~/resources/industry-qasection live
$ qa open industry --domain all

//Industry QA

Test what the domain.

From checkout coupon stacking to fintech reconciliation drift — every industry has failure modes that generic QA training doesn't cover. These guides do.

>search industry guides…⌘K
11
Industry guides
200+
Tools cross-linked
9
Bug categories
20
Sections / guide

Why domain context changes everything

Standard QA techniques — equivalence partitioning, boundary value analysis, API contract testing — are domain-agnostic. But the risk landscape is not. A SaaS product fails in ways a healthcare platform never would; a fintech transaction has failure modes an e-commerce checkout doesn't share. Industry-specific QA means knowing which failure modes are distinctive to your domain, why they occur at the business-logic level, and how to build a test strategy that covers them before they reach production.

Pick your domain

Multi-tenant flows, subscription billing, role permissions, and feature-flag isolation.

  • Subscription & billing edge cases
  • Role-based access control gaps
  • Feature flag isolation failures
  • Tenant data leakage
  • API rate-limit bypass
Manual QAAutomation QAQA leadsSDETs

Checkout flows, inventory sync, payment gateways, and promotion logic for online retail.

  • Checkout & coupon-stacking bugs
  • Inventory race conditions
  • Payment gateway failures
  • Tax & shipping calculation errors
  • Cart abandonment edge cases
Manual QAAutomation QAQA leads

High-stakes testing for payments, reconciliation, compliance, and financial data accuracy.

  • Transaction reconciliation drift
  • Regulatory compliance gaps
  • Currency rounding errors
  • Double-charge race conditions
  • Audit trail completeness
Automation QAQA leadsSDETsSecurity testers

Patient-safety-critical testing: EHR accuracy, HIPAA compliance, and clinical workflow integrity.

  • Patient data privacy (HIPAA) failures
  • Clinical data accuracy errors
  • Medication dosage edge cases
  • EHR integration gaps
  • Audit log completeness
Manual QAQA leadsCompliance testers

Seat selection, availability calendars, dynamic pricing, and booking race conditions.

  • Double-booking race conditions
  • Dynamic pricing accuracy
  • Timezone-aware availability bugs
  • Payment cancellation flows
  • Third-party API sync failures
Manual QAAutomation QAPerformance testers

Multi-sided platform testing: seller onboarding, listing accuracy, and transaction trust.

  • Seller fraud detection gaps
  • Listing data inconsistency
  • Commission calculation errors
  • Dispute resolution flow bugs
  • Search ranking integrity
Manual QAAutomation QAQA leads

Learning platforms: course progression, assessments, certifications, and accessibility.

  • Course progress tracking failures
  • Assessment scoring errors
  • Certificate generation bugs
  • Video & media playback failures
  • Accessibility (WCAG) gaps
Manual QAAutomation QAAccessibility testers

LLM-powered features: prompt regression, hallucination detection, and output consistency.

  • Hallucination in user-facing outputs
  • Prompt injection vulnerabilities
  • Non-deterministic output regression
  • Bias and harmful content
  • Latency under load
Automation QASDETsQA leadsAI/ML engineers

Provably-fair RNG, server-authoritative real-time state, anti-cheat, and gambling regulation.

  • RNG fairness & RTP drift
  • Client-authoritative state (cheating)
  • Responsible-gaming limit bypass
  • Geo & age-gating bypass
  • Virtual-currency duplication
Automation QASDETsQA leadsSecurity testers

Firmware OTA, device-cloud sync, offline reconciliation, and sensor-data validity for connected hardware.

  • Interrupted / un-recoverable OTA (bricking)
  • Reported state ≠ physical state
  • Stale-reconnect state overwrite
  • Silent sensor drift / invalid readings
  • Unsigned or downgrade firmware accepted
Automation QASDETsQA leadsEmbedded testers

DRM license acquisition, adaptive bitrate quality, CDN failover, cross-device resume, and concurrent-stream enforcement for VOD, live, and audio platforms.

  • Silent DRM license failure mid-session (Widevine/FairPlay/PlayReady)
  • ABR quality-stuck after bandwidth recovery
  • Concurrent-stream limit race: wrong session evicted
  • Geo/licensing window block with no user-visible regional error
  • SSAI ad-insertion offset fault: content skipped after ad break
Automation QASDETsQA leadsMedia platform testers

Getting the most out of each guide

Manual QA engineers

Start with the domain overview and key risk areas. Each guide gives you the domain vocabulary and explains the business logic behind each risk — use this to write better exploratory charters and ask sharper questions in sprint planning.

Automation engineers & SDETs

Jump to the test strategy sections for automation priority matrices. Guides flag which risks are high-automation ROI (e.g. billing regression) vs. those that need human judgment (e.g. UX trust signals in marketplace).

QA leads & managers

Use the risk area tables to validate your team's coverage model. Cross-reference with your current test plan to identify gaps — especially around regulatory compliance, data accuracy, and third-party integration failure modes.

Newcomers to a domain

Read the guide top-to-bottom before your first sprint. The domain-context sections assume no prior industry knowledge — they explain why the business cares about each risk before diving into how to test it.

Patterns that recur regardless of domain

Race condition coverage

Double-booking, double-charge, and inventory oversell bugs share the same root cause: concurrent writes without proper locking. Every domain with real-time state needs dedicated concurrency test scenarios.

Third-party integration resilience

Payment gateways, GDS APIs, EHR systems, and LLM providers all have outage and degraded-response modes. Test your fallback paths as thoroughly as your happy path.

Audit trail completeness

Fintech, healthcare, and marketplace platforms all require immutable audit logs. Verify that every state-changing action is logged with the correct actor, timestamp, and before/after state.

Data accuracy under scale

Aggregation bugs — totals that drift from line items, counters that miss concurrent increments — appear in billing, analytics, and inventory across all industries. Test at scale, not just at unit level.

Regulatory boundary testing

HIPAA, PCI-DSS, GDPR, and local regulations create hard boundaries your application must not cross. Map each regulation to a concrete test condition and keep these tests pinned in CI.

Timezone & locale edge cases

Travel, finance, and EdTech products all have domain-specific timezone sensitivity — DST transitions, month-end rollover, locale-specific date formats. Generate a dedicated timezone test matrix for each domain.

At a glance: top risks per domain

IndustryTop riskHardest to testMost common bug
SaaSTenant data leakageFeature flag isolationPermission boundary bypass
E-commerceInventory race conditionCoupon stacking logicTax calculation drift
FintechReconciliation driftDouble-charge under loadCurrency rounding error
HealthcarePatient data exposureClinical data accuracyAudit log gaps
Travel & BookingDouble bookingTimezone + DST handlingAvailability sync lag
MarketplaceSeller fraud bypassCommission edge casesListing data inconsistency
EdTechProgress tracking lossAssessment scoring logicAccessibility regression
AI ProductHallucination in outputNon-deterministic regressionPrompt injection bypass

From guide to competency

Frequently asked questions