Test Automation
OSS-Fuzz: Integrating Continuous Fuzzing into Open Source Projects
Since its launch in 2016, Google's OSS-Fuzz program has found over 10,000 vulnerabilities and bugs in more than 1,000 open source projects.
Tools & Frameworks
In-depth tutorials and comparisons for testing tools and frameworks — Playwright, Cypress, Selenium, Robot Framework, and more.
Latest
Test Automation
GoReplay: Record and Replay Production HTTP Traffic for Testing
The most realistic test data you will ever have is the traffic that hits your production service right now.
Test Automation
Shadow Mode Testing with Diffy: Twitter's Approach to Regression Testing
Twitter's engineering team faced a problem that scales with complexity: every time they deployed a new version of a service, they needed to verify it produced the same responses as the old version across the enormous variety of real-world requests that hit their platform. Writing test cases
Test Automation
Traffic Mirroring with NGINX and Envoy for Dark Launch Testing
Dark launch is the practice of running a new version of a service in production — receiving real requests, doing real work — while still serving responses from the current version. Users see nothing different. Your new service processes every request, you measure its behavior, and only when you are confident does
Test Automation
Jazzer: Coverage-Guided Java/JVM Fuzzing in CI Pipelines
Java has a reputation for safety — garbage collection eliminates entire classes of memory bugs, strong typing prevents many type errors, and the JVM sandboxes execution. But Java applications can still have serious bugs: path traversal vulnerabilities in file handling, deserialization exploits, XML/JSON parsing crashes, SQL injection through improperly sanitized
Test Automation
ClusterFuzz: Google's Distributed Fuzzing Infrastructure for CI
OSS-Fuzz handles the hosting and infrastructure for open source projects. But what runs underneath OSS-Fuzz?
Test Automation
Formal Verification with Isabelle/HOL for Critical Software
In 2009, researchers at NICTA published a paper with an extraordinary claim: they had formally verified the functional correctness of the seL4 microkernel — 7,500 lines of C code — proving mathematically that the implementation matches its specification for every possible input and execution path. This was not testing. It was
Test Automation
cargo-fuzz + libFuzzer: Rust Continuous Fuzzing in GitHub Actions
Rust's ownership system and borrow checker eliminate entire categories of memory safety bugs at compile time — but they cannot prevent all bugs.
Test Automation
Atheris: Python Fuzzing with libFuzzer for Automated Vulnerability Discovery
Python's dynamic type system and exception handling make it easier to write code that handles invalid input gracefully — in theory.
Test Automation
Alloy Analyzer for Software Design Verification
Most software bugs are born not in code but in the design — the mental model of how a system should behave.
Test Automation
Testing Stripe Billing Integration: Subscriptions, Webhooks, and Metered Usage
Billing is where bugs have the most direct financial impact. Overcharging customers, webhooks that fail silently, or subscriptions that don't cancel properly — these bugs erode trust fast. This guide covers how to test your Stripe billing integration systematically using Stripe's test mode, the Stripe CLI for
Test Automation
Temporal Workflow Testing: Unit Tests, Replays, and Test Server
Temporal workflows are deterministic, durable, and long-running — which makes testing them different from testing ordinary async code.