Case Study: Eventbrite achieves PCI DSS compliance and frictionless two-factor security with Duo Security

How the Online Ticketing Service Deployed Duo to Meet PCI DSS Compliance and Enhance Their Security Profile

Eventbrite, a major online ticket marketplace that has processed billions in sales and hosts millions of events, needed to strengthen protection of its systems and customer data. Faced with PCI DSS requirements for two‑factor authentication and the risk of breaches from weak or reused passwords, Eventbrite sought a solution to secure remote access (including SSH to production) and monetary transaction workflows without disrupting users.

They deployed Duo’s two‑factor authentication across web and infrastructure access, using its one‑touch interface and APIs for a fast, low-friction rollout. The result was a smooth, company‑wide deployment that met PCI DSS requirements, improved Eventbrite’s security posture for users and devices, and delivered an easy, reliable experience for employees and admins.

Eventbrite

Paul Pieralde

Principal Product Security Engineer, Eventbrite