QA & Release Assurance

Software QA & Testing

Find the defects that matter before your users do. We test ordinary software, AI-generated codebases and AI-powered products, each in its own way, and show you the release risk before you ship.

Who brings us QA work

Developers tend to test the paths they built, so gaps between features, roles and devices go unchecked. You need an independent view of what is safe to release, whether your team, another vendor or AI tools wrote the code.

  • Product owners accepting software delivered by an agency or freelancers
  • Small teams with no dedicated tester and releases that keep breaking older features
  • Founders preparing to launch an app built mostly with AI coding tools

Which test types cover each journey

Illustrative coverage plan for a web product; your plan follows your own journeys and risks.

API & integrationAutomated end-to-endExploratoryAccessibility
Sign-up and sign-inPlanned in depthPlanned in depthLighter or sampled checksPlanned in depth
Checkout and paymentPlanned in depthPlanned in depthPlanned in depthLighter or sampled checks
Roles and permissionsPlanned in depthLighter or sampled checksPlanned in depthNot planned for this journey
Account recoveryPlanned in depthLighter or sampled checksPlanned in depthLighter or sampled checks
Search and filtersLighter or sampled checksLighter or sampled checksPlanned in depthLighter or sampled checks
Reports and data exportPlanned in depthNot planned for this journeyLighter or sampled checksNot planned for this journey
  • Planned in depth
  • Lighter or sampled checks
  • Not planned for this journey

QA for ordinary, AI-generated and AI-powered software

Software rarely fails where everyone is looking. It fails in an edge case at checkout, a permission nobody tested or a change that breaks an older feature. Whether you're preparing a launch or running a live product, we treat three cases differently. Ordinary software is tested against requirements and real user flows. AI-generated codebases get extra scrutiny, because code that runs can still do the wrong thing. AI-powered products also need their model behavior evaluated.

AI-assisted testing, expert-led QA

How AI assists

  • Drafts test cases from requirements, user stories and acceptance criteria for QA specialists to review and extend.
  • Analyzes coverage to show which flows, roles and error paths have no tests yet.
  • Speeds up defect investigation by reading logs, traces and recent changes to narrow down likely causes.
  • Helps write and update automated tests when screens, APIs or test data change.

What our experts own

  • QA specialists decide what to test from business risk and requirements, not from what the code happens to do.
  • Exploratory testing is done by people who probe edge cases, odd inputs and confusing journeys.
  • Every AI-drafted test is reviewed before it joins the suite, and weak assertions are rewritten.
  • Defect severity and the release recommendation are owned by our QA lead and agreed with your team.

What you receive

From test strategy to release-risk report

  • Test strategy

    Scope, risks, environments, test data and exit criteria, adapted to whether your product is ordinary software, AI-generated or AI-powered.

  • Requirements-based testing

    Functional test cases traced to requirements, covering business flows, roles and permissions, and error states on the browsers and devices you support.

  • Exploratory testing

    Focused manual sessions where QA specialists explore new and risky areas the way real users and careless inputs would, with notes on coverage.

  • Automated regression suite

    Unit, API and end-to-end checks, for example with Playwright, that run in your CI pipeline so regressions surface before release.

  • Reproducible defect reports

    Each defect logged in your tracker with steps to reproduce, expected and actual results, evidence and severity, then retested after the fix.

  • Release-risk report

    What was tested, what wasn't, open defects and known risks, with a clear recommendation so your team can make the go/no-go call.

How a QA engagement runs

  1. 01

    Assess risk and scope

    Review requirements, existing tests, past defects and how the product was built. Agree scope, environments and test data.

  2. 02

    Design the tests

    AI drafts candidate test cases; QA specialists review them, fill the gaps and prioritize by risk. Together we choose what to automate.

  3. 03

    Test and investigate

    Run requirements-based, exploratory and automated tests, log reproducible defects and work with engineers on causes and fixes.

  4. 04

    Report and keep coverage

    Deliver the release-risk report, then hand over the suite or keep it current as part of ongoing QA.

Two ways to work with AI tools

AI helps draft tests and investigate defects. Choose where it may process your code and test data.

Not sure? We'll recommend one during scoping. Compare AI delivery options

Typical QA requests

Typical scenarios we scope, not client case studies.

  • Acceptance testing before a vendor handover

    A company is about to accept a web app from an outside agency. We test it against the agreed requirements, log reproducible defects in the company's tracker and give a release-risk view before anyone signs off.

  • Older features breaking after fast releases

    A small team ships weekly with AI coding tools, and each release breaks something that used to work. We map the critical journeys, explore the riskiest ones before each release and add a regression test for every confirmed defect.

  • Go/no-go input before a fixed launch

    A product owner has a launch date set and a list of open defects. We run a focused pass on payments, sign-up and permissions, rate each defect by user impact and recommend what must be fixed first; the go/no-go call stays with them.

What QA doesn't cover

  • Load, stress and capacity checks aren't part of functional QA — see Performance Testing.
  • Attempts to exploit security weaknesses need separate written authorization — see Penetration Testing or API Security. QA checks that permissions work as specified.
  • Usability sessions with real users belong to User Testing; QA checks the product against requirements and agreed acceptance criteria.
  • In a standalone QA engagement your developers fix the defects, or our engineers do under a separate scope; we retest either way.

How QA connects to design, engineering and operations

  • Design: tested against real journeys

    User flows, interaction states and accessibility requirements from design become acceptance criteria, so QA checks the experience, not just the code.

  • Engineering: fixes in the same loop

    Defects reach engineers with reproduction steps. Fixes are retested, and each confirmed defect becomes a regression test.

  • Operations: release gates

    Automated suites gate releases in your deployment pipeline, and smoke tests run after each release alongside monitoring.

  • Ongoing: coverage that keeps up

    As your product changes, we keep regression tests current, remove flaky ones and revisit risks, under a support plan agreed with you.

FAQ

Frequently asked questions

Can you test software built by our team or another vendor?

Yes. QA can be part of a development engagement with us, a separately scoped service for software that already exists, or ongoing regression coverage. For an existing product, we usually start with a short assessment of risks and current tests, then agree a test plan with you.

Our app was built mostly with AI coding tools. What do you test differently?

We derive tests from your requirements, not from the generated code, because AI-written tests can simply confirm what the code does rather than what it should do. We also look harder at areas generated code can get subtly wrong: authorization, input validation, error handling, duplicated logic and dependencies nobody chose. A code audit is often a useful first step.

Our product has AI features. Does software QA cover them?

It covers the app around them: sign-in, payments, permissions and integrations. The AI behavior itself needs a different kind of testing, with evaluation datasets, answer-quality and grounding checks, tool permissions, failure handling and regression checks when models or prompts change. We scope that as AI Evaluation & Testing, alongside your QA.

Do AI tools see our code and test data?

Only within the boundary you choose. With Private / Local AI Engineering, models run on infrastructure you control or in an isolated environment we agree with you. With Claude Code / OpenAI Codex Engineering, commercial providers process code under account, data-handling and retention terms agreed before work starts. Where possible, we test with synthetic or masked data rather than live personal data.

Release with evidence, not assumptions

Tell us what you're building and what worries you about the next release. We'll suggest a test strategy and where to start.