Alexander G. Chamandy

What I do

Envescent provides cybersecurity assessments, incident response, AI security, cloud, automation, and IT consulting. Most of our work is for organizations that have outgrown ad-hoc IT but do not want a permanent security department: they need the assessment done properly, the incident handled without improvising, and the answer written down somewhere they can point to later.

I run those engagements. That means scoping the assessment, sitting in the incident bridge, and signing the report that says what should change first.

How I work

I start with what is already there. Asset inventory, identity, patching, backups, and logging come before anything that needs a slide deck. If a control cannot be operated by the people who will actually own it, it is not a control yet.

I write findings in plain language and rank them by what an attacker would use first, not by which vendor category is fashionable. Where I recommend spending money, I show the alternative I rejected and why.

What I write about

I write about the parts of security that survive contact with a real budget: identity, patching, backups, incident response, and the decisions that keep a business running. I also write about AI adoption, local inference, and the gap between a demo and a system you can defend.

The essays are separate. Health, music, gardening, education, and Arlington — the things I pay attention to when I am not working.

Elsewhere

• LinkedIn — where most of this writing first appears.
• Envescent — the firm.
• Envescent contact — for assessment and incident-response work.

I live in Arlington, Virginia. Outside of work, I play and produce music, cook, spend time outdoors, and study health and economics.