Founder & Lead Engineer, RAITHub
RAITHub ships and tests production software. See QA as a Service or talk to us.
A release-gate audit is a one-off, fixed-scope round of testing run before a major release, ending in a clear go or no-go. Testers verify the new features, re-test the journeys the release touches, and hand you a ranked bug report with severity, reproduction steps and a suggested fix for each issue. You get a decision you can stand behind, not a hunch.
This is the commercial service. If you want the decision framework to run yourself, the release readiness checklist covers it; this post is about buying the audit.
What is a release-gate audit, and when do you need one?
A release gate is the moment a change is allowed through to users, or held back. A release-gate audit is an outside tester making that call deliberately: not "does the demo work", but "is this release safe for everyone who will touch it". You need one when a release is big enough that a bad one hurts: a new paid tier, a pricing change, a payments switch, a data migration behind a feature, or the first release after a long quiet period.
The difference from a launch audit is only the moment. A launch QA audit runs before go-live; a release-gate audit runs before a big release of a product already live. The method is the same; the risk is different, because you now have real users whose day the release can ruin.
What does the release-gate audit cover?
A fixed scope agreed before it starts, weighted towards what the release changes and what it could break.
| Area | What gets tested | Why it matters for a big release |
|---|---|---|
| New features | The new workflow end to end, including empty, error and edge states | The headline of the release has to actually work for real inputs |
| Regression | The existing journeys the release touches or shares code with | Most release damage is to something that worked yesterday |
| Payments and money | Any change to pricing, plans, billing or refunds, in test mode | A money bug in a release is visible, expensive and public fast |
| Data and migrations | Behaviour before and after any migration shipped with the release | A migration that half-runs leaves records wrong in ways users notice later |
| Auth and roles | That the release did not open a path between users or tenants | A permission regression is a data leak with a deploy date |
| Smoke checks | Security against OWASP guidance, plus accessibility and performance | The quick checks that catch the cheap, embarrassing mistakes |
The security part is an application-level smoke test against the OWASP Web Security Testing Guide, not a certified penetration test, and the accessibility part is a smoke check against WCAG 2.2, not a legal compliance certificate. Where a contract needs either, use the full service.
Free checklist
AI-Built App Launch Readiness Checklist
25 checks before you let real users in. Enter your email and we’ll reveal it below (and send you a copy).
One email, the checklist, no spam. By submitting you agree we can email you this checklist and reply to your enquiry.
What does "go / no-go" actually mean here?
It means the audit ends with a recommendation, not just a list. Every bug gets a severity, and the severities drive the verdict: a go with known minor issues logged, or a no-go with the specific blockers that must be fixed and re-tested first. The point of a gate is that a red result can hold the release. Google's SRE practice makes the same point: the checks that gate a release should be real and reproducible, and a release is cut from the last build that passed them all (Google SRE Book, Release Engineering).
Buy, build or hire?
A release-gate audit is one of four routes to a safe release.
| Route | What it costs on the market | Choose this when | Watch out for |
|---|---|---|---|
| A tool or testing platform | Cloud browser and device testing from around $29 to $39 a month for one user (BrowserStack pricing) | Your developers already write release tests and just need somewhere to run them | A tool runs tests; it does not weigh the risk or give a verdict |
| Freelancers or crowdtesting | Upwork lists a median of $35 an hour for QA engineers (Upwork QA engineer rates) | An extra pair of hands for one release, well briefed | No one owns the go/no-go call or the regression memory |
| An in-house QA hire | The US median wage for QA analysts and testers was $104,300 in May 2025 (US Bureau of Labor Statistics) | Releases are frequent and QA is a standing need | One person cannot cover every release at speed alone |
| A managed release-gate audit | Fixed price, quoted per release scope after a free call | A specific big release is coming and you want a defensible decision | Make sure the regression scope matches what the release touches |
When don't you need a release-gate audit?
- When the release is small and your automated regression suite already gates merges. Trust the suite.
- When you release many times a day. A per-release audit does not fit that pace; managed continuous QA in your pipeline does.
- When you need a certified penetration test or a legal accessibility certificate. Those are separate, accredited engagements.
- When you want a tester embedded under your management. RAITHub does not offer staff augmentation.
How RAITHub would do this
RAITHub runs the release-gate audit as its pre-launch QA service, scoped to the release rather than a first launch.
- Scope: a free 15-minute call to name what the release changes, what it risks and the journeys to regress, then a fixed written quote.
- Audit: testers verify the new features, re-test the touched journeys on desktop and real phones, and run security, accessibility and performance smoke checks.
- Verdict: a ranked bug report in your tracker with a clear go/no-go and the specific blockers, if any.
- Fix, your choice: fix from the report with your own team, or have RAITHub engineers fix the blockers under a separate fixed quote, then re-test.
- Keep testing, optional: move to a monthly QA plan so every future release is gated the same way.
RAITHub's QA discipline is counted in real repositories: PropDesk runs 1,024 automated tests, Sundor Skin 530+, and this website 400+ in CI. TheSkinProof, the founder's own venture rather than a client, runs 750+. There is no standalone release-audit case study yet, so judge the service on the free call and a written scope. You receive: the bug report and go/no-go, any automated tests in your repository, full IP and an NDA. Next step: a free 15-minute audit, then a written fixed quote; RAITHub publishes no rates.
To book one, tell RAITHub about the release and its date.
Frequently asked questions
What is a release-gate QA audit?
A one-off, fixed-scope round of testing before a major release that ends in a go or no-go. Testers verify the new features, re-test the journeys the release touches, and hand you a ranked bug report with severity, reproduction steps and a suggested fix for each issue.
How is it different from a pre-launch audit?
Only the moment. A pre-launch audit runs before go-live; a release-gate audit runs before a big release of a product already in production. The method is the same, but the regression scope focuses on what the release changes and could break.
What does a no-go result include?
The specific blockers that must be fixed and re-tested before the release is safe, each with severity and reproduction steps, plus the lower-severity issues you can log and ship with. The verdict is a recommendation you can act on, not just a bug list.
How much does a release-gate audit cost?
RAITHub publishes no rates. It is a fixed price, quoted after a free 15-minute call once the scope is clear: what changed, what to regress, which devices and payment flows. Marketplace QA engineers typically charge $20 to $60 an hour as a reference.
Can you re-test after we fix the blockers?
Yes. A re-test of the fixed blockers is part of the engagement, so the final go/no-go reflects the release you are actually shipping, not the one you submitted for testing.
We release constantly. Does a per-release audit still make sense?
Not for every release. If you ship many times a day, a per-release audit does not fit; managed continuous QA in your pipeline does, with required gates that block a bad change automatically. Keep the release-gate audit for the genuinely big releases.
Related posts
Ready to discuss your project?
Book a free 15-minute technical audit with our engineering team.