BobTester

BobTester is a comprehensive, next-generation QA and Application Security (AppSec) platform co-developed with IBM Bob. It resolves the friction between feature testing and security auditing by merging them into a single, automated developer workflow. Instead of writing complex security exploits or relying on blind crawlers that cannot bypass logins, QA engineers simply record a standard "Happy Path" user flow client-side using their built-in Chrome DevTools Recorder. BobTester instantly translates the exported JSON into modular, execution-ready Playwright JS scripts. When triggered, BobTester offloads the heavy browser overhead to scalable, remote headless browser containers powered by Browserless.io (with a local fallback), solving the package size and CPU bottlenecks commonly encountered in serverless environments like Vercel. During execution, BobTester injects specialized security-probing listeners into the active browser page context: Cross-Site Scripting (XSS): We trap unexpected dialog triggers and audit active console logs for malicious reflection tokens. SQL Injection (SQLi): We parse HTTP response streams for unhandled database error signatures (Error-Based) and audit time-deltas between clicks and loads to identify timing anomalies (Time-Based Blind SQLi).