I'm thrilled to share that I'll be speaking at Laravel Live UK this week. If you're heading to the Shaw Theatre in London on 18–19 June 2026, come and say hello — I'd love to meet you.
The talk: OPSEC for Laravel Developers
My session is called "OPSEC for Laravel Developers", and it's a talk I've been wanting to give for a while now.
We spend a lot of time talking about building things — clean architecture, expressive APIs, beautiful Blade components. We spend far less time talking about how those same systems fail quietly, and what it costs when they do. A leaked deploy key, a .env committed in haste, a queue worker with a little too much trust: none of these are exotic. They're the ordinary mistakes that turn a good week into a very bad one.
This talk is about closing that gap. I want to take the operational-security mindset I picked up working in cybersecurity and translate it into the day-to-day reality of shipping Laravel applications — without the fear-mongering, and without pretending you need a dedicated security team to get the fundamentals right.
We'll look at things like:
- Blast radius — how to think about the worst a single compromised credential or service can do, and how to shrink it before anything goes wrong.
- Secrets that don't stay secret — where they really leak (hint: it's usually CI/CD and logs, not your database), and how to design so a leak is survivable.
- Trust boundaries — drawing them deliberately between your app, your jobs, your third parties, and your humans.
- Practical defaults — the small, boring habits that quietly remove whole categories of incidents.
The goal isn't to make you paranoid. It's to give you a handful of mental models you can apply on Monday morning, so that security stops being the thing you bolt on at the end and becomes part of how you build from the start. High-trust systems with beautiful edges — that's the whole point.
Come find me
This is exactly the kind of conversation I love having in person, so please don't be shy. Whether you want to argue about secret rotation, swap war stories, or just talk shop over a coffee, I'll be around for both days of the conference.
You can learn more about Laravel Live UK here. Slides and a write-up will follow on this blog after the event.
See you in London. 🇬🇧