Everything we have
In a world with endless possibilities for code to be wrong, one approach alone is not enough to make our software truly robust.
Photo by Benjamin Eberlei
From to , I was in Opatija at the Web Summer Camp. There I gave the presentations “Accelerating development without losing control” and “Test-Driven Security”.
AI-assisted development promises speed, but speed without control breeds technical debt and fragility. This hands-on workshop shows PHP developers how to build the automated safety nets that let you move faster because you trust your quality controls, not in spite of them.
More informationI argue that security flaws result from a lack of testing, and demonstrate how PHPUnit can help prevent common vulnerabilities, such as SQL Injection or Cross-Site Scripting.
More informationI am Sebastian Bergmann. I started writing PHPUnit in 2000 and still maintain it. In the same year I gave my first talk at a PHP conference. As a co-founder of thePHP.cc, I help teams in training courses and through consulting and coaching with everything related to PHPUnit, with quality gates for working with LLM-based coding agents, and with supply chain security.
I helped start the PHP Foundation and serve on its board. I have also represented the interests of Open Source at the European Commission and am active in the Open Source working group of the German Informatics Society (Gesellschaft für Informatik).
Where you can meet me next is listed under events. The next dates of my training courses are in the training overview.
In a world with endless possibilities for code to be wrong, one approach alone is not enough to make our software truly robust.
For every vulnerability we find in production, there is a test that, had it existed, would have prevented it. Test-Driven Security treats the CWE list as a checklist and PHPUnit as the tool we already have in our workflow.
Do you want your team to get better at testing? I can help with consulting, coaching, and training.