Skip to main content

How to Leverage Exploratory Testing to Uncover Bugs

Rob Mason
Applause

Development teams so often find themselves rushing to get a release out on time. When it comes time for testing, the software works fine in the lab. But, when it's released, customers report a bunch of bugs. How does this happen? Why weren't the flaws found in QA?

Welcome to defect fatigue, a common issue that occurs when testers execute the same repetitive automated and manual tests and as a result, skip over or miss defects. Testers need to get creative and investigative to find these well-hidden defects before they slip past QA and into the hands of customers.

Be an Investigator and Break Things

The purpose of exploratory testing is to find defects by breaking application functionality using manual and automated techniques without repetition. The "without repetition" piece is key, and the idea is that teams test to break, rather than confirm. Testers should manipulate connectivity, security, configuration settings, and different user navigation, among others. Other techniques include:

■ creating mind maps to find testing areas to investigate

■ forcing the application to function outside the known paths

■ triggering unexpected errors to discover missing error messaging paths

■ exercising back-end processing and third-party software integrations to see what can be interrupted or failed by unexpected user actions

If an application supports different user roles, testing should be done from these different perspectives and with their respective settings. Testers can also utilize existing browser development tools to find errors that are not always visible in the application UI, and to test and edit to see how the application responds.

Consider the People Element

Testers are also people that use applications every day. They should draw on their own personal experiences with typical application defects to try and break functionality. They should also consider the habits and behaviors of the members of the software development team.

As developers and product managers work more with an application over time, they start to develop habits that may influence how they interact with the software. For example, some developers may only develop code on a local machine while others may only do code reviews instead of pre-testing in a test environment. These are work habits that can lead to defects. On the product side, many product managers habitually create user stories and requirements in the same way, unintentionally leaving out a relevant workflow or configuration setting.

Finding hidden defects requires testing against the grain rather than verifying a function performs as expected. It also requires testing all possible paths that customers might take. Crowdtesting can supplement existing techniques by using real people to serve as proxies for customers. They can test for quality, user-experience and functionality outside the lab, and provide instant, useful feedback.

Testing repeatedly only to have bugs unearthed later by customers is a frustrating and potentially costly endeavor. When testers mix existing techniques with creativity and an understanding of human behavior, they will be able to dig deeper to find bugs and friction points that ultimately improve quality and customer experience before release.

Rob Mason is CTO of Applause

Hot Topics

The Latest

An overwhelming majority of IT leaders (95%) believe the upcoming wave of AI-powered digital transformation is set to be the most impactful and intensive seen thus far, according to The Science of Productivity: AI, Adoption, And Employee Experience, a new report from Nexthink ...

Overall outage frequency and the general level of reported severity continue to decline, according to the Outage Analysis 2025 from Uptime Institute. However, cyber security incidents are on the rise and often have severe, lasting impacts ...

In March, New Relic published the State of Observability for Media and Entertainment Report to share insights, data, and analysis into the adoption and business value of observability across the media and entertainment industry. Here are six key takeaways from the report ...

Regardless of their scale, business decisions often take time, effort, and a lot of back-and-forth discussion to reach any sort of actionable conclusion ... Any means of streamlining this process and getting from complex problems to optimal solutions more efficiently and reliably is key. How can organizations optimize their decision-making to save time and reduce excess effort from those involved? ...

As enterprises accelerate their cloud adoption strategies, CIOs are routinely exceeding their cloud budgets — a concern that's about to face additional pressure from an unexpected direction: uncertainty over semiconductor tariffs. The CIO Cloud Trends Survey & Report from Azul reveals the extent continued cloud investment despite cost overruns, and how organizations are attempting to bring spending under control ...

Image
Azul

According to Auvik's 2025 IT Trends Report, 60% of IT professionals feel at least moderately burned out on the job, with 43% stating that their workload is contributing to work stress. At the same time, many IT professionals are naming AI and machine learning as key areas they'd most like to upskill ...

Businesses that face downtime or outages risk financial and reputational damage, as well as reducing partner, shareholder, and customer trust. One of the major challenges that enterprises face is implementing a robust business continuity plan. What's the solution? The answer may lie in disaster recovery tactics such as truly immutable storage and regular disaster recovery testing ...

IT spending is expected to jump nearly 10% in 2025, and organizations are now facing pressure to manage costs without slowing down critical functions like observability. To meet the challenge, leaders are turning to smarter, more cost effective business strategies. Enter stage right: OpenTelemetry, the missing piece of the puzzle that is no longer just an option but rather a strategic advantage ...

Amidst the threat of cyberhacks and data breaches, companies install several security measures to keep their business safely afloat. These measures aim to protect businesses, employees, and crucial data. Yet, employees perceive them as burdensome. Frustrated with complex logins, slow access, and constant security checks, workers decide to completely bypass all security set-ups ...

Image
Cloudbrink's Personal SASE services provide last-mile acceleration and reduction in latency

In MEAN TIME TO INSIGHT Episode 13, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses hybrid multi-cloud networking strategy ... 

How to Leverage Exploratory Testing to Uncover Bugs

Rob Mason
Applause

Development teams so often find themselves rushing to get a release out on time. When it comes time for testing, the software works fine in the lab. But, when it's released, customers report a bunch of bugs. How does this happen? Why weren't the flaws found in QA?

Welcome to defect fatigue, a common issue that occurs when testers execute the same repetitive automated and manual tests and as a result, skip over or miss defects. Testers need to get creative and investigative to find these well-hidden defects before they slip past QA and into the hands of customers.

Be an Investigator and Break Things

The purpose of exploratory testing is to find defects by breaking application functionality using manual and automated techniques without repetition. The "without repetition" piece is key, and the idea is that teams test to break, rather than confirm. Testers should manipulate connectivity, security, configuration settings, and different user navigation, among others. Other techniques include:

■ creating mind maps to find testing areas to investigate

■ forcing the application to function outside the known paths

■ triggering unexpected errors to discover missing error messaging paths

■ exercising back-end processing and third-party software integrations to see what can be interrupted or failed by unexpected user actions

If an application supports different user roles, testing should be done from these different perspectives and with their respective settings. Testers can also utilize existing browser development tools to find errors that are not always visible in the application UI, and to test and edit to see how the application responds.

Consider the People Element

Testers are also people that use applications every day. They should draw on their own personal experiences with typical application defects to try and break functionality. They should also consider the habits and behaviors of the members of the software development team.

As developers and product managers work more with an application over time, they start to develop habits that may influence how they interact with the software. For example, some developers may only develop code on a local machine while others may only do code reviews instead of pre-testing in a test environment. These are work habits that can lead to defects. On the product side, many product managers habitually create user stories and requirements in the same way, unintentionally leaving out a relevant workflow or configuration setting.

Finding hidden defects requires testing against the grain rather than verifying a function performs as expected. It also requires testing all possible paths that customers might take. Crowdtesting can supplement existing techniques by using real people to serve as proxies for customers. They can test for quality, user-experience and functionality outside the lab, and provide instant, useful feedback.

Testing repeatedly only to have bugs unearthed later by customers is a frustrating and potentially costly endeavor. When testers mix existing techniques with creativity and an understanding of human behavior, they will be able to dig deeper to find bugs and friction points that ultimately improve quality and customer experience before release.

Rob Mason is CTO of Applause

Hot Topics

The Latest

An overwhelming majority of IT leaders (95%) believe the upcoming wave of AI-powered digital transformation is set to be the most impactful and intensive seen thus far, according to The Science of Productivity: AI, Adoption, And Employee Experience, a new report from Nexthink ...

Overall outage frequency and the general level of reported severity continue to decline, according to the Outage Analysis 2025 from Uptime Institute. However, cyber security incidents are on the rise and often have severe, lasting impacts ...

In March, New Relic published the State of Observability for Media and Entertainment Report to share insights, data, and analysis into the adoption and business value of observability across the media and entertainment industry. Here are six key takeaways from the report ...

Regardless of their scale, business decisions often take time, effort, and a lot of back-and-forth discussion to reach any sort of actionable conclusion ... Any means of streamlining this process and getting from complex problems to optimal solutions more efficiently and reliably is key. How can organizations optimize their decision-making to save time and reduce excess effort from those involved? ...

As enterprises accelerate their cloud adoption strategies, CIOs are routinely exceeding their cloud budgets — a concern that's about to face additional pressure from an unexpected direction: uncertainty over semiconductor tariffs. The CIO Cloud Trends Survey & Report from Azul reveals the extent continued cloud investment despite cost overruns, and how organizations are attempting to bring spending under control ...

Image
Azul

According to Auvik's 2025 IT Trends Report, 60% of IT professionals feel at least moderately burned out on the job, with 43% stating that their workload is contributing to work stress. At the same time, many IT professionals are naming AI and machine learning as key areas they'd most like to upskill ...

Businesses that face downtime or outages risk financial and reputational damage, as well as reducing partner, shareholder, and customer trust. One of the major challenges that enterprises face is implementing a robust business continuity plan. What's the solution? The answer may lie in disaster recovery tactics such as truly immutable storage and regular disaster recovery testing ...

IT spending is expected to jump nearly 10% in 2025, and organizations are now facing pressure to manage costs without slowing down critical functions like observability. To meet the challenge, leaders are turning to smarter, more cost effective business strategies. Enter stage right: OpenTelemetry, the missing piece of the puzzle that is no longer just an option but rather a strategic advantage ...

Amidst the threat of cyberhacks and data breaches, companies install several security measures to keep their business safely afloat. These measures aim to protect businesses, employees, and crucial data. Yet, employees perceive them as burdensome. Frustrated with complex logins, slow access, and constant security checks, workers decide to completely bypass all security set-ups ...

Image
Cloudbrink's Personal SASE services provide last-mile acceleration and reduction in latency

In MEAN TIME TO INSIGHT Episode 13, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses hybrid multi-cloud networking strategy ...