This session will explore how GitHub and GitHub Actions can contribute to smoother building, managing and deploying a consistent and tested WAF policy across your infrastructure. We’ll begin by covering the fundamentals of GitActions, Fastly NGWAF and deployment models. We’ll examine how to create a simple WAF rule and use a local deployment to test the rule to ensure that you security settings are valid.

Ownership is the foundation for Engineering Excellence and making progress against your goals. When service ownership isn’t clearly defined or always-up-to-date, vulnerabilities may never reach the right teams, incidents can cascade through downstream services, and strategic initiatives stall. In this interactive workshop, you’ll dive deep into the art and science of ownership. Learn how to accurately define ownership, leverage automation to discover and verify current owners, and establish robust validation processes. We will also introduce Scorecards and Initiatives as a tool to monitor and enhance ownership practices over time, ensuring that you always know who owns what. Join us to build a resilient framework that accelerates incident response and drives sustained progress.

As organizations scale, identity-based attacks are rising—and traditional access controls can’t keep up. This workshop introduces Infrastructure Identity, a modern security paradigm that eliminates secrets, removes identity silos, and brings Zero Trust to all infrastructure entities: human, machine, and AI. Join us for an overview and live demo of the Teleport Infrastructure Identity platform, where you’ll learn how cryptographic identities, short-lived privileges, and dynamic access control can secure your systems at scale. You’ll leave with a clearer understanding of why identity is the new perimeter—and how to protect it.

Platform teams are under pressure to integrate AI capabilities but often lack a structured framework for evaluation. This interactive workshop provides a practical decision-making methodology.

Working in small groups, you'll learn to evaluate and prioritize AI use cases for platform engineering by creating your own "technology radar" that classifies potential investments into adopt, trial, assess, or hold categories. We'll cover evaluation criteria including business value, implementation effort, and technology readiness, with real-world examples.

By the end of the workshop, you'll have created a customized AI radar for your organization and a structured approach to making strategic AI investment decisions for your platform team.

In this hands-on workshop, you’ll explore advanced Tailscale capabilities to optimize your network connectivity and security. We’ll cover:

• Eliminating SSH key management: Tailscale SSH automatically handles authentication, making secure connections instant and effortless.‍
• Connect anything securely: App Connectors let you route specific traffic through your infrastructure while maintaining zero-trust security. No more VPN complexity.‍
• Control with precision: Our ACL system uses human-readable rules that technical and non-technical team members can understand and audit.‍
• Extend your network: Choose subnet routers when you need to access entire networks remotely, or exit nodes when you need to route all traffic through a trusted point.

By the end of this session, you’ll have a deep understanding of how to connect securely and effortlessly to anything, anywhere with Tailscale.