How do you handle quality assurance and testing?
Quality assurance is embedded into every sprint, not bolted on at the end. Our QA process has been refined across 200+ projects — including compliance-grade systems like MyJPJ (government) and MedicalMet (healthcare with patient data).
Our Testing Layers
1. Code Reviews
Every pull request goes through peer code review before merging. Senior developers check for code quality, security vulnerabilities, performance issues, and adherence to architecture standards.
2. Automated Testing
- Unit tests: Individual functions and components tested in isolation.
- Integration tests: API endpoints, database operations, and service interactions verified end-to-end.
- CI/CD pipeline: Automated tests run on every code push. Broken builds block deployment automatically.
3. Manual QA Testing
Dedicated QA engineers test every feature against acceptance criteria, covering edge cases, device compatibility, and user experience issues that automated tests cannot catch. We test across real devices — not just emulators.
4. User Acceptance Testing (UAT)
Before each major release, your team tests the application against business requirements on the staging environment. We provide test scripts and track feedback through a structured UAT process.
5. Performance Testing
We run load tests to verify the application handles expected traffic. For the Perodua SA app, this meant simulating 3,000+ concurrent users during peak sales periods.
6. Security Audits
- OWASP Top 10: Every application is tested against the OWASP Top 10 vulnerability categories.
- Penetration testing: For enterprise and government projects, we conduct formal penetration tests.
- Data protection: PDPA compliance checks for applications handling Malaysian user data.
Bug Tracking & Resolution
Bugs are logged, prioritised by severity, and resolved within the same sprint cycle. Critical bugs are hotfixed immediately. You have full visibility into the bug tracker throughout the project.
Questions about our QA standards? Contact us for details on how we test for your specific industry.
Related Questions
What is your development process?
We follow Agile methodology with 2-week sprints. The process includes: Discovery & Scoping → UX/UI Design (Figma prototypes) → Development (with regular demos) → QA & Testing → Deployment → Post-launch support.
TechnicalHow do you ensure application security?
We follow OWASP security standards, enforce PDPA compliance, and conduct penetration testing. All applications use SSL/TLS encryption, encrypted data at rest, and role-based access controls.
Process & TimelineDo you use Agile or Waterfall methodology?
Agile. We run 2-week sprints with planning, daily standups, sprint demos, and retrospectives. This gives you working software every two weeks instead of waiting months for a final delivery.
Still have questions?
Can't find the answer you're looking for? Our team is here to help.