Blog
Insights, tips, best practices in software quality assurance and testing, and company updates.
October Ganaps at NorthQA
A full-day AI workshop, the largest batch of Watchtower updates yet with more than 70 improvements, and a Halloween night of costumes and scary stories. Here are our October ganaps.
Read Full ArticleLatest Articles
October Ganaps at NorthQA
A full-day AI workshop, the largest batch of Watchtower updates yet with more than 70 improvements, and a Halloween night of costumes and scary stories. Here are our October ganaps.
Regression Testing Strategy for Weekly Releases
A full regression pass that took three days was fine for monthly releases. Weekly, it eats the cycle. Here is the tiered regression strategy we put in place for teams shipping every week: four tiers, a thirty-minute gate, a quarantine rule for flakes, and the weekly rhythm around a Thursday release.
The QA Maturity Model Explained: Five Levels, Nine Dimensions
Most engineering leaders answer "how good is our QA?" with a feeling. A maturity model turns it into a position on a map. This is the model behind our free assessment: what the five levels mean, what the nine dimensions measure, how the score works, and what it deliberately does not claim.
How to Hire QA Engineers in the Philippines in 2026
Three ways to hire, what the market pays in 2026, the practical exercises that actually predict a good QA engineer, the parts that are specific to the Philippines, and a thirty-day onboarding plan that keeps remote hires for years instead of months.
In-House QA vs Outsourced QA: A Cost Comparison
Comparing a salary to a rate card is the comparison everyone makes and the one that is wrong. Here is the full bill for an in-house QA engineer and for an outsourced one, line by line, with assumptions you can swap for your own, and the cases where each option wins.
What Do Production Bugs Actually Cost You? We Built a Calculator to Find Out
Ask a team whether bugs reaching production are expensive and everyone says yes. Ask what that costs per year and the room goes quiet. Here is the model behind our new bug cost calculator, why the fix is the smallest part of the bill, and why we published every constant in it.
Midyear Tapok 2026: Where Work Went AFK and Fun Took Over in Camiguin
Sometimes the best way to strengthen a team is to step away from the screens. Ten of us, five motorcycles, and three days in Camiguin for NorthQA's Midyear Tapok 2026: island hopping, snorkeling at Mantigue, waterfalls, and absolutely no Jira tickets.
Watchtower: Why We're Building a Software QA Command Center
Before a release, someone always asks whether QA has finished testing. That should be a quick question. On most teams it isn't. Here's why we started building Watchtower, a QA command center that puts your codebase, your test suites, and every run in one place.
From Cagayan de Oro to Umbria: A Week at a Client Offsite
When the invitation came to join a UK client's team offsite in Italy, it felt like more than just a trip. From 30 May to 7 June I traded our Cagayan de Oro office for the rolling hills of Umbria. A working week with our partners, plus a bit of Rome, Todi, and Vatican City along the way.
NorthQA Official Opening - A Milestone Achieved
The official opening of NorthQA has successfully taken place, marking a major milestone as we formally established our office and operations as a legitimate entity in Cagayan de Oro City, Philippines.
NorthQA Christmas Party 2025: A Pause, A Celebration, A Team
Behind every test case is a human effort. NorthQA's Christmas party at Malasag G Resort was a reminder that time spent laughing and connecting strengthens everything else we build.
NorthQA participates in the Test Automation Summit 2025 in Manila
A comprehensive recap of the Test Automation Summit 2025, covering AI-driven testing, the evolution from QA to QE, service virtualization, performance trends, and why continuous learning is the future of quality assurance.
Stored Cross-Site Scripting in ASUS Healthcare Subdomain
Analysis of a critical stored XSS vulnerability found in ASUS Healthcare platform that allowed attackers to inject malicious scripts into user health data.
Page Admin Disclosure via an Upgraded Page Post
A deep dive into discovering and responsibly disclosing a security vulnerability that exposed page administrator information through upgraded posts.
Best Practices for Automated Testing in 2024
Learn the essential strategies and techniques for implementing effective automated testing frameworks that scale with your application.
Performance Testing Essentials: Load, Stress, and Scalability
Understanding the fundamentals of performance testing and how to ensure your application performs under various load conditions.