we can compete on how much attention your account gets rather than on our rate.

There is already a large security services industry here. The complaint about it is rarely competence. It is attention: generic playbooks, no ownership of the customer’s actual stack, escalation by volume instead of judgement. Sentryx is the attempt to use the same geography and run it like an embedded team.

Who we work with

US-based SaaS and technology companies of 50 to 1,000 people. Cloud-native, modern tooling, zero to two security people, no night coverage. Usually in the market because of SOC 2 Type II, an enterprise customer’s security review, or a cyber-insurance requirement, and sometimes HIPAA or PCI where the product serves those markets.

Start with a 30-minute conversation.

Then a paid 30-day proof of concept on your real alerts, before either side is committed to anything.

Book a 30-minute conversation