Our Melbourne QA testing follows a methodology designed for Australian software quality standards: (1) Test strategy (week 1): planning before testing. Application analysis: understanding the software being tested — architecture, technology stack, user personas, data flows, and risk areas. Melbourne context: identifying Australian-specific requirements — accessibility (DDA/WCAG), privacy (Privacy Act), regulatory (sector-specific), and market-specific features (Australian payment methods, ABN validation, Australian address formats). Risk-based test planning: prioritising testing effort based on risk — business impact (what happens if this fails?) × probability (how likely is a failure?). High-risk areas: getting the most thorough testing. Low-risk areas: tested but with proportionally less effort. The result: maximum quality confidence within realistic time and budget constraints. Test approach selection: for each area — manual testing (exploratory testing, usability assessment, and complex scenario testing where human judgment is required), automated testing (repetitive tests, regression suites, and tests that need to run frequently — automated for efficiency and consistency), performance testing (load, stress, and endurance testing — validating system behaviour under expected and extreme conditions), security testing (vulnerability assessment, penetration testing, and security configuration review), and accessibility testing (WCAG 2.1 AA compliance — automated scanning plus manual assistive technology testing). (2) Test automation (weeks 1-3): building sustainable automation. Automation framework: selecting and implementing the right automation tools. Playwright (our default for web application testing — cross-browser, fast, and reliable. Melbourne projects: Playwright handling the Safari/Chrome/Firefox/Edge matrix that Australian users require), Cypress (alternative for applications heavily using React/Vue — strong developer experience for component and integration testing), Appium (mobile application testing — iOS and Android automation. Australian market: testing both platforms essential given the 55/45 iOS/Android split), and API testing (Postman/Newman for API test suites — REST and GraphQL API validation automated and running in CI/CD). Test architecture: building maintainable test suites. Page Object Model (abstracting UI interactions — tests remain stable when UI changes), data-driven testing (same test logic running with different data sets — Australian addresses, phone numbers, ABNs, and payment details), and CI/CD integration (tests running automatically on every code change — GitHub Actions, GitLab CI, or Bitbucket Pipelines triggering test execution). Australian test data: generating realistic Australian test data — valid ABN formats, Australian phone numbers (04xx xxx xxx), Australian addresses (including state/territory and postcode validation), and Australian payment card test numbers. (3) Functional testing (weeks 2-4): verifying the software works correctly. Manual testing: exploratory testing by experienced testers — not following scripts but intelligently exploring the application to find defects. Melbourne manual testers: understanding Australian user behaviour, Australian conventions (date format DD/MM/YYYY, currency AUD with $ symbol, and metric measurements), and Australian regulatory requirements. Test case execution: structured test cases covering defined functionality — positive scenarios (expected usage), negative scenarios (error handling), boundary testing (edge cases), and integration scenarios (system interactions). Cross-browser testing: verified across Safari, Chrome, Firefox, and Edge — both desktop and mobile versions. Responsive testing: verifying responsive design across screen sizes — desktop (1920px, 1440px, 1280px), tablet (768px, 1024px), and mobile (375px, 414px). Australian specific: testing with Australian payment methods (Afterpay, Zip, PayPal AU), Australian address validation, ABN lookup integration, and Medicare/health fund integrations where applicable. (4) Specialised testing (weeks 3-5): beyond functional correctness. Performance testing: using JMeter, k6, or Gatling. Load testing (expected concurrent users — verifying response times under normal load), stress testing (2-3x expected load — identifying breaking points and degradation patterns), endurance testing (sustained load over extended periods — identifying memory leaks and resource exhaustion), and front-end performance (Lighthouse, WebPageTest — measuring Core Web Vitals and identifying rendering bottlenecks). Australian performance: testing from Australian infrastructure — latency from Australian cloud regions (AWS Sydney, Azure Australia East) to Australian users. Security testing: OWASP Top 10 assessment — SQL injection, XSS, authentication bypass, and other common vulnerabilities. Penetration testing: simulating attacker behaviour — attempting to breach the application. Dependency scanning: identifying vulnerable third-party libraries. Australian privacy: verifying data encryption, access controls, and data handling in compliance with the Privacy Act. Accessibility testing: WCAG 2.1 AA compliance. Automated scanning (axe-core, WAVE — identifying programmatic accessibility issues), keyboard navigation (verifying all functionality accessible via keyboard), screen reader testing (VoiceOver on macOS/iOS, NVDA on Windows — verifying screen reader compatibility), colour contrast (verifying text contrast ratios meet WCAG requirements), and form accessibility (labels, error messages, and instructions accessible to assistive technologies). (5) Reporting and continuous improvement (ongoing): communicating quality status. Defect reporting: clear, actionable defect reports — steps to reproduce, expected vs. actual behaviour, severity classification, and supporting evidence (screenshots, videos, logs). Melbourne reporting: defect reports that developers can act on immediately — reducing the back-and-forth that wastes time. Quality metrics: tracking quality trends — defect density (defects per feature/module), test coverage (percentage of requirements covered by tests), automation coverage (percentage of tests automated), and escape rate (defects found in production vs. testing). Test maintenance: keeping test suites current — updating tests when features change, removing obsolete tests, and optimising test execution time. Automation health: monitoring test suite reliability — flaky tests identified and fixed, test execution time tracked, and false positives eliminated.