Test-Driven Security
For every vulnerability we find in production, there is a test that, had it existed, would have prevented it. Test-Driven Security treats the CWE list as a checklist and PHPUnit as the tool we already have in our workflow.
From to , I will be in Opatija at the Web Summer Camp. There I will give the presentations "Accelerating development without losing control" and "Test-Driven Security".
AI-assisted development promises speed, but speed without control breeds technical debt and fragility. This hands-on workshop shows PHP developers how to build the automated safety nets that let you move faster because you trust your quality controls, not in spite of them.
More informationI argue that PHP security flaws result from a lack of testing, and demonstrate how PHPUnit can help prevent common vulnerabilities, such as SQL Injection or Cross-Site Scripting.
More informationMy name is Sebastian Bergmann, and I have been working as a software developer and consultant in the PHP ecosystem for over 25 years. I support development teams in creating better software through modern practices, tools and training.
I am deeply committed to Open Source, maintain critical Open Source projects in the PHP ecosystem, and help shape the work of the PHP Foundation as a member of its board. I have also represented the interests of Open Source at the European Commission and am active in the Open Source Working Group ("Arbeitskreis Open Source Software") of the German Informatics Society ("Gesellschaft fΓΌr Informatik").
I live and breathe Open Source and help shape how developers around the world test, write, and maintain their code.
More events where you can meet me are listed here.
My interactive online training courses are designed to provide you with practical knowledge that you can apply immediately. The next ones starting soon are listed here.
Do you want your team to get better at testing? I can help with consulting, coaching, and training.