Secure Gateway Studio

Administrator deployment console for Chrome Enterprise Premium and Secure Gateway environments.

Secure Gateway Studio is an administrator tool for planning, applying, and verifying Chrome Enterprise Premium deployments against your own Google Cloud project and Google Workspace tenant. It is not a service. There is no account to create, no server operated by the developer, and no data sent anywhere except to Google's own APIs using your own administrator credentials. WHAT IT DOES - Secure Gateway deployments. Designs and applies BeyondCorp Private Security Gateway architectures for private HTTPS applications: direct private HTTPS, Nginx HTTPS-to-HTTP offload, or a regional internal Application Load Balancer. Every deployment is planned first, approved explicitly, and applied as a single reviewed unit. - Chrome Enterprise Premium evaluation. Applies a CEP baseline to one organizational unit: threat-protection policies, forced Endpoint Verification, content-inspection connectors, a Context-Aware Access level, data-boundary policies, and starter DLP rules. Each policy is checked against your tenant's live Chrome Policy schema before it is written, so a policy your tenant does not support is reported as skipped with the reason rather than failing silently. - Rollback. Returns every policy it applied to the parent organizational unit, and deletes only the resources it created. Anything you selected rather than created is left alone. - Evidence. A SHA-256 audit chain of what was planned, approved, applied, and verified, exportable as JSON. - Least privilege by construction. Mutations to Google Cloud run as a dedicated deployer service account the tool creates, not as your own administrator authority. HOW IT WORKS Everything runs locally in the extension. The service worker calls Google's public REST APIs directly with a token obtained through chrome.identity from the administrator who is signed in. Plans, approvals, run checkpoints, and the audit chain are stored in the browser profile's IndexedDB and never leave it. REQUIREMENTS - Chrome 142 or newer - A Google Workspace administrator account with Chrome management rights - A billing-enabled Google Cloud project - Chrome Enterprise Premium licences for the users you are evaluating The full source, a reproducible build, and a per-permission justification are published at https://github.com/dymzd/Google under secure-gateway-studio/. The packaged ZIP is byte-reproducible from that source, so you can confirm the artefact you install matches the code you read.