The split
Most weeks I aim for 3–4 sessions — mix of strength and cardio. Bug hunting and PortSwigger labs sit on a separate mental track; the gym is the reset.
What works
- Fixed days beat motivation. Same slots after work or before deep focus blocks.
- Short sessions on heavy lab weeks (45 min) beat skipping entirely.
- Protein and sleep matter as much as PRs when you are staring at Burp for hours.
Why it stays on chriscz
Security is the craft; fitness is the maintenance. Both get writeups here — different folders, same discipline.