diff --git a/scripts/check-phase19.6.sh b/scripts/check-phase19.6.sh
index 7aa1660d..e4792aa2 100755
--- a/scripts/check-phase19.6.sh
+++ b/scripts/check-phase19.6.sh
@@ -128,6 +128,8 @@ MFA_TESTS=(
 	# WebAuthn shapes (D-08), the route table and the 2fa-verify bucket.
 	TestTOTP TestQRSVG TestRecoveryCodeFormat TestMaskEmail TestEmailExpiryMinutes
 	TestWebAuthnShapes TestRoutesAndBuckets
+	# Plan 04: the PHP security test map and the USER-005 port.
+	TestPHPMethodMap TestPHPUser005
 )
 
 # sociallogin stage: the plugin's Docker-free tests (-short), Phase 19.5's.