ABOUT US

Our position in the value chain

Metastrategy is a boutique consultancy founded by Karol Chwastowski providing strategic decision support in the security market — to companies selling security, to organisations buying it, and to capital investing in it.

Our advisory offering is built around decisions leaders are left alone with — risk-to-opportunity trade-offs, complex transactions, strategic forks. Worked out on live deals and real numbers. Delivered as conclusions for the case at hand, not generic good practice.

Our venture building practice operates in a strategist–architect model: thesis, its verification, strategy, solution design and implementation oversight remain within the firm's accountability, with delivery teams composed and adjusted case by case from specialised practitioners. The structure carries no permanent delivery capacity to maintain.

Media

Konkurs SIM: Projekt interim management roku 2025

Prokonsumencka reforma ochrony danych

EC2 stawia na cyberbezpieczeństwo

The experience behind it

We have hands-on experience in building VC-backed security product and service companies, as well as growing revenue inside large multinational security organisations. We have designed cybersecurity strategies and risk management systems for leading EMEA banks, investment funds, insurers, telecoms, and multinational production companies. Our frameworks are used by global tech consulting companies.

Media

KONKURS PROJEKT INTERIM MANAGEMENT

Prokonsumencka reforma ochrony danych

EC2 stawia na cyberbezpieczeństwo

Selected engagements

Credentials

Grzegorz Żurawski
Business Development Manager
IMET
What I value most in working with Karol is where he starts: with understanding the company's operating model, its constraints, its goals and how it makes decisions. Only on that basis does he assess which directions are justified and where resources are worth committing. The conversation is therefore not about fashionable tools but about their practical usefulness, their impact on the organisation and the quality of the management board's decisions. At IMET, the starting point was investment in new technologies and applications of machine learning in a mid-sized e-commerce company. It resulted in two decisions: how to commercialise our internal pricing data, and a new purchasing policy built on reconfiguring the product range.
Lars Northeved
Chief Technology Officer
GEA
I worked with Karol during the digital transformation program in GEA, in the ISMS track for "Product Security". Karol was instrumental in the Product Security Strategy development, the security organization as well as the policies and procedures. During the many workshops and meetings Karol managed to explain the different options we had to choose from and what consequence the choice would have. Karol possesses an outstanding overview of the standards, and thanks to a high abstraction level, how standards can benefit companies.
Damian Banat
Cybersecurity Architect
Cyrima
I worked with Karol on cybersecurity and regulatory compliance projects (including NIS2, DORA and ISO 2700x) at a provider of SaaS applications and B2B cybersecurity and risk services. Karol designed the strategy and coordinated its implementation, including the work of client-side experts, mine among them. He ran the implementation on a hypothesis-driven basis: we tested assumptions as the work progressed and adjusted course as new variables came to light. He reconciled competing stakeholder priorities, untangled dependencies and drove concrete decisions within project constraints. I recommend him as a trusted partner for overseeing and coordinating complex cybersecurity investments.

Grzegorz Żurawski
Business Development Manager
IMET
What I value most in working with Karol is where he starts: with understanding the company's operating model, its constraints, its goals and how it makes decisions. Only on that basis does he assess which directions are justified and where resources are worth committing. The conversation is therefore not about fashionable tools but about their practical usefulness, their impact on the organisation and the quality of the management board's decisions. At IMET, the starting point was investment in new technologies and applications of machine learning in a mid-sized e-commerce company. It resulted in two decisions: how to commercialise our internal pricing data, and a new purchasing policy built on reconfiguring the product range.
Lars Northeved
Chief Technology Officer
GEA
I worked with Karol during the digital transformation program in GEA, in the ISMS track for "Product Security". Karol was instrumental in the Product Security Strategy development, the security organization as well as the policies and procedures. During the many workshops and meetings Karol managed to explain the different options we had to choose from and what consequence the choice would have. Karol possesses an outstanding overview of the standards, and thanks to a high abstraction level, how standards can benefit companies.
Damian Banat
Cybersecurity Architect
Cyrima
I worked with Karol on cybersecurity and regulatory compliance projects (including NIS2, DORA and ISO 2700x) at a provider of SaaS applications and B2B cybersecurity and risk services. Karol designed the strategy and coordinated its implementation, including the work of client-side experts, mine among them. He ran the implementation on a hypothesis-driven basis: we tested assumptions as the work progressed and adjusted course as new variables came to light. He reconciled competing stakeholder priorities, untangled dependencies and drove concrete decisions within project constraints. I recommend him as a trusted partner for overseeing and coordinating complex cybersecurity investments.

Grzegorz Żurawski
Business Development Manager
IMET
What I value most in working with Karol is where he starts: with understanding the company's operating model, its constraints, its goals and how it makes decisions. Only on that basis does he assess which directions are justified and where resources are worth committing. The conversation is therefore not about fashionable tools but about their practical usefulness, their impact on the organisation and the quality of the management board's decisions. At IMET, the starting point was investment in new technologies and applications of machine learning in a mid-sized e-commerce company. It resulted in two decisions: how to commercialise our internal pricing data, and a new purchasing policy built on reconfiguring the product range.
Lars Northeved
Chief Technology Officer
GEA
I worked with Karol during the digital transformation program in GEA, in the ISMS track for "Product Security". Karol was instrumental in the Product Security Strategy development, the security organization as well as the policies and procedures. During the many workshops and meetings Karol managed to explain the different options we had to choose from and what consequence the choice would have. Karol possesses an outstanding overview of the standards, and thanks to a high abstraction level, how standards can benefit companies.
Damian Banat
Cybersecurity Architect
Cyrima
I worked with Karol on cybersecurity and regulatory compliance projects (including NIS2, DORA and ISO 2700x) at a provider of SaaS applications and B2B cybersecurity and risk services. Karol designed the strategy and coordinated its implementation, including the work of client-side experts, mine among them. He ran the implementation on a hypothesis-driven basis: we tested assumptions as the work progressed and adjusted course as new variables came to light. He reconciled competing stakeholder priorities, untangled dependencies and drove concrete decisions within project constraints. I recommend him as a trusted partner for overseeing and coordinating complex cybersecurity investments.

NEWSLETTER

Get email notifications about new publications,

case studies and open source frameworks

Home

About

Contact

Services

Tech Funds & Enterprise

Founders & Capital Owners

B2B Security Companies

Insights

Articles

Case Studies

NEWSLETTER

Get email notifications about new publications, case studies and open source frameworks

NEWSLETTER

Get email notifications about new publications,

case studies and open source frameworks

Home

About

Contact

Services

Tech Funds & Enterprise

Founders & Capital Owners

B2B Security Companies

Insights

Articles

Case Studies