PrimeQA Solutions

Industry: Insurance Services

Objective: To identify and mitigate security vulnerabilities within the company's web application.

1. Requirements

• Scope of Work:
  • Web application security testing
• Key Deliverables:
  • Detailed vulnerability assessment report
  • Risk analysis and impact assessment
  • Recommendations for remediation
  • Executive summary for senior management
• Compliance and Standards:
  • Compliance with industry standards (e.g., PCI-DSS, ISO 27001)
  • Adherence to regulatory requirements (e.g., GDPR)
• Constraints:
  • Ensuring no data loss or business interruption during testing

2. Methodology Used

Phase 1: Planning and Reconnaissance

Phase 2: Scanning

Phase 3: Gaining Access

Phase 4: Maintaining Access

Phase 5: Analysis and Reporting

Phase 6: Remediation and Re-testing

3. Tools Used

• Nmap, Burp Suite, Mozilla Firefox, In-House tailored scripts

4. Benefits to the Client

• Enhanced Security Posture:
  • Identification and remediation of critical vulnerabilities that could be exploited by attackers.
• Regulatory Compliance:
  • Ensured adherence to industry standards and regulatory requirements, avoiding potential fines and legal issues.
• Cost Savings:
  • Prevented potential financial losses associated with data breaches and system downtime.
  • Reduced insurance premiums due to a demonstrably stronger security posture.
• Business Continuity:
  • Enhanced ability to maintain business operations by identifying and mitigating risks that could disrupt services.
• Reputation Management:
  • Strengthened trust with customers and stakeholders by demonstrating a proactive approach to cybersecurity.

ABOUT VIDEO CONFERENCING PROJECT

A platform for Online Courses, Conferences, and Exhibitions.One platform to learn, teach, and present diverse skills to diversify your knowledge.It’s an online platform for a virtual class.

PROBLEM AND CHALLENGES FACED

• After registration, some users are unable to log in and got the error: “error in sending email via Gmail”.
• After the Execute verification script, some users are unable to log in and get the error:”email verification is pending.”
• While making the Payment got a “Forbidden” error message.
• While executing the Join Meeting script with 70 users got an “Upstream Timeout” error.

OUR SOLUTIONS

• Found unregistered users and again run the script to get newly registered users.
• Found unverified users and again run the script.
• We informed the DEV team.
• We had discussed issues with the Dev team.

TOOLS AND TECHNOLOGIES

• We used the JMeter tool for creating scripts.
• We tested the execution of each script in Redline13 with a different number of users.

BENEFITS TO THE CLIENT

• Successful Performance Testing session before going live.
• The application can handle the load of 100 users and the user does not face errors like 500 while performing any scenarios.
• We’ve achieved an average response time below 2 seconds.

ABOUT CLIENT

• Application is a groundbreaking digital platform revolutionizing healthcare by easing direct interactions between patients and their healthcare providers. With its user-friendly interface and advanced features, Application empowers patients to communicate with their doctors seamlessly.

REQUIREMENTS

• Automate the test cases by selenium tool for Web.

PROBLEM AND CHALLENGES FACED

• Applications have dynamic elements such as pop-ups, or content that changes often. Creating automated tests that can reliably interact with dynamic elements without false positives or negatives.
• Daily new build comes with bug fix esso affects other functions, so verify and automate in separate roles like patient, doctor, admin etc.
• Requires careful consideration and robust testing strategies.
• Due to code changes, the application crashes in many functions.

OUR SOLUTIONS

• We recommended utilizing GitHub Actions to execute the test cases, thereby saving time and reducing complexity.
• We performend-to-end as well as negative testing on devices daily to ensure core functionalities  are working properly.
• Check every feature and screen to catch any issue.
• We test the application on different devices.

TOOLS AND TECHNOLOGIES

• We used GitHub Actions to execute the test cases and used Selenium to Automate the Test cases.
• We test the application on both iOS and Android devices.

BENEFITS TO THE CLIENT

• Ensure UI/UX usability.
• The application was very buggy before the testing, then after it’s stable both web and Mobile.
• Earlier the application used to crash which no longer happens.

ABOUT FINTECH APPLICATION - SOSHWALLET

Soshwallet is the new way to organize, engage & manage payments with your social groups (PTAs / College Orgs / Charity Orgs) – with full transparency to everyone in the group. Based on blockchain technology, every transaction in and out of the group is visible to everyone in the group – enhancing accountability, and reducing the risk of misuse of funds – all in a single, integrated app.

REQUIREMENTS

• Client wants to functionally test the application across iOS and Android devices.

PROBLEM AND CHALLENGES FACED

• Earlier they used excel sheets for bug reporting and fixes so things got messy.
• Daily new build comes with bug fixes so affects other functions.
• Due to code changes, the application crashes in many functions.
• The app has multiple roles and while making a payment from one place, the entry is reflected in many other places
• Device compatibility needs to be checked.

OUR SOLUTIONS

• We have suggested them to JIRA for bug reporting and fixes so that things are easier to identify.
• We perform end-to-end as well as negative testing on both devices daily to ensure core functionalities are working properly.
• Check every feature and button to catch the crash issue.
• While testing the payments we cross-checked each account balance and transaction entry to see if they are reflected correctly.
• We test the application on different devices.

BENEFITS TO THE CLIENT

• Ensure UI/UX usability.
• The application was very buggy before the testing, then after it’s stable.
• The number of users using the application has increased.
• Earlier the application used to crash which no longer happens.

ABOUT CRYPTO CURRENCY PROJECT

Eclipton is a unique ecosystem that’s built on Blockchain technology. It supports social networking, freelancing, Cryptocurrency trading as well as blogging. The appreciable and important characteristic feature of the platform is that it can act.

REQUIREMENTS

• The client was keen to launch a new release to their 5K users
• The client opted to go under the Performance Testing session to achieve 5K concurrent users stress testing.
• The business transactions benchmark setup was three seconds under peak load.

PROBLEM AND CHALLENGES FACED

• During script preparation, we faced a major issue as we observed that they have added AWS Cognito authentication servers so we cannot add different users.
• For KYC view, it only accepts real Aadhaar card or PAN card details so it is very difficult for us to add real Aadhaar card details for 5K users.
• My blog page kept loading when we checked from the UI side after the execution was done with 2K to create a free or paid blog.
• Token expires after 2 mins.
• After adding and submitting the necessary details to create a gig and hire talent, the page kept loading.

OUR SOLUTIONS

• Instead of registering 5k new users we decided to use 4 users multiple times to bypass the AWS Cognito authentication
• For KYC scenarios we discussed with the team and create 4 new users and
approved KYC from the back end.
• We reported this issue to the dev team and when we ran the test for the second time with 2k and 5k it didn’t load and shows the numbers of blogs.
• We have manually added a request to be redirected to the respective page after creating a gig and hire talent.
• Dev team made changes and we execute the test a second time it removes and the application can handle a 5k user’s load.

BENEFITS TO THE CLIENT

• The application can handle the load of 5k users and the user does not face errors like 500 while performing any scenarios.
• We’ve achieved an average response time below 3 seconds.

Requirement : 

Developed Java selenium Automtion script for a Healthcare product in which there was a challenge to handle the alert post "Deleteing" a entry.

Problem: Not able to handle alert/popups in the headless mode

We are trying handle alert/popups in the headless mode, but script wont able to handle it. Scenario was Click on the “Delete” button -> Alert popup shows up (in this cases Confirmation Alert) -> Accept the alert -> Item gets deleted. 

Solution:

PrimeQA Automation team has developed sample code in Java using JavaScript with Selenium. This code Successfully executed with the TestNG Framework with Maven.

Here we have tried to click on “Delete” button itself with the help of JS, which leads to successfully handled the alert/popup post that. It not necessary to use JS on the alert/pop-up element itself always. Try to use JS on the element from which alert/pop-up triggers, which may solve your problem.

// Click on the span element using JavaScript

        String script = "var xpath = \"//span[text()='Delete']\";\n" +

          "var matchingElement = document.evaluate(xpath, document, null, XPathResult.FIRST_ORDERED_NODE_TYPE, null).singleNodeValue;\n" +

          "if (matchingElement) {\n" +

          "    matchingElement.click();\n" +

          "} else {\n" +

          "    console.error('Element not found');\n" +

          "}";

        ((JavascriptExecutor)driver).executeScript(script);

        // Wait for the alert to be present

        wait.until(ExpectedConditions.alertIsPresent());

        // Switch to the alert and accept it

        Alert alert = driver.switchTo().alert();

        alert.accept();

        driver.navigate().refresh();

Same way we can handle Alerts/Pop-ups in Python Selenium in Headless Mode.

Benefits:

1. Increased Automation Efficiency.

2. Resource Optimization.

3. Improved CI/CD Integration.

4. Ease of Remote Testing.

CLIENT

• Pimcore is an open-source enterprise PHP software platform for product information management, master data management, customer data management, digital asset management, content management, and digital commerce.

REQUIREMENTS

• Client wants to Automation Testing of the website of all the Admin, Airline and Store User at all the different Environments like Test, Dev, QA, and Trial.

PROBLEM AND CHALLENGES FACED

• In all Environment same script should be run successfully.
• It holdsa huge amount of data for all the modules.
• Keeping dependencies data consistent across all environments was important. We need to make sure it does not accidentally get deleted.

OUR SOLUTIONS

• We have created dynamic scripts for all environments, so that one script file can be run on any of the environments.
• We make scripts of end-to-end as well as negative test cases daily to ensure core functionalities are working properly.
• Handled the comparison of CSV files with the data, ensuring verification of rows, columns, and data.
• Integrated CI/CD Pipelines to ensure that novel changes are thoroughly tested before deployment.
• By Reporting and Analysis, Test results are analyzed and reported to clients.

BENEFITS TO THE CLIENT

• Smoother execution with dynamic test scripts for all 4 environments.
• After execution, the client receives an email report having a pass/fail table with the failure cause, along with attached files of logs and screenshots by this client can easily track the automation work and their website.
• We automated more than 1500+ test cases to enhance the quality of the website.
• By automating repetitive tasks and perfecting testing workflows, the client’s team was able to focus on higher-value activities and strategic initiatives, leading to increased productivity.
• By investing in automation testing, the client has laid the foundation for continued success with increased ROI, reduced maintenance efforts, and improved scalability in future projects, so it is Long-term benefit for them.