Derek Pitts

Cloudflare has shifted to Infrastructure as Code and policy enforcement to manage internal Cloudflare accounts. This new architecture uses Terraform, custom tooling, and Open Policy Agent to enforce security baselines and increase engineering velocity.

Chase Catelli, Ryan Pesek, and Derek Pitts

A deep dive into how we have deployed Zero Trust at Cloudflare while maintaining user privacy

Derek Pitts, Ankur Aggarwal, and Emily Hancock

Adopting a phishing resistant second factor, like a YubiKey with FIDO2, is the number one way to prevent phishing attacks. Cloudflare has used phishing resistant second factors only since February 2021, and these were the steps we took to accomplish that.

Evan Johnson and Derek Pitts

How Cloudflare’s security team implemented Zero Trust controls

Noelle Kagan, Tim Obezuk, and Derek Pitts