Writing secure code is important to prevent your users' data from being stolen. But vulnerabilities in your code can be difficult to spot and will not always be picked up during manual code reviews. In this talk, we'll look at how various static analysis tools (some of which you might already be using) can be used to detect common security vulnerabilities in your PHP applications in an automated way.