About
The short version
I’m Shubhendu. I live in Bengaluru, spend my weekdays making sure hospitals don’t get ransomwared and banks don’t get breached, and spend my weekends getting lost on roads that don’t exist on Google Maps.
This blog is the thing that happens in between.
How this started
It wasn’t some grand epiphany. No solo trek through the Himalayas that changed my life. No gap year. Nothing cinematic.
It was a Saturday morning in 2023 when I had zero plans, a full tank, and a vague memory that someone once mentioned a fort near Krishnagiri. I typed the name into Maps, saw it was 90 kilometres away, and just — left. No itinerary. No hotel booked. Just the Himalayan 450 and a half-charged phone.
I reached the fort by noon, climbed walls that Tipu Sultan’s army probably argued over, ate lunch at a dhaba where the owner spoke zero English and I spoke zero Tamil, and we somehow had a 40-minute conversation anyway. I got home at 8 PM with mud on my boots and the specific kind of tiredness that doesn’t feel like exhaustion — it feels like something actually happened today.
I’ve been chasing that feeling ever since.
What unplotted actually is
Not a travel guide. Not a “top 10 places near Bengaluru” list generator. Not an Instagram feed with captions about finding yourself.
It’s closer to a logbook. The kind you’d keep in a jacket pocket — messy, specific, occasionally wrong about distances, but honest about what a place actually felt like at 6 AM when the fog was still sitting on the valley and you hadn’t had chai yet.
I write about the rides I do on weekends — mostly Karnataka, sometimes further. The Agumbe Ghats on a wet day in July when the road turns into a river and you’re simultaneously terrified and completely alive. The Kunti Betta sunrise that required a 2 AM alarm and was, against all reasonable expectations, worth it. The Bangalore bylanes that nobody visits because they’re not photogenic enough, but they’ve been around longer than the city’s tech parks and have better stories.
Some of it is practical — routes, fuel stops, where not to stop. Most of it is just what I noticed.
The bike
Royal Enfield Himalayan 450. Silver. Takes corners better than it has any right to, runs on ambition and premium petrol, and has survived more bad road decisions than I should probably admit here.
The job
Security Architect. I help organisations in Healthcare, BFSI, and Energy figure out how to not become a headline — the bad kind. The frameworks I live in: NIST, HIPAA, DORA, MCSB v2, CIS, SOC 2. The things I actually do: threat modelling, DevSecOps, security architecture design from the ground up.
Also a Docker Captain 🐳, TOGAF & SABSA Practitioner, and six-times cloud certified — because apparently one certification is never enough and I have a problem.
I write about all of that over at hugs4bugs.me. If you’re into architecture reviews at 11 PM, container hardening, or why your zero-trust rollout is probably not zero-trust — that’s the place.
This blog is the other part of my brain. The one that doesn’t think in threat models and compliance matrices.
On following and being followed
I’m on Instagram and YouTube if you want the visual version. The blog is for the parts that don’t fit in a reel.
If you’ve found a route I should ride, a dhaba I’ve missed, or a trail that’s worth the knee pain — drop a message on the contact page. I read everything, reply slowly, and take suggestions seriously.
unplotted — because the best roads aren’t on the map yet.