Vibe-coded consumer website
QA for a vibe-coded website before launch
- The challenge
- A 22-page consumer website had been built almost entirely with AI coding tools. It looked finished, but it had never been tested systematically, and nobody could say with confidence what problems the AI-generated code was hiding.
- What we did
- We put the site through our full QA process: cross-browser and device testing, performance, security and accessibility testing, and testing of both the frontend and the backend. Every bug was logged with steps to reproduce, prioritized with the team, and retested once fixed.
- Results
- 73 bugs found across the 22 pages, all fixed and retested before launch
- Private API keys exposed in a public code repository, caught before launch
- Cross-site scripting (XSS) and SQL injection holes in the contact form closed by sanitizing submissions
- Data that was being posted in plain text, caught and fixed