---
title: "Test-Driven Security - Web Summer Camp"
url: https://stacklist.com/card/eea410bd-9da9-4027-ba27-0a17a91e3697
source_url: "https://websummercamp.com/2026/session/test-driven-security"
stack: https://stacklist.com/stack/3d40319c-c76c-4ae5-b09d-40eea149cbc9
summary: "Test-Driven Security is a presentation at Web Summer Camp 2026 that demonstrates how comprehensive test coverage serves as the primary defense against security vulnerabilities. The session explores critical weaknesses from the CWE list including SQL injection, cross-site scripting, and command injection, teaching developers to write tests that prevent vulnerabilities from reaching production."
tags: "test-driven-security, vulnerability-testing, cwe, sql-injection, xss, phpunit, security-testing"
key_entities: "Sebastian Bergmann (person), PHPUnit (technology), The PHP Consulting Company (thePHP.cc) (organization), Web Summer Camp 2026 (event), Common Weakness Enumeration (CWE) (concept), SQL injection (CWE-89) (concept), Cross-site scripting (CWE-79) (concept), Command injection (CWE-78) (concept)"
classification: "tutorial"
content_hash: "sha256:36da50a5b1cc870be0299ef1213adac3edac10af80766941a90646fab7ac0218"
acp_version: "0.2"
token_counts_approximate: 304
visibility: public
agent_accessible: true
status: "final"
---

# Test-Driven Security - Web Summer Camp

Description Every security vulnerability in your  application stems from a missing test. This presentation challenges the traditional separation between security and testing, demonstrating that comprehensive  test coverage is your most effective first line of defence against common security weaknesses. Using the Common Weakness Enumeration (CWE) list, a comprehensive catalogue of software security flaws, as a reference, this presentation will explore the most critical weaknesses affecting  applications. These include SQL injection (CWE-89), cross-site scripting (CWE-79) and command injection (CWE-78), as well as other prevalent vulnerabilities. You will learn to recognise attack vectors and, most importantly, how to write  tests that would have prevented vulnerabilities from reaching production. Speaker Created PHPUnit & Co-Founder @ thePHPcc Sebastian Bergmann is the creator of PHPUnit, the testing framework that set the standard for quality and professionalism in PHP software development. As a founding partner and consultant with The PHP Consulting Company (thePHP.cc), he empowers development teams to adopt PHPUnit effectively and build more reliable, testable software.