Portfolio

a1qa ensures the high quality and PCI DSS compliance of the subscription billing SaaS platform

A large financial player aiming to obtain compliance, speed up release cycles, and ensure faultless software operation reached out to a1qa.
Compatibility testing
Cybersecurity testing
Financial services
Integration testing
Performance testing
Regression testing
Test automation

Overview

The client is a financial technology innovator that provides comprehensive solutions for recurring revenue management. They address payment abandonment in subscription models through algorithmic orchestration, delivering a triple benefit to their clientele: boosted topline revenue, lowered operational expenses, and maximized customer lifetime value.

The company has developed unique SaaS billing software with complex business logic that delivers efficient, real-time payment processing and flexible subscription management, empowering businesses of all sizes and industries to optimize their revenue operations.

Given the stringent quality requirements of the fintech industry and the necessity to comply with PCI DSS standard, the client was in search of a long-term quality assurance provider.

Services offered

Functional testing
Performance testing
Security testing
Test automation
Regression testing
Intergation testing
Compatibility testing

Project scope

To ensure alignment with the client’s strategic business goals, a1qa assembled a team of QA experts who established high-velocity, transparent communication channels, swiftly integrated into Scrum-based delivery processes, and executed the following software testing activities:

  • Functional testing

As part of manual QA efforts, functional testing focused on validating all features across the client’s entire platform. QA engineers gained a deep understanding of business processes and applied knowledge of the fintech domain, so they didn’t only test the functional side, but also kept tabs on logical and business inconsistencies.

The team conducted the following QA activities:

  • Smoke testing to confirm the basic operational health of the build, ensuring the platform was functional enough for further examination.
  • New feature testing to meticulously validate every new subscription model, pricing change, new enhancement to the transaction flow, payment initiation process, and more, confirming that updated business logic was perfectly implemented.
  • Regression testing to guard against any unintended breakage of existing software functionality caused by recent code updates.
  • Cross-browser testing to ensure that all features of the IT product worked as intended by the requirements and UI was consistent across different browsers.
  • API and database testing to assert the robustness of the core endpoints for real-time payment processing and confirm that every transaction was correctly and atomically committed in the back-end.
  • Data validation testing to secure the accuracy and integrity of every recorded charge, usage metric, and subscription status.
  • Integration testing to certify that end-to-end communication with vital external systems, including the accurate synchronization of customer data with Salesforce, and flawless interaction with various payment processors and diverse payment methods, guaranteeing that the platform could always reliably capture and reconcile funds.

Performance testing

The client’s software needed to consistently operate under heavy user load and handle large volumes of financial operations without degradation. That’s why performance testing became one of the cornerstone activities for identifying bottlenecks, validating system throughput, and ensuring that key operations, such as processing recurring and one-time payments or generating invoices, remained stable and efficient during peak activity.

a1qa’s specialists were involved in a full spectrum of QA activities. They conducted stress and load testing for determining how software would perform under normal and extreme usage conditions, analyzed suboptimal queries to eliminate performance bottlenecks, and evaluated functional limits to better understand how features could withstand sustained load. QA engineers also verified search for speed and accuracy under pressure, checked database ability to scale to confirm seamless vertical and horizontal growth, detected the maximum volume of requests each processor could handle without degradation, and more.

As a result of a1qa’s contribution, a tenfold performance increase for one-time transactions was achieved, while the database’s efficiency and handling capacity were more than doubled.

Test automation

To support continuous delivery, significantly reduce manual testing efforts, speed up QA cycles, and allow manual QA engineers to focus on the new core functionality, replacing their usual routine, a1qa’s experts introduced C#-driven automated testing solution using Playwright from the ground up that can be configured and integrated with client’s new IT products with minimal effort.

To be precise, the specialists:

  • formulated a QA automation strategy, including the design and deployment of custom-built testing frameworks
  • created quality gates – production readiness criteria that were agreed by the entire team and strictly followed, such as zero high-severity defects, 100% passed smoke tests, and others
  • developed a comprehensive suite that covered interface elements, 100% of API endpoints (including ACH transfers, dynamic routing, batch processing, etc.), and all payment pathways.

To maintain test integrity, new features were initially subjected to rigorous manual verification and were transitioned to automated testing only after reaching a stable state, ensuring the durability and maintainability of the automation frameworks.

With 800+ test cases now running autonomously, a1qa’s team achieved a massive performance improvement, slashing the time required for build testing by more than 100x and minimizing manual intervention. Additionally, as the application was actively developed, test automation helped to control the quality on a regular basis and get testing results quickly.

Cybersecurity testing

Security testing was treated as a shared responsibility across the entire QA function. Both manual and automation QA engineers completed annual training, covering core security testing principles and common attack vectors. This established a strong baseline of security awareness and ensured that all considerations were embedded into test design and execution from the outset.

Given the requirement to maintain strict PCI DSS standards for the payment platform, a1qa’s team meticulously checked for risks related to firewall adjustments. The focus was on ensuring that allowing specific whitelisted data structures to bypass standard firewall rules for processing purposes would not expose the software to compromise or malicious input attacks.

Due to a1qa’s involvement, the audit concluded successfully, resulting in certification that authorizes the system to handle payment transactions.

Technologies & tools

  • Postman
  • Fiddler
  • PuTTy
  • JMeter
  • Grafana
  • Telegraf
  • InfluxDB
  • Azure DevOps
  • Azure Portal
  • Azure Data Studio
  • SQL Server Management Studio
  • Playwright
  • Azure Pipelines
  • WinSCP
  • TestRail

Results

  • Faultless operation of the billing infrastructure able to maximize payment approval rates and minimize associated operational liabilities due to thorough functional testing
  • Consistent, non-degrading functioning of critical financial operations under maximum user concurrency owing to comprehensive performance testing activities
  • Full compliance with PCI DSS standard, drastic reduction in security risks and data breaches, and market credibility as a result of a thoughtful security testing approach
  • Significant acceleration of QA cycles, boosted test coverage, and early detection of any defects due to test automation implementation

In numbers

2+
years of project duration
6
QA engineers on board
10X
decrease in time-to-market
100X
acceleration of the build testing process
1,200
automated test cases
1,250+
defects detected
100%
API functionality covered with automated tests

Get in touch

Please fill in the required field.
Email address seems invalid.
Please fill in the required field.
We use cookies on our website to improve its functionality and to enhance your user experience. We also use cookies for analytics. If you continue to browse this website, we will assume you agree that we can place cookies on your device. For more details, please read our Privacy and Cookies Policy.