Case studies
Could a stranger read an SOS request? Ten high findings, retested
Public safety app: in its first beta a stranger near an SOS phone could get GPS and a medical record.…
09
Blog
Technical insights, QA methodologies, and software testing strategies from our engineering team.
Latest articles
10
Case studies
Your API errors are a promise to your customers. Does yours hold?
Fintech signing API: none of three written error guarantees was met on 11 endpoints, and 4 of 13 findings reopened…
11
Case studies
A patient record could be claimed with the wrong name and date of birth
Healthcare portal: a patient record could be claimed with the wrong name and date of birth. 189 test cases found…
12
Case studies
452 scanner findings and six criticals: which ones can actually hurt you?
SaaS security: a scanner gave 452 findings and six criticals. Reading the code ruled out two of the four advisories…
13
Case studies
Do your endpoints refuse an account that has no permissions?
Wealth platform API test: an account with no permissions got data from eight endpoints, names and portfolios among it. How…
14
Case studies
Does your API answer 'success' to a request it should refuse?
Wealth platform API: bad requests got HTTP 200 and a success flag, then the same kind of failure in four…
15
Best Practices: Insights & Perspective
We told the model the rule. It broke the rule in about one draft in twelve to twenty.
A banned phrase appeared in about one AI email in twelve to twenty, with no production check. Why a prompt…
16
Case studies
No photo was broken, yet one button would have deleted most of them
A car-services photo gallery's cleanup button judged photos broken by a missing thumbnail. Three in four rows would have gone.
17
Case studies
Absent 11 days, charged for 10
One holiday rule lived in twelve places and gave two answers across leave, overtime and a public page. We test…