Guides
42 guides, each with a direct answer, what to check and what to ask the vendor. Grouped by the step of the selection path where you need them.
Step 1: Define
QA tester hourly rates and what rate cards hide
Why a low QA tester hourly rate can cost more: seniority mix, utilisation, excluded roles, overtime and change request pricing, and how to compare quotes.
In-house vs outsourced QA cost: building a fair comparison
Compare the cost to outsource QA vs hire in house: build a fully loaded in-house cost, set it against a vendor quote over 12 and 24 months, and count exit.
Fixed price vs time and materials for software testing
Fixed price vs time and materials for QA work: when each fits, how a fixed price squeezes test depth, and how to cap time and materials and keep flexibility.
Hidden costs of outsourcing software testing
The costs a rate comparison leaves out when you outsource testing: management time, onboarding, tools, devices, rework, change requests and exit.
QA outsourcing pricing models and their incentives
Hourly, monthly per tester, fixed price per release and outcome-based pricing for QA outsourcing, and the behaviour each model encourages in a vendor.
Test automation ROI when a vendor builds the suite
Estimate test automation ROI when a vendor builds the suite: build cost, maintenance, flaky tests, pipeline time and handover, using your own numbers.
Step 2: Request
QA outsourcing engagement models explained
Staff augmentation, dedicated team, managed testing and project work compared by who owns the test strategy, who carries the risk and what you manage.
What a test strategy document should contain
The sections a QA vendor's test strategy must cover, mapped to ISO/IEC/IEEE 29119-3, and the gaps that show a copy-paste document written for someone else.
SLA metrics that matter for a QA testing vendor
Which software testing SLA metrics a QA vendor can actually control, such as turnaround, reporting and staff continuity, and which only look good on paper.
How to write an RFP for QA and software testing services
How to write an RFP for software testing, section by section: what to disclose about your product and current testing so that vendor answers can be compared.
Time zone overlap with a nearshore or offshore QA team
How much time zone overlap a nearshore or offshore QA team needs, which testing work can run asynchronously, and how to write overlap hours into the contract.
Crowdtesting vs managed QA: what each model is for
How crowdtesting and a managed QA team differ on device breadth, capacity, confidentiality, product knowledge and ownership, and how to choose between them.
Penetration testing scope of work: what to define
How to scope a penetration test with a vendor: assets in and out of scope, rules of engagement, OWASP and NIST methods, reporting and retest terms.
How to choose an accessibility audit provider
What a WCAG 2.2 audit should cover, why automated scans are not enough, and how to require a report that maps every finding to a success criterion.
Mobile app testing device matrix: what to ask a vendor
Build a mobile device matrix from your own analytics, decide between real devices, emulators and cloud device farms, and state coverage in the SOW.
RFI vs RFP for QA services: which to send first
When a short request for information builds a better QA vendor shortlist, when to go straight to an RFP, and what each document should ask for.
How to evaluate RFP responses from QA vendors
A step-by-step method for evaluating QA vendor RFP responses: pass/fail gates, independent scoring, price normalisation and handling off-brief answers.
Software testing statement of work: what goes in it
How to turn a chosen QA proposal into a statement of work: scope, deliverables, acceptance, service levels, assumptions, change control and exit.
How to choose a performance testing vendor
Questions that separate performance engineers from script runners: workload modelling, environment parity, load origin, data flow and results you can act on.
Tester to developer ratio: sizing a vendor team
Why there is no standard tester to developer ratio, what drives the right team size, and how to challenge the headcount in a QA vendor's proposal.
Pros and cons of outsourcing software testing
What outsourcing software testing can fix and what it cannot, with the conditions under which each advantage and drawback holds, from the buyer's side.
When should a startup hire QA or bring in a vendor?
Signals that testing has become a bottleneck in a startup, and how to choose between a first QA hire and a first testing vendor with your own numbers.
Step 3: Question
How QA vendors staff projects, and how to keep your team
How bench staff, shadow resources and sales-stage seniors work in QA outsourcing, and how to keep the people you interviewed through named roles and terms.
How to read a QA vendor's sample test summary report
What a test summary report should include, and how to read a vendor sample for honest scope, measurable exit criteria, defect severity and gaps.
How to verify a vendor's ISO 27001 and SOC 2 claims
How to verify an ISO 27001 certificate for scope, accreditation and validity, and how to read a SOC 2 Type II report for its period, carve-outs and exceptions.
QA vendor evaluation criteria and the evidence for each
The eight criteria groups for judging a software testing vendor, what evidence satisfies each one, and the criteria buyers tend to overweight.
Who owns the test automation code a vendor writes
How to secure ownership of test automation code in a QA vendor contract: foreground and background IP, repository access from day one, and framework licences.
Test automation vendor lock-in: how to avoid it
Proprietary frameworks, hosted-only runners and closed export formats: what to check so your automated test suite still runs after the vendor leaves.
Vendor security questionnaire for a QA supplier
Which security questions matter when a testing vendor gets access to your code, pipelines and test data, and how to check the answers with evidence.
Step 4: Score
How to run a paid pilot with a QA vendor
Scope a short paid pilot with a QA vendor on your real backlog, with exit criteria, ownership of pilot work and a scoring sheet agreed before it starts.
How to weight a vendor scorecard for QA selection
Set weighted scoring for a QA vendor scorecard from what would make the engagement fail, keep price from dominating, and calibrate your evaluators.
Onboarding a QA vendor: the first 30 days
Onboarding an outsourced QA team week by week: access, product context, the first owned test cycle and first report, plus checks that ramp-up is on track.
Managing an outsourced QA team without micromanaging
Managing an outsourced QA team: the buyer-side roles, rituals and artefacts that keep an external testing team aligned without micromanaging it.
KPIs for an outsourced QA vendor you can verify yourself
A short KPI set for an outsourced QA provider that you can check from your own data, and the vanity metrics to keep out of the contract.
Defect leakage as a vendor metric: define it fairly
How to define and count defect leakage, also called escaped defects, so the metric is fair to a QA vendor and useful to you in contracts and reviews.
Running a quarterly business review with a QA vendor
An agenda for a quarterly business review with a testing vendor: service level trends, incidents, staffing changes, open risks and scope for next quarter.
Step 5: Verify
Exit planning for a QA outsourcing contract
What an outsourcing exit plan for a QA vendor should contain before you sign: asset list, handover period, exit assistance rates and access removal.
How to check a QA vendor's references properly
How to check vendor references beyond the hand-picked ones: choose who you call, reach former clients and the people who managed the testers day to day.
Test data and GDPR when testing is outsourced
When a QA vendor tests with personal data you need GDPR Article 28 terms. How masked or synthetic test data changes that, and what to put in the contract.
Knowledge transfer when switching QA vendors
A knowledge transfer plan for a new QA vendor, organised by artefact and by person, with acceptance tests that prove the new team can run your regression.
HIPAA and testing vendors: when you need a BAA
When a software testing vendor becomes a HIPAA business associate, how to keep PHI out of test environments, and what to check on subcontractor BAAs.
Professional indemnity and other insurance for a QA vendor
What insurance to ask a QA vendor for in an IT contract: professional indemnity, cyber and liability cover, how to set limits and how to verify certificates.