TestCon Europe 2026
October 20-23
Vilnius & Online
Daniel Horn
About
Testing is not just about finding bugs - it’s about much more. Daniel Horn is committed to raising the overall quality of software systems. His motto: “Prevention instead of band-aids and ointments.”
He has worked as a consultant for test automation and infrastructure in various DAX-listed companies for over 12 years. Throughout his professional career, Daniel has focused on enhancing existing test automation solutions and introducing new capabilities into the development process.
In his consulting services, Daniel strives not only to improve testing practices, but also to strengthen the overall quality processes of projects and products.
Daniel Horn | When Functional Tests Become Security Evidence
It’s Time to Stop Ignoring Security Signals During Runtime in Modern Testing
During functional testing - automated or manual - testers routinely exercise some of the most security-relevant behaviors of an application: authentication workflows, input handling, error paths, and external integrations.
Yet, once a test passes, we tend to focus solely on functional outcomes and disregard the security signals generated during execution.
This talk argues that ignoring these signals is a testing decision, not a technical limitation.
From a tester’s perspective, Daniel Horn explores how runtime observation techniques such as Interactive Application Security Testing (IAST) can turn existing functional tests into actionable security evidence.
He discusses where IAST adds value, where it does not, and how testers can contribute meaningful data to an application’s security profile - without altering the test’s intent or becoming security specialists.