DevSecOps: Diving In to Drupal Security

Will Chatham

This session will cover key Drupal security concepts, from administering a website to developing modules, to how security matters in your hosting environment. Based on the OWASP Top 10 and other best-practices in security, we will look at the major risks and threats everyone should be aware of in order to stay secure and prevent disaster from striking your carefully crafted project(s).

We will dive into the processes and tools you have at your disposal to help harden your website against attackers, and how to build with security from the ground up.

Using Docker for multi-dev/multi-platform development

Doug Cone

A case study on using Docker to develop from multiple machines. Covering docker-compose, docker files, basic commands and a few clever nginx hacks to round things out.


  • Learn how Docker can be used to build consistent platforms
  • Discover how Docker can make your workflow faster
  • Better understand containers and how they work

Building 195 networked Drupal 8 Sites with Pantheon's Upstream

Brooke Heaton

Fairfax County Public Schools (FCPS) is the largest school system in Virginia and the 10th largest in the United States, with more than 200 schools and centers serving 186,000 students. It's network of 195 school websites keeps this large community of students, parents and the public informed.

One Deployment Workflow: Drupal 6-8 on all hosting providers... Say whah!?

Andy Giles

Tired of having a separate deployment workflow for every project you work on? In this session we'll look at utilizing Composer & GitLab CI to streamline building and pushing any Drupal project to any hosting provider.

What this session will cover

Live Demo: How to Create a Winning Website with Drupal Best Practices

Mark Shropshire

Winning Drupal websites live at the intersection of psychology, technology, and brand- a place that can get very complicated for users.

Robo-tize your local Drupal 8 development

Joe Stewart

Getting started with a new Drupal 8 project?
Tired of looking up drush site-install options, unix commands or maintaining complicated bash scripts?

We’ll use object-oriented PHP instead with Robo (, a task runner written in PHP that will help organize and automate repetitive commands.

Robo is easily extended with new commands and has included tasks for:

Dude, Where's My Features? Configuration Management in D8

Dan Gurin

Before Drupal 8, changes in site configuration could only be stored and moved between environments by using the Features module. This practice was less than ideal, as Features was not originally conceived for this purpose. Since there was no other better way to manage configuration outside of the database, this became the standard practice.

Building Secure and Available Drupal Applications with Guardr

Mark Shropshire

Guardr is a Drupal distribution with a combination of modules and settings to enhance a Drupal application's security and availability to meet enterprise security requirements. Presentation attendees will learn about Guardr's philosophy, features, and how to start new projects with Guardr.