Conference contributions: practice, experience, innovation
Most recent
Test-Driven Security
I argue that security flaws result from a lack of testing, and demonstrate how PHPUnit can help prevent common vulnerabilities, such as SQL Injection or Cross-Site Scripting.
I most recently delivered "Test-Driven Security" at the Web Summer Camp on .
Upcoming
August 2026
Turbo-Charging Your PHPUnit Suite
Turbo-charge your productivity: discover how to make your test suite blazingly fast!
The next time I present "Turbo-Charging Your PHPUnit Suite" will be at the Engineering Kiosk Rhine-Ruhr Meetup on .
Supply Chain Security in the PHP Ecosystem
Do you know what ends up in your vendor directory, and why? Composer has turned the dependency resolver into a supply chain security checkpoint. This talk shows how it works, where it helps, and where it can bite.
The first time I present "Supply Chain Security in the PHP Ecosystem" will be at the Free and Open Source Software Conference (FrOSCon) on .
Test-Driven Security
I argue that security flaws result from a lack of testing, and demonstrate how PHPUnit can help prevent common vulnerabilities, such as SQL Injection or Cross-Site Scripting.
The next time I present "Test-Driven Security" will be at the Laravel Live Denmark on .
September 2026
From Events to Insights: Testing and Documenting Event‑Based Software
Turning your tests into powerful, visual documentation of behavior for your event-based software.
The next time I present "From Events to Insights: Testing and Documenting Event‑Based Software" will be at the PHP Developer Day on .
October 2026
Past, Present, Future: The PHPUnit Story
Discover the lessons and surprises from 25 years of developing PHPUnit.
The next time I present "Past, Present, Future: The PHPUnit Story" will be at the Forum PHP on .
Speed is a byproduct of trust
AI-assisted tools make it easy to go fast, and just as easy to go fast in the wrong direction. Teams do not move faster despite their quality controls. They move faster because they can trust them.
The first time I present "Speed is a byproduct of trust" will be at the Forum PHP on .
Supply Chain Security in the PHP Ecosystem
Do you know what ends up in your vendor directory, and why? Composer has turned the dependency resolver into a supply chain security checkpoint. This talk shows how it works, where it helps, and where it can bite.
I will present "Supply Chain Security in the PHP Ecosystem" at the International PHP Conference on .
Surviving and Thriving with PHPUnit 13
Get onto PHPUnit 13 cleanly, get ahead of PHPUnit 14, and get more out of the tests you write every day.
The first time I present "Surviving and Thriving with PHPUnit 13" will be at the International PHP Conference on .
Already delivered
Test-Driven Security
I argue that security flaws result from a lack of testing, and demonstrate how PHPUnit can help prevent common vulnerabilities, such as SQL Injection or Cross-Site Scripting.
I most recently delivered "Test-Driven Security" at the Web Summer Camp on .
Accelerating development without losing control
AI-assisted development promises speed, but speed without control breeds technical debt and fragility. This hands-on workshop shows PHP developers how to build the automated safety nets that let you move faster because you trust your quality controls, not in spite of them.
I most recently delivered "Accelerating development without losing control" at the Web Summer Camp on .
Modern PHP Development
This presentation reveals how to harness the ongoing evolution of PHP syntax as well as the rise of advanced developer tools for cleaner code, stronger testing, and ultimately higher-quality applications.
I most recently delivered "Modern PHP Development" at the Head in the Cloud Summit on .
Turbo-Charging Your PHPUnit Suite
Turbo-charge your productivity: discover how to make your test suite blazingly fast!
I most recently delivered "Turbo-Charging Your PHPUnit Suite" at the International PHP Conference on .
An evening with Sebastian and Stefan
Stefan and I put real code under the microscope in a live, public code review. Bring yours for direct feedback on structure, testability, and maintainability.
I most recently delivered "An evening with Sebastian and Stefan" at the Symfony User Group Berlin on .
Test-Driven Security
I argue that security flaws result from a lack of testing, and demonstrate how PHPUnit can help prevent common vulnerabilities, such as SQL Injection or Cross-Site Scripting.
I delivered "Test-Driven Security" at the International PHP Conference on .
From Events to Insights: Testing and Documenting Event‑Based Software
Turning your tests into powerful, visual documentation of behavior for your event-based software.
I most recently delivered "From Events to Insights: Testing and Documenting Event‑Based Software" at the PHP User Group Frankfurt am Main on .
Debugging Performance in PHP
I show you how to diagnose and resolve performance bottlenecks in PHP applications, from visualizing execution and measuring costs to pinpointing slow code and spotting regressions with confidence.
I most recently delivered "Debugging Performance in PHP" at SymfonyLive Berlin on .
Past, Present, Future: The PHPUnit Story
Discover the lessons and surprises from 25 years of developing PHPUnit.
I most recently delivered "Past, Present, Future: The PHPUnit Story" at the PHP Conference Odawara on .
From Events to Insights: Testing and Documenting Event‑Based Software
Turning your tests into powerful, visual documentation of behavior for your event-based software.
I delivered "From Events to Insights: Testing and Documenting Event‑Based Software" at the Dutch PHP Conference on .
From Events to Insights: Testing and Documenting Event‑Based Software
Turning your tests into powerful, visual documentation of behavior for your event-based software.
I delivered "From Events to Insights: Testing and Documenting Event‑Based Software" at the PHP UK Conference on .
Testing with(out) dependencies
This presentation clarifies effective strategies for using PHPUnit's test doubles to write robust, maintainable unit tests, highlighting practical techniques and common pitfalls to avoid.
I most recently delivered "Testing with(out) dependencies" at SymfonyOnline on .
Testing with(out) dependencies
This presentation clarifies effective strategies for using PHPUnit's test doubles to write robust, maintainable unit tests, highlighting practical techniques and common pitfalls to avoid.
I delivered "Testing with(out) dependencies" at SymfonyCon on .
30 Years of Code, 25 Years of Tests: A Journey Through Code and Community
Explore how PHP and PHPUnit transformed from humble beginnings into pillars of modern web development.
I most recently delivered "30 Years of Code, 25 Years of Tests: A Journey Through Code and Community" at the International PHP Conference on .
Modern PHP Development
This presentation reveals how to harness the ongoing evolution of PHP syntax as well as the rise of advanced developer tools for cleaner code, stronger testing, and ultimately higher-quality applications.
I delivered "Modern PHP Development" at the International PHP Conference on .
So you think you know PHPUnit
This presentation reveals practical tips and hidden gems in PHPUnit, helping developers of any experience level unlock its full potential and elevate their daily workflow.
I most recently delivered "So you think you know PHPUnit" at DrupalCon on .
The Web in 2035: A Keynote Panel on the Future of the Web
Four people who build the web's foundations—and one who shapes its policy—debate whether the next decade of the internet will be open and sustainable or fragmented and opaque, and what we should do about it now.
I most recently delivered "The Web in 2035: A Keynote Panel on the Future of the Web" at DrupalCon on .
So you think you know PHPUnit
This presentation reveals practical tips and hidden gems in PHPUnit, helping developers of any experience level unlock its full potential and elevate their daily workflow.
I delivered "So you think you know PHPUnit" at the Symfony User Group Cologne on .
Testable Database Interaction
This presentation reveals practical best practices and proven design patterns for database interaction, focusing on how to build testable software and effectively test your database code.
I most recently delivered "Testable Database Interaction" at the International PHP Conference on .
So you think you know PHPUnit
This presentation reveals practical tips and hidden gems in PHPUnit, helping developers of any experience level unlock its full potential and elevate their daily workflow.
I delivered "So you think you know PHPUnit" at Vienna PHP on .
So you think you know PHPUnit
This presentation reveals practical tips and hidden gems in PHPUnit, helping developers of any experience level unlock its full potential and elevate their daily workflow.
I delivered "So you think you know PHPUnit" at SymfonyLive Berlin on .
So you think you know PHPUnit
This presentation reveals practical tips and hidden gems in PHPUnit, helping developers of any experience level unlock its full potential and elevate their daily workflow.
I delivered "So you think you know PHPUnit" at Laracon EU on .
PHPUnit 10-12: What to know and what to forget
This presentation is your guide to mastering what's new, how to get ready for the future, and which outdated PHPUnit features you can finally leave behind.
I most recently delivered "PHPUnit 10-12: What to know and what to forget" at betterCode() PHP on .
So you think you know PHPUnit
This presentation reveals practical tips and hidden gems in PHPUnit, helping developers of any experience level unlock its full potential and elevate their daily workflow.
I delivered "So you think you know PHPUnit" at PHP Developer Day on .
Testing with(out) dependencies
This presentation clarifies effective strategies for using PHPUnit's test doubles to write robust, maintainable unit tests, highlighting practical techniques and common pitfalls to avoid.
I delivered "Testing with(out) dependencies" at the Symfony User Group Cologne on .
PHPUnit 10-12: What to know and what to forget
This presentation is your guide to mastering what's new, how to get ready for the future, and which outdated PHPUnit features you can finally leave behind.
I delivered "PHPUnit 10-12: What to know and what to forget" at the TYPO3 Developer Days on .
Testing with(out) dependencies
This presentation clarifies effective strategies for using PHPUnit's test doubles to write robust, maintainable unit tests, highlighting practical techniques and common pitfalls to avoid.
I delivered "Testing with(out) dependencies" at the TYPO3 Developer Days on .
Testing with(out) dependencies
This presentation clarifies effective strategies for using PHPUnit's test doubles to write robust, maintainable unit tests, highlighting practical techniques and common pitfalls to avoid.
I delivered "Testing with(out) dependencies" at the NEOS Conference on .
PHPUnit for Shopware Developers
Find out why PHPUnit is an indispensable tool for your development workflow.
I most recently delivered "PHPUnit for Shopware Developers" at the Shopware Community Day on .
PHPUnit 10 for Symfony Developers
In this presentation, you will experience new features, big and small, in action and see how they can support you to effectively and efficiently test your software.
I most recently delivered "PHPUnit 10 for Symfony Developers" at SymfonyCon on .
Event-Based Testing
In this presentation, you will learn best practices for testing software built on architectural patterns such as Event Collaboration and Event Sourcing.
I most recently delivered "Event-Based Testing" at betterCode() PHP on .
Event-Based Testing
In this presentation, you will learn best practices for testing software built on architectural patterns such as Event Collaboration and Event Sourcing.
I delivered "Event-Based Testing" at the International PHP Conference on .
Testing with(out) dependencies
This presentation clarifies effective strategies for using PHPUnit's test doubles to write robust, maintainable unit tests, highlighting practical techniques and common pitfalls to avoid.
I delivered "Testing with(out) dependencies" at the International PHP Conference on .
PHPUnit 10 for Symfony Developers
In this presentation, you will experience new features, big and small, in action and see how they can support you to effectively and efficiently test your software.
I delivered "PHPUnit 10 for Symfony Developers" at SymfonyLive on .
The PHP Stack’s Supply Chain
This presentation offers a comprehensive look at the PHP software stack's supply chain. We explore not only critical security challenges, but also the vital issue of funding Open Source development.
I most recently delivered "The PHP Stack’s Supply Chain" at FrOSCon on .
Fearless Dependency Upgrades
This presentation highlights practical strategies for upgrading dependencies confidently in projects with strong automated testing, as well as solutions for teams without test automation.
I most recently delivered "Fearless Dependency Upgrades" at the International PHP Conference on .
Fearless Dependency Upgrades
This presentation highlights practical strategies for upgrading dependencies confidently in projects with strong automated testing, as well as solutions for teams without test automation.
I delivered "Fearless Dependency Upgrades" at betterCode() PHP on .
The PHP Stack’s Supply Chain
This presentation offers a comprehensive look at the PHP software stack's supply chain. We explore not only critical security challenges, but also the vital issue of funding Open Source development.
I delivered "The PHP Stack’s Supply Chain" at SymfonyCon on .
The PHP Stack’s Supply Chain
This presentation offers a comprehensive look at the PHP software stack's supply chain. We explore not only critical security challenges, but also the vital issue of funding Open Source development.
I delivered "The PHP Stack’s Supply Chain" at the International PHP Conference on .
In preparation
From Examples to Invariants
Write one property. Test infinite cases. Find edge cases automatically with property-based testing.
In preparation.
From Mother Sauces to Testable Software
Mother sauces, brigade systems, and testable code: discover why genius is the enemy of scalability.
In preparation.
Old Laws, New Colleagues
Brooks, Conway, and Goodhart made observations about people and complexity, not about tools. Now AI agents write code. Which laws still hold, which hit harder than ever, and what does teamwork mean when agents join the team?
In preparation.
The Architect's Supply Chain
If a dependency is critical to your architecture, its sustainability is your responsibility. It is not the maintainer's problem, not a community concern, but a production risk you own.
In preparation.
Two-Way Streets: Building Trust Between Language and Ecosystem
PHP tests its ecosystem. Its ecosystem tests PHP. How bidirectional validation builds trust and accelerates innovation safely.
In preparation.
When best practices become law
Tests and static analysis were once optional. Soon, secure-by-design and verifiable quality won't be. As the CRA, AI Act, and Grundschutz++ converge, best practice is becoming law: here's how to get ready.
In preparation.
Your tests are lying to you
Your tests pass. Your coverage is high. Your CI is green. But would they catch a bug?
In preparation.