Security at Validate.QA

Your app credentials are stored encrypted and only injected into the runner at execution time.

Discovery and test execution happen in isolated browser contexts. We do not share authenticated state across customers.

Generated tests live in your GitHub repo when the integration is enabled — Validate.QA does not retain copies of customer source code.

We use Playwright tracing for failure diagnosis; traces are stored per-project and retained per your plan.