Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Software Testing and related technologies.

Resilience Testing Is Non-Negotiable in the Enterprise SDLC | Harness Blog

Outages in distributed systems are inevitable, making resilience testing essential in the SDLC. It must be continuous, covering failures, load, and disasters. Delayed validation creates “resilience debt,” increasing risk. A holistic approach—combining chaos, load, and DR testing—plus cross-team collaboration and AI-driven insights improves reliability and reduces impact. Modern software delivery has dramatically accelerated.

How to Evaluate a Mobile App Testing Platform

Selecting a mobile app testing platform is a strategic engineering decision. It affects release velocity, defect escape rates, infrastructure costs, and long-term product stability. As mobile ecosystems become more diverse, platform evaluation must move beyond feature comparisons and focus on operational alignment. Mobile environments today include wide variations in device hardware, operating system versions, accessibility configurations, and browser implementations. A testing platform must reflect this complexity if it is to reduce production risk effectively.

Test Data Management and SOC 2 Compliance

Using live data outside production is one of the fastest ways to create compliance risk, because it quickly becomes harder to control who can access it, how it is handled, and how long it is kept. A Test Data Management (TDM) approach provides exactly the kind of controls SOC 2 auditors look for in this situation: an automated, traceable end-to-end process for protecting, provisioning, and removing customer data so it can be used safely in non-production environments.

Redgate Test Data Manager Updates - March 2026

This is a guest post from James Hemson. Redgate Test Data Manager's latest release adds Entra ID authentication, multi-target anonymization, and direct treatment code editing, with workflow improvements to make pipeline management faster and more flexible. Entra ID Authentication You can now connect to SQL Server using token-based authentication via Azure Entra ID, for both anonymization and subsetting.

Your Flaky Tests Are a Data Problem, Not a Test Problem

Your tests are not flaky. Your test data is. That 401 Unauthorized that fails every Monday morning? The OAuth token in your test fixture expired 72 hours ago. The order_id that works in staging but not in CI? It was hardcoded six months ago and the format changed from integer to UUID in January. The timestamp assertion that passes at 2pm and fails at midnight? You are comparing a hardcoded 2026-01-15T14:30:00Z against Date.now(). These are not test infrastructure problems. Retrying them will not help.

Root Cause Analysis in Software Testing: Methods, Techniques, and How AI Is Changing the Game

If you've ever fixed a bug only to watch it come back two weeks later, you already understand why root cause analysis matters. Patching symptoms feels productive - it's not. Getting to the actual cause is what prevents the same issue from eating your team's time over and over again. This guide covers everything you need to know about root cause analysis (RCA) in software testing: what it is, how to do it, which tools help, and where AI is taking it next.

WireMock vs MockServer vs Proxymock: Java Mocking in 2026

Your WireMock stubs are lying to you. They were accurate when someone wrote them six months ago, but the payment API added a metadata field in January, the inventory service switched from REST to gRPC in February, and nobody updated the stubs because the tests still pass. Meanwhile, production is breaking in ways your mocks will never catch. This is not a WireMock problem. It is a hand-written mock problem.

Vulnerability Scanning vs. Penetration Testing: Know the Difference

Cyber security isn't a one-size-fits-all solution, and for many UK business owners, the terminology can feel overwhelming. Identifying the right way to protect digital assets is essential to maintaining a strong security posture. Two of the most common methods for assessing risk are vulnerability scanning and penetration testing, but they serve very different purposes.

Deterministic Simulation Testing in Diskless Apache Kafka

Aiven put Diskless Kafka through 2,200 logical hours of chaos testing using Antithesis. Here's how it held up. Testing is a necessary pillar in any software development lifecycle. At the same time, it's a fundamentally incomplete process - a cat-and-mouse game. You can't test what you can't imagine and distributed systems have a nasty habit of producing failures that no one on the team imagined.

Spring Boot API Testing: A Practical Guide for Enterprise Teams

Enterprise Spring Boot APIs should be tested at three levels: unit tests for business logic, integration tests for external service behavior, and traffic replay for production edge cases. Most teams only do the first. This guide shows all three using a real Spring Boot application that calls external APIs (SpaceX, US Treasury) with JWT authentication. The kind of service that looks simple in development and breaks in production.