TL;DR: PHP developers in Vietnam earn $1,800 to $4,200 a month working for international clients on our rate card, and we shortlist 6-8 candidates within 24 hours. The BLS median for US software developers was $135,980 a year in May 2025.
Under Vietnam's Law on Personal Data Protection, in force since 1 January 2026, silence or no response is not consent, so a pre-ticked marketing box on a Laravel or WordPress signup form fails. Ask a PHP candidate how their last form recorded what each customer agreed to.
Key takeaways
- Vietnam's ceiling is the lowest of the four markets compared, $300 under Indonesia's.
- Security support for PHP 8.2 ends on 31 December 2026, and Laravel 13 already requires PHP 8.3.
- WordPress recommends PHP 8.3 or later, and says the older versions it still runs on have reached end of life.
- If a customer disputes their consent, Decree 356/2025 puts the burden of proof on the business that collected the data.
What PHP Developers Earn in Vietnam Working for International Clients
Vietnam's band is the narrowest of the four, with $2,400 between floor and ceiling, and its floor sits $600 above Indonesia's. The figures are what developers in each market earn working directly for foreign companies, before any employer or platform costs.
| Market |
Monthly pay working for international clients (USD) |
| Vietnam |
$1,800-$4,200 |
| Indonesia |
$1,200-$4,500 |
| Philippines |
$2,200-$6,500 |
| Thailand |
$2,420-$5,290+ |
Monthly ranges from the Remote (Working for International Clients) figures on our rate cards for Vietnam, Indonesia, the Philippines and Thailand, converted at ExchangeRate-API mid-market rates for 14 September 2026.
The Vietnam card quotes US dollars, so its row needed no conversion. Thailand's card quotes ฿80,000 to ฿175,000+ a month, and its open top leaves room for a lead developer above the table.
A brief that is WordPress themes and plugins rather than application code has its own card. Our Vietnam WordPress developer card quotes ₫28,000,000 to ₫81,000,000+ a month, or $1,080 to $3,130+ at ₫25,873 to the dollar.
Through Second Talent you pay one monthly fee that bundles salary, payroll taxes, statutory contributions and our service fee, quoted per role and market. Our pricing page explains the subscription, and our PHP developer cost-to-hire page lists US freelance rates for the contract route.
US Pay Benchmark for PHP Developers
PHP developers map to Software Developers (SOC 15-1252). On a Laravel or Symfony product they write the server-side application, its APIs and its data layer, which is software development work.
| BLS OEWS, May 2025, national |
Software Developers (15-1252) |
| Median annual |
$135,980 |
| 10th percentile, monthly |
$6,870 |
| 25th percentile, monthly |
$8,770 |
| Median, monthly |
$11,330 |
| 75th percentile, monthly |
$14,330 |
| 90th percentile, monthly |
$17,890 |
Monthly figures are the annual wages on the OEWS profile for 15-1252 divided by 12, rounded to the nearest $10.
The top of Vietnam's PHP range sits $2,670 below the US 10th percentile monthly figure. Treat that as a budget fact, not a skill signal: judge candidates on the upgrades and incidents they owned.
Salary is only part of the US cost. In the BLS Employer Costs for Employee Compensation release for June 2026, wages and salaries made up 68.5% of employer compensation costs for full-time private industry workers, and benefits the other 31.5%.
Time Zone Overlap: Ho Chi Minh City Against ET, CT and PT
A 7 pm to 4 am shift in Ho Chi Minh City covers eight hours of a New York team's day while US daylight time lasts. Six of the developer's nine hours then carry Vietnam's night premium.
Vietnam keeps UTC+7 all year with no daylight saving, and US clocks stay on daylight time from 8 March to 1 November 2026, per NIST.
The arithmetic for Chicago: 9:00 am CDT (UTC-5) is 14:00 UTC, which is 9:00 pm in Ho Chi Minh City. Under CST (UTC-6) it is 10:00 pm. A 5:00 pm close in Chicago is 5:00 am the next morning in Ho Chi Minh City under CDT.
| Ho Chi Minh City shift (UTC+7) |
ET overlap (EDT / EST) |
CT overlap (CDT / CST) |
PT overlap (PDT / PST) |
Hours between 22:00 and 06:00 |
| 9 am-6 pm |
0 / 0 |
0 / 0 |
0 / 0 |
0 |
| 7 am-4 pm |
0 / 0 |
0 / 0 |
0 / 1 |
0 |
| 3 pm-12 am |
4 / 3 |
3 / 2 |
1 / 0 |
2 |
| 7 pm-4 am |
8 / 7 |
7 / 6 |
5 / 4 |
6 |
Each shift is nine clock hours, including a meal break, counted against a 9 am to 5 pm US day.
Most PHP roles do not need the full US day. The 3 pm to midnight row gives New York four live hours in September for code review and a release window, with two of them at the night rate. Plugin updates, queue backlogs and database maintenance can run in the Vietnamese afternoon, before your team logs on.
Vietnam's Labor Code 2019 caps normal hours at 8 a day and 48 a week (Article 105). It counts 22:00 to 06:00 as night work (Article 106) and pays employees at least 30% extra for those hours (Article 98).
We agree the shift before the offer, which is how our placements get 4-6 hours of daily overlap with US hours.
PHP Developer Skills to Screen For
W3Techs finds PHP on 69.9% of websites whose server-side language it can identify, and 64.0% of those sites run version 8. The rest run PHP 7 or older, so a PHP hire often inherits an upgrade before any new feature.
Supported PHP branches
The PHP project's supported versions page ends security support for PHP 8.2 on 31 December 2026, 8.3 on 31 December 2027 and 8.4 on 31 December 2028. PHP 8.5, released on 20 November 2025, has security support to 31 December 2029. Support for 8.1 ended on 31 December 2025, and for 7.4 on 28 November 2022, per the end-of-life list.
Ask the candidate for the last PHP version jump they ran: the deprecations that broke tests, and how they found them before production.
Laravel release cycles
Laravel gives each major release 18 months of bug fixes and two years of security fixes, per its release notes. Laravel 13 arrived on 17 March 2026, supports PHP 8.3 to 8.5 and gets security fixes to 17 March 2028. Laravel 12 stopped receiving bug fixes on 13 August 2026 and keeps security fixes to 24 February 2027.
In Stack Overflow's 2025 survey, 18.9% of all respondents used PHP and 8.9% used Laravel. Ask how the candidate would take a Laravel 11 app on PHP 8.2 to Laravel 13 on PHP 8.4, and in what order.
WordPress hosting baseline
WordPress's requirements page recommends PHP 8.3 or later, with MySQL 8.0 or MariaDB 10.11. It adds that WordPress still runs on PHP 7.4 and MySQL 5.5.5, but those versions have reached end of life and may expose a site to security vulnerabilities.
Hand the candidate a WordPress site with 30 plugins on PHP 7.4. Ask how they would find the plugins that break on 8.3 before the host upgrades the server for them.
Patching an exploited runtime flaw
CVE-2024-4577, rated 9.8 critical, hit Apache with PHP-CGI on Windows under certain code pages. Windows "Best-Fit" character replacement let an attacker pass options to PHP, which could reveal source code or run arbitrary code. Fixed releases were 8.1.29, 8.2.20 and 8.3.8, and CISA listed the flaw as exploited three days after NVD published it.
Ask the candidate what they check first when a critical PHP CVE lands: the version on each server, the server API in use, and whether a fixed release exists for that branch.
Consent records under the PDPL
Article 9 of the law makes consent valid only when the customer knows the type of data, the purpose, the controller and their own rights. The customer gives consent purpose by purpose, in a form the business can print or copy. A business cannot make consent to one purpose a condition of another.
Decree 356/2025/ND-CP requires the business to store each consent and bars default consent mechanisms (Article 6). Using personal data for advertising needs the customer's consent and a way to refuse advertising messages (Article 28 of the law).
Give the candidate a Laravel signup form with one checkbox for terms, analytics and marketing. Ask them to split it by purpose and log which version of the consent text each customer saw, with a timestamp. Then ask them to build a withdrawal flow that stops the marketing queue.
Contractor or Employer of Record in Vietnam
Software is not one of the nine categories of commissioned work that can be "work made for hire" under 17 U.S.C. § 101, and a copyright transfer must be in writing and signed under § 204(a). Name themes, modules, migrations and API code in the assignment.
Vietnam's Law on Intellectual Property protects computer programs like literary works (Article 22). The party that contracts an author to create a work holds the economic rights, unless otherwise agreed (Article 39).
The author cannot assign moral rights other than publication (Article 45), and the assignment contract must be in writing (Article 46). A plugin written for your store sits under the same rules as a product feature.
IRS Publication 515 says the place where services are performed determines the source of the income, so a PHP developer working from Da Nang earns foreign-source income. A foreign individual gives the payer Form W-8BEN to certify foreign status.
Under Article 13 of the Labor Code, an agreement that covers a paid job, wages and one party's management and supervision is a labor contract, whatever the parties call it. A full-time developer who works your tickets on your hours, in your repository, meets that description.
Our Employer of Record service employs that developer in Vietnam, and our Vietnam EOR page sets out the local detail. This is a summary, not legal advice.
|
Independent contractor |
Employer of Record |
| Legal employer |
None; the developer invoices you |
The EOR's Vietnamese entity |
| US paperwork |
Form W-8BEN from the developer |
Service agreement with the EOR |
| IP |
Written assignment of themes, modules, migrations and API code (Articles 39 and 46; § 204(a)) |
Employer holds the economic rights (Article 39), passed on through your EOR agreement |
| Local labor law |
Labor contract finding under Article 13 if you manage and supervise the work |
Normal hours cap, night pay and public holidays apply |
| Pay currency |
Agreed in the contract, often USD |
Vietnamese dong, as Article 95 sets for Vietnamese employees |
English Level and Working Norms in Vietnam
Da Nang scores 509 on the EF English Proficiency Index 2025 and Ho Chi Minh City 508, so a PHP developer outside the largest city tests about the same. Vietnam's national score is 500, 64th of 123 countries and regions, and its IT job-function score is also 500, against a global average of 488, per EF's Vietnam page.
A PHP developer's English shows in commit messages, release notes and replies to support tickets. Ask finalists to write the customer-facing note for a PHP 8.4 upgrade that changes a checkout page.
Article 112 of the Labor Code puts Victory Day on 30 April and International Labor Day on 1 May, two paid days back to back. It also sets five days for Lunar New Year and a holiday for the Hung Kings' anniversary on the 10th day of the third lunar month.
The Prime Minister fixes the Tet and National Day dates each year, so freeze store releases once that schedule is out.
Thanksgiving on 26 November 2026 is a working day in Vietnam, so a developer there can watch a store as holiday traffic builds while your US team is off.
PHP Developer Hiring Process in Vietnam
Second Talent's vetting covers stages 2 to 5 before you see a profile.
Stage 1: Define what the hire owns
You name the framework or CMS, the PHP version in production, the hosting, the payment integrations and the personal data the app holds. Add the upgrade you need first and a shift from the table above.
Stage 2: Application review
We look for PHP applications with real users and a named owner: a store, a booking system, an internal platform with an API. Candidates state the PHP and framework versions they moved from and to.
Stage 3: Skills assessment
The candidate upgrades a small Laravel app by one major version, fixes a SQL injection and splits a bundled consent checkbox by purpose. We score the diff, the tests and the upgrade note.
Stage 4: Live technical interview with a senior engineer
A senior engineer reviews the assessment in English, then asks the candidate to plan a WordPress plugin audit before a PHP 8.3 move. The design question covers queue workers, caching and a zero-downtime deploy.
Stage 5: Background and reference checks
We ask former managers how the candidate handled production access and customer data, how fast they patched, and how they reported their own mistakes. You then choose the contractor or EOR route above.
Hire PHP Developers from Vietnam with Second Talent
We shortlist 6-8 candidates within 24 hours from 100,000+ pre-vetted engineers, accepting only the top 1% of applicants. PHP developers from Vietnam come with $0 upfront, no lock-in and 4-6 hours of daily overlap with US hours. We handle contracts, payroll and equipment, with compliant EOR contracts in Vietnam.
Our pricing page sets out the monthly subscription, and we also staff PHP developers from Asia and WordPress developers in Vietnam.
