Back to BlogQuality & Testing

QA Before a Major Release: A Release-Gate Audit as a Service

Rupak Amin

Founder & Lead Engineer, RAITHub

7 min read

RAITHub ships and tests production software. See QA as a Service or talk to us.

A release-gate audit is a one-off, fixed-scope round of testing run before a major release, ending in a clear go or no-go. Testers verify the new features, re-test the journeys the release touches, and hand you a ranked bug report with severity, reproduction steps and a suggested fix for each issue. You get a decision you can stand behind, not a hunch.

This is the commercial service. If you want the decision framework to run yourself, the release readiness checklist covers it; this post is about buying the audit.

What is a release-gate audit, and when do you need one?

A release gate is the moment a change is allowed through to users, or held back. A release-gate audit is an outside tester making that call deliberately: not "does the demo work", but "is this release safe for everyone who will touch it". You need one when a release is big enough that a bad one hurts: a new paid tier, a pricing change, a payments switch, a data migration behind a feature, or the first release after a long quiet period.

The difference from a launch audit is only the moment. A launch QA audit runs before go-live; a release-gate audit runs before a big release of a product already live. The method is the same; the risk is different, because you now have real users whose day the release can ruin.

What does the release-gate audit cover?

A fixed scope agreed before it starts, weighted towards what the release changes and what it could break.

AreaWhat gets testedWhy it matters for a big release
New featuresThe new workflow end to end, including empty, error and edge statesThe headline of the release has to actually work for real inputs
RegressionThe existing journeys the release touches or shares code withMost release damage is to something that worked yesterday
Payments and moneyAny change to pricing, plans, billing or refunds, in test modeA money bug in a release is visible, expensive and public fast
Data and migrationsBehaviour before and after any migration shipped with the releaseA migration that half-runs leaves records wrong in ways users notice later
Auth and rolesThat the release did not open a path between users or tenantsA permission regression is a data leak with a deploy date
Smoke checksSecurity against OWASP guidance, plus accessibility and performanceThe quick checks that catch the cheap, embarrassing mistakes

The security part is an application-level smoke test against the OWASP Web Security Testing Guide, not a certified penetration test, and the accessibility part is a smoke check against WCAG 2.2, not a legal compliance certificate. Where a contract needs either, use the full service.

Free checklist

AI-Built App Launch Readiness Checklist

25 checks before you let real users in. Enter your email and we’ll reveal it below (and send you a copy).

One email, the checklist, no spam. By submitting you agree we can email you this checklist and reply to your enquiry.

What does "go / no-go" actually mean here?

It means the audit ends with a recommendation, not just a list. Every bug gets a severity, and the severities drive the verdict: a go with known minor issues logged, or a no-go with the specific blockers that must be fixed and re-tested first. The point of a gate is that a red result can hold the release. Google's SRE practice makes the same point: the checks that gate a release should be real and reproducible, and a release is cut from the last build that passed them all (Google SRE Book, Release Engineering).

Buy, build or hire?

A release-gate audit is one of four routes to a safe release.

RouteWhat it costs on the marketChoose this whenWatch out for
A tool or testing platformCloud browser and device testing from around $29 to $39 a month for one user (BrowserStack pricing)Your developers already write release tests and just need somewhere to run themA tool runs tests; it does not weigh the risk or give a verdict
Freelancers or crowdtestingUpwork lists a median of $35 an hour for QA engineers (Upwork QA engineer rates)An extra pair of hands for one release, well briefedNo one owns the go/no-go call or the regression memory
An in-house QA hireThe US median wage for QA analysts and testers was $104,300 in May 2025 (US Bureau of Labor Statistics)Releases are frequent and QA is a standing needOne person cannot cover every release at speed alone
A managed release-gate auditFixed price, quoted per release scope after a free callA specific big release is coming and you want a defensible decisionMake sure the regression scope matches what the release touches

When don't you need a release-gate audit?

  • When the release is small and your automated regression suite already gates merges. Trust the suite.
  • When you release many times a day. A per-release audit does not fit that pace; managed continuous QA in your pipeline does.
  • When you need a certified penetration test or a legal accessibility certificate. Those are separate, accredited engagements.
  • When you want a tester embedded under your management. RAITHub does not offer staff augmentation.

How RAITHub would do this

RAITHub runs the release-gate audit as its pre-launch QA service, scoped to the release rather than a first launch.

  • Scope: a free 15-minute call to name what the release changes, what it risks and the journeys to regress, then a fixed written quote.
  • Audit: testers verify the new features, re-test the touched journeys on desktop and real phones, and run security, accessibility and performance smoke checks.
  • Verdict: a ranked bug report in your tracker with a clear go/no-go and the specific blockers, if any.
  • Fix, your choice: fix from the report with your own team, or have RAITHub engineers fix the blockers under a separate fixed quote, then re-test.
  • Keep testing, optional: move to a monthly QA plan so every future release is gated the same way.

RAITHub's QA discipline is counted in real repositories: PropDesk runs 1,024 automated tests, Sundor Skin 530+, and this website 400+ in CI. TheSkinProof, the founder's own venture rather than a client, runs 750+. There is no standalone release-audit case study yet, so judge the service on the free call and a written scope. You receive: the bug report and go/no-go, any automated tests in your repository, full IP and an NDA. Next step: a free 15-minute audit, then a written fixed quote; RAITHub publishes no rates.

To book one, tell RAITHub about the release and its date.

Frequently asked questions

What is a release-gate QA audit?

A one-off, fixed-scope round of testing before a major release that ends in a go or no-go. Testers verify the new features, re-test the journeys the release touches, and hand you a ranked bug report with severity, reproduction steps and a suggested fix for each issue.

How is it different from a pre-launch audit?

Only the moment. A pre-launch audit runs before go-live; a release-gate audit runs before a big release of a product already in production. The method is the same, but the regression scope focuses on what the release changes and could break.

What does a no-go result include?

The specific blockers that must be fixed and re-tested before the release is safe, each with severity and reproduction steps, plus the lower-severity issues you can log and ship with. The verdict is a recommendation you can act on, not just a bug list.

How much does a release-gate audit cost?

RAITHub publishes no rates. It is a fixed price, quoted after a free 15-minute call once the scope is clear: what changed, what to regress, which devices and payment flows. Marketplace QA engineers typically charge $20 to $60 an hour as a reference.

Can you re-test after we fix the blockers?

Yes. A re-test of the fixed blockers is part of the engagement, so the final go/no-go reflects the release you are actually shipping, not the one you submitted for testing.

We release constantly. Does a per-release audit still make sense?

Not for every release. If you ship many times a day, a per-release audit does not fit; managed continuous QA in your pipeline does, with required gates that block a bad change automatically. Keep the release-gate audit for the genuinely big releases.

release QAgo no-gorelease gateQA as a serviceregression testingsoftware release

Ready to discuss your project?

Book a free 15-minute technical audit with our engineering team.