I will be discussing how zero-trust model is essential for modern PHP backends handling sensitive data and APIs. This talk demonstrates how to design and implement a zero-trust architecture in PHP environments, using principles like least privilege, continuous validation, secure identity, and encrypted communication.
Through live examples, attendees will learn how to implement secure tokens, enforce API-level access control, and isolate trust zones within PHP applications.

Key Takeaways

Learn how to apply zero-trust principles to PHP microservices and APIs.

Understand secure token handling, role-based access, and continuous authentication patterns.

Gain practical insights into hardening PHP applications deployed in cloud or containerized environments.

Comments

Please login to leave a comment

Lots of really great info and useful architectures/checklists/pillars to take note of and take back home to figure out how to integrate into our app. This talk may be another such talk that suffers from not having enough time dedicated, BECAUSE I would have liked to see more code examples. Specifically, of using publicly-available/OSS libraries for demonstrating the concepts being taught. It is well-known that the second-most dangerous thing to NOT having a security layer, is DIY'ing your security layer. I would have loved to hear more about some of the security libraries that were mentioned only briefly.

I really enjoyed this talk. It solidified concepts that I have been wanting to learn more about and I appreciated the practical examples.