Conference circuit
Talks
Conference presentations and talks I've given on web development. Click any talk for slides, recordings, and a full write-up.
DEVBCN
How To Not Get Hacked: Uncovering Web Vulnerabilities
Security is often treated as someone else's problem — until it becomes everyone's problem. In this talk at DevBCN 2026 at the World Trade Center in Barcelona, we challenge the assumption that security falls outside the developer's remit by walking through real-world breaches from major companies and showing, through a live demo, how a web application can be compromised step by step. The session distils practical steps every JavaScript developer can take to reduce risk and ship safer apps without becoming a security specialist.
View details UpcomingSREday Barcelona 2026 Q2
What Happened and Why: Correlating Load Testing with Observability
Load testing tells you what happened. Observability tells you why. But too often these disciplines operate independently, leaving teams manually piecing together performance regressions with server-side telemetry after the fact. In this joint session at SREday Barcelona 2026 Q2, co-presented with Heather Thacker (Gatling), we explore how to bridge the gap — wiring load test results directly into observability pipelines so SREs and performance engineers can move from a failed test to a root-cause story without bouncing between tools.
View details UpcomingJSWORLD Conference
Hack Me If You Can: Uncovering Web Vulnerabilities
Every web app has ghosts lurking in the shadows — hidden vulnerabilities just waiting to be exploited. In this talk at JSWORLD Conference 2026 at RAI Amsterdam, we look at how some major companies got hacked in the past and walk through a live demonstration of how a real web application is compromised, uncovering the threats that could easily impact your own projects. The session unpacks the most common vulnerability classes, what happens when proper security systems are not in place, and the practical controls every JavaScript developer should have in their toolkit.
View detailsGatling
Connecting Performance Testing with Observability
Performance testing tells you how your APIs behave under load. Observability tells you what’s happening inside your services. But when these live in separate tools, you’re left jumping between dashboards trying to piece together the full picture. In this joint webinar with Gatling, we walked through how to integrate Gatling Enterprise Edition with Dynatrace — connecting load test metrics directly to server-side traces, logs, and automated alerting workflows, and showing how to go from a failed test to a Slack notification without manual intervention.
View detailsTalent Arena
Observability for Next-Generation Digital Ecosystems
A hands-on workshop at Talent Arena 2026 — part of the Mobile World Capital event in Barcelona — exploring how Dynatrace delivers monitoring and advanced observability across modern digital ecosystems. Attendees played with a live demo application and discovered the power of real-time user data insights. The session covered data ingestion, topology mapping, and end-to-end tracing to link every transaction to its underlying infrastructure, with a particular focus on deep Salesforce cloud platform visibility: from security events and system logs to the KPIs needed to operate resilient, production-grade platforms.
View detailsReact.js Barcelona
React Under Attack: Uncovering Web Vulnerabilities and Securing Your Apps
Last month we witnessed one of the most critical vulnerabilities in React history — a 10/10 CVSS score that allowed anonymous remote code execution. In this talk, we explore how some major companies were hacked in the past and dive into a live demonstration of how a real web application is compromised, uncovering the threats that could easily impact your own projects. From the anatomy of a real exploit to the security systems that could have stopped it, the goal is to leave every React developer better equipped to reason about the security of the apps they ship.
View detailsZurichJS
Hack Me If You Can: A Dive into Web App Vulnerabilities
Every web app has ghosts lurking in the shadows — hidden vulnerabilities and subtle bugs just waiting to be exploited. In this talk at the ZurichJS Pro Meetup, we explored how attackers slip through the cracks in modern web applications and, more importantly, how to stop them. Through live demos and real-world examples, we unpacked common vulnerability classes, walked through an actual exploit step by step, and distilled the practical security controls every JavaScript developer should have in their toolkit.
View detailsZurichJS
Observability in Action: Hands-On with Dynatrace
A beginner-friendly, hands-on workshop co-delivered at ZurichJS in Zürich, guiding attendees through the three pillars of observability — metrics, logs, and traces — using a demo application as a real-world playground. The session covered smart alerting with AI-powered anomaly detection, cost-effective data ingestion strategies, and distributed tracing for debugging. All learnings were kept tool-agnostic, with Dynatrace used as the primary platform to bring the concepts to life.
View detailsDevBCN
Multithreading in Frontend? A Guide to Web Workers
JavaScript as a single-threaded language is unable to maximise the full potential of modern CPUs — but Web Workers might change that. This talk at DevBCN 2025 explored the complexities of the JavaScript runtime, event loop, and asynchronous programming to find out whether it is worth stepping into the multithreaded world. By examining the potential benefits and drawbacks of Web Workers through live demos, attendees left with a clear framework for deciding if they are the right tool for their next project.
View detailsWeAreDevelopers World Congress
Multithreading in JavaScript: A Guide to Web Workers
JavaScript is single-threaded — until it isn't. In this talk at WeAreDevelopers World Congress 2025, we explored the Web Workers API as a practical tool for moving heavy computation off the main thread, keeping UIs responsive under load. From the basics of thread communication through `postMessage` to real-world patterns like offloading data processing, the session walked through live demos showing the before-and-after impact on frame rate and interaction latency.
View detailsCityJS Athens
Multithreading in JavaScript: A Guide to Web Workers
Can Web Workers really solve your frontend performance bottlenecks? This talk at CityJS Athens 2025 explored the complexities of the JavaScript runtime — the event loop, asynchronous programming model, and single-threaded constraints — to find out if it is worth exploring the multithreaded world. Live demos showed how offloading heavy computation to a Worker thread keeps the main thread free and UIs smooth, along with an honest look at the trade-offs.
View detailsReact.js Barcelona
Make Your Microfrontends Not Feel Like a Jigsaw Puzzle
Coming back from a monolithic architecture, everyone was promising the moon about the benefits of microfrontends. After working on them for years, though, it hasn't been a bed of roses. Dealing with version mismatches, code duplication, and the overall increase of architectural complexity has been quite a challenge. This talk explores a real-world scenario showing how to smooth the experience of a micro-frontend architecture — from the sharp edges that catch teams off-guard to the practical patterns that bring the whole puzzle together.
View detailsReactJS Day
Multithreading in React: A Guide to Web Workers
JavaScript is single-threaded — but your CPU is not. This talk at the 10th edition of ReactJS Day in Verona explored the Web Workers API as a practical tool for moving heavy computation off the main thread, keeping React UIs responsive under load. From the basics of thread communication through `postMessage` to measuring real impact on frame rate and interaction latency, attendees left with a clear decision framework for when Web Workers are worth the complexity.
View detailsReact Alicante
The Easy Way to Full Stack
Coming from a purely frontend background, stepping into the backend and DevOps world can feel daunting. This talk at React Alicante 2024 made the case that the jump isn't as steep as it looks. Through practical examples, it explored the tools and patterns that let a frontend developer start building full-stack applications without rewriting everything they already know — from serverless functions and edge runtimes to containerisation basics and CI/CD pipelines.
View detailsWeAreDevelopers World Congress
5 Tips to Know Before Building a Design System
Building a design system from scratch sounds like a clean, exciting project — until the complexity compounds. This talk at WeAreDevelopers World Congress 2024 distilled hard-won lessons from real-world design system work into five practical tips every team should know before writing the first token. From governance models and multi-framework challenges to documentation culture and the importance of treating a design system as a product, the session offered a pragmatic roadmap for teams starting (or restarting) this journey.
View detailsNGRome Conference MMXXIV
5 Tips to Know Before Building a Design System
This talk at NGRome MMXXIV — the largest Italian Angular conference — explored what teams wish they had known before embarking on building a design system. Using Dynatrace's Barista design system as a reference point, the session walked through five hard-earned lessons covering everything from token strategy and multi-framework component libraries to documentation culture, governance, and treating the design system as a product that must earn adoption.
View detailsFrontend Talks with Apiumhub
Web Assembly: Porting code to the web
In 2019, WebAssembly became a W3C standard, opening the gates to near-native performance for any kind of application running in the browser. This talk at the Apiumhub Frontend Talks meetup (co-hosted with Dynatrace) cut through the hype to examine what Wasm actually delivers today: its real use cases, the genuine benefits it brings to web apps, and the drawbacks teams should be aware of before diving in. The session closed with a hands-on look at porting non-JavaScript code to the web in a real scenario.
View details