About Sudhir

I'm Sudhir, a cyber security professional based in Mumbai. I work on network security and compliance for large enterprise environments, the kind with a decade of firewall rules nobody remembers writing and audits that never quite end.

Before this, a lot of my time went into CTFs and offensive security. That still shapes how I approach defense: assume someone patient is looking, and design controls that hold up when they do, not just on the compliance checklist.

This blog is where I write it down. Occasionally it's useful to someone else doing the same work.