Cloud
Org Policy Constraints are essential for building guardrails in GCP. Learn how to mitigate dangerous defaults, enforce approved patterns, and implement safeguards. But wait, its not all bubblegum and butterflies in preventative-controls land. Discover the challenges of implementing these constraints, such as hidden dependencies, bypasses and the introduction of friction. Fresh off her below-average scored RSAC talk, Kat will attempt to bring the real-life pain of preventative controls for enterprise-scale cloud deployments to life with quick wit, crowd work and the desperate usage of finger puppets for cheap laughs.
Kat Traxler is the Principal Security Researcher at Vectra AI, focusing on abuse techniques and vulnerabilities in the public cloud. Additionally she has worked at various stages in the SDLC, performing web application penetration testing and security architecture.
Kat’s research philosophy directs her work to where design flaws and misconfigurations are most probable. This guiding principle leads her research to the intersection of technologies, particularly the convergence of cloud security and application security, and where the OS layer interfaces with higher-level abstractions. She can be found on the internet as @nightmareJS.
Join us in June (2026) with an exemplary selection of hacker and privacy presentations and villages from prominent tech experts. Get your tickets now!