Chinmay, founder of Chinmay Advisory Group

I am 18. I am building something I believe in. That’s the whole story, really.


Most advisory is sold as risk management.
I think of it differently — as finding the gap
before the gap finds me.

There is a version of this page that lists every credential and every certification completed. That version exists because it is easier to list things than to explain what drives someone.

This is the other version.

I grew up paying attention to systems — the way things connect, the way they fail, the way a small gap in one place becomes a significant problem somewhere else entirely. I started studying security not as a career path, but because it was the discipline that took that way of thinking most seriously.

By the time I was 17, I was running real attack simulations in a home lab I had built on old hardware. Not because anyone told me to. Because I wanted to understand how things actually worked — not just how they were supposed to.

At 18, I decided to build a firm.

Not because I thought I had everything figured out. But because I could see, clearly, the kind of firm I wished existed: one that treated clients as people who deserved honesty, not people who needed to be managed. One that gave clear answers to hard questions. One that said ‘we don’t know’ when that was the truth, and ‘here is what we would do about it’ immediately after.

What I bring

It is not experience measured in years. It is a way of approaching a problem — starting from where it breaks, working backward, and being honest about what I find.

I have studied under the frameworks that professional security researchers use. I apply the same thinking to every engagement: don’t assume the surface tells you the whole story. Look for the thing nobody checked.

That is not a technical skill. It is a thinking habit. And it transfers.

A direct note

I am still building. The firm is young. I am young.

If you are reading this as a potential client or partner, what I am offering is not the comfort of a large established firm. It is the honesty of someone who will give you my actual assessment — not the assessment that is easiest to deliver.

Some clients want the former. This firm is built for the ones who want the latter.

The work is grounded.
Not just theoretical.

  • CEH Master
  • eJPT · 86%
  • OSCP · In progress
  • BCA Cybersecurity · Pursuing

These exist not as proof of worth, but as evidence that the thinking is grounded in real, structured discipline — not just intuition.

I make decent coffee now. Still working on it.

Explore the practices → Get in touch →