IT Operations Automation · Security and Compliance
AGIT needed to scale a managed security operations center that could meet Indonesian data-residency requirements, reduce noisy alert handling, and standardize detection engineering for enterprise customers.
Reported impact
AGIT improved SOC response speed, raised true-positive rates, and made enterprise security due diligence easier for clients operating under strict compliance requirements.
PT Astra Graphia IT uses Google Cloud to address this challenge: AGIT needed to scale a managed security operations center that could meet Indonesian data-residency requirements, reduce noisy alert handling, and standardize detection engineering for enterprise customers. Google SecOps anchors the managed SOC for threat detection, investigation, and response inside the Indonesia region, serving as the serving layer. Gemini assists triage workflows and helps analysts respond to incidents faster, serving as the compute layer. Mandiant provides the detection engineering framework, assessments, playbooks, and operational uplift used to improve SOC maturity, serving as the governance layer. Identity and Access Management Workforce Identity Federation enforces tightly controlled access across the platform and backend integrations, serving as the governance layer. Compute Engine supports backend integrations used by the managed SOC platform, serving as the compute layer.
Security operations data is centralized in Google SecOps, Gemini-assisted workflows help analysts triage and respond, Mandiant strengthens detection content and playbooks, IAM Workforce Identity Federation governs access, and Compute Engine plus Cloud Run host the backend integrations behind the service.
AGIT scales its enterprise Managed SOC in Indonesia using Google SecOps, Gemini, and Mandiant to drive 15% faster response times.
AGIT's platform runs on tightly controlled access, enforced through Identity and Access Management (IAM) Workforce Identity Federation (WIF), with backend integrations built on Compute Engine Cloud Run.
Accelerated weekly detection rule creation by 300% and raised the detection true-positive rate by 10% by applying the
Automated triage and Gemini-assisted workflows cut mean time to detect and respond (MTTD/MTTR) by roughly 15%.
Cut threat detection and response times (MTTD/MTTR) by 15% with
Increased MITRE ATT&CK coverage by 10%, deliberately closing detection gaps across relevant techniques on
Review how this reference was scored and trace each normalized claim back to its documented source.
Scoring methodology
Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.
Traceability
Field coverage shows which facts each source supports. Dates are shown only when documented by the source.
Related
Google Cloud Sample Modified · Oct 9, 2026 Replenit Legacy marketing tools often treat individual shoppers as spreadsheet averages, relying on broad customer segments and predictable, rigid automation rules. As a result, brands frequently blast customers with irrelevant,… 360% business growth in one quarter with Google Cloud BigQuery · Cloud TPUs · Gemini Google Cloud Sample Modified · Oct 9, 2026 Riafy Technologies Riafy Technologies began its journey with a clear mission: to build adaptable and accessible AI systems that operate natively at a global scale. Today, the company's consumer-end products support 125 million people… Cut incident diagnostics from 40 minutes to under 1 minute Cloud Run · Cloud SQL · Gemini Models Google Cloud Sample Archived · Oct 2, 2026 Pokee AI This challenge is especially acute in ecommerce, financial services, and enterprise workflow automation. Even a seemingly simple purchasing decision can involve complex contextual information, and agents may lose track… BigQuery · Gemini · Gemini Enterprise 