What is QAOS?
QAOS is an intelligent testing agent that browses your web application exactly like a real user would — clicking buttons, filling forms, navigating pages — while simultaneously scanning for security vulnerabilities and accessibility problems. Unlike static analysis tools, QAOS understands context. It identifies issues that only surface during real interactions: session tokens exposed after login, privilege escalation through hidden form parameters, or rate limiting that only kicks in after the tenth failed attempt.What QAOS detects
Security Vulnerabilities
Access control bypasses, injection attacks, weak cryptography, session hijacking vectors, misconfigured headers, and more — mapped to industry standards.
Accessibility & UI/UX Issues
WCAG 2.1 violations, keyboard navigation gaps, color contrast failures, missing form labels, and UX problems that affect real users.
How it works
1
Create an account and project
Sign up on the QAOS Dashboard and create a project to associate your runs with.
2
Install the CLI
Install
qaos globally via npm and authenticate with your account.3
Configure a run
Write a JSON config file describing the pages to test and which agents to use, or generate one through the web UI.
4
Run the agent
Execute
qaos run — the agent launches a browser, navigates your site, and streams results in real time.5
Review the report
View a full issue report in the dashboard, with severity ratings, reproduction steps, and fix recommendations.