Leading the Way: Bridging Testing and Development for Cutting-Edge Solutions

about company  

CptoX provides personalized insurance solutions tailored to individual needs, ensuring financial safety in unforeseen circumstances. Utilizing cutting-edge technology, they offer seamless access and management of insurance policies through secure digital platforms, with round-the-clock expert support available.

before  

Before our involvement, CptoX did not have a structured testing process in place for its mobile platform. There was a lack of test documentation. Testing was conducted by the Project Manager due to resource constraints within the team. As a result, there were concerns regarding the mobile platform's reliability, functionality, and security.   

challenges and solutions 

We were tasked with developing an SDK for mobile platforms Android and iOS using Kotlin Multiplatform and testing it for reliability and security. 

technologies, tools and approaches  

• Kotlin Multiplatform: We utilized Kotlin Multiplatform technology to develop the SDK for Android and iOS platforms, enabling code sharing and ensuring consistency across different operating systems. 
• Unit Testing Frameworks: We employed unit testing frameworks such as JUnit for Java and XCTest for Swift to conduct unit tests on individual SDK components and modules, ensuring their functionality in isolation. 
• Continuous Integration (CI) Pipeline: A CI pipeline, configured with tools like Jenkins or GitLab CI, was utilized to automate the build, testing, and deployment processes, ensuring the stability and reliability of the SDK across different development stages. 
• Version Control System: Git was used as the version control system to manage the source code repository, enabling collaborative development and tracking changes throughout the project lifecycle. 
• Security Testing Tools: We utilized security testing tools such as OWASP ZAP and Burp Suite to conduct security assessments and penetration testing, identifying and addressing potential vulnerabilities in the SDK. 
• Manual Testing: Manual testing was performed to validate the SDK's user interface (UI), user experience (UX), and overall functionality on real devices, ensuring its compatibility and usability across different mobile platforms. 
• Code Reviews: Peers conducted regular code reviews to ensure code quality, adherence to coding standards, and identification of potential issues or bugs early in the development process. 

features of the project 

This project stood out thanks to our specialists' unique combination of knowledge and experience. Our team contributed to both the testing process and software development. We want to share the features that arose in this project. 

Testing Perspective: 

• Comprehensive Test Coverage: Our testing specialists ensured comprehensive coverage of all aspects of the mobile fintech platform, including manual testing, automation testing, functional testing, unit testing, integration testing, and end-to-end security testing. This thorough testing approach helped identify and address potential issues and vulnerabilities across the platform.
• Advanced Automation: Leveraging automation tools and frameworks, our team automated repetitive test cases to increase testing efficiency and accelerate the release cycle. Automation testing played a crucial role in ensuring the reliability and stability of the mobile fintech platform. 
• Focus on Security: Security testing was a top priority throughout the testing process. Our specialists conducted rigorous security testing to identify and mitigate potential security risks, ensuring that sensitive user data and transactions are protected against cyber threats and unauthorized access. 
• Collaborative Test Management: Our team utilized tools like GitLab for version control and collaboration and Qase.io for test management, streamlined test planning, execution, and reporting. This collaborative approach facilitated effective communication and coordination among team members, enhancing testing efficiency and effectiveness. 

Development Perspective: 

• Kotlin Multiplatform SDK: Our development team leveraged Kotlin Multiplatform technology to develop a unified SDK for Android and iOS platforms. This approach enabled us to share code between platforms, reducing development time and effort while ensuring consistency and reliability across different operating systems. 
• Scalable Architecture: Adopting a scalable architecture based on microservices and cloud technologies, our team designed the mobile fintech platform to accommodate growth and effectively handle increased user traffic and transaction volume. This scalable architecture ensures the platform's performance and reliability even under high load conditions. 
• CI/CD: Implementing CI/CD pipelines with tools like Jenkins and GitLab CI, our development team automated the build, test, and deployment processes, enabling rapid and frequent releases while maintaining code quality and stability. This agile development approach facilitates quick iteration and continuous improvement of the mobile platform. 

results 

• 130 test cases were successfully automated. This indicates a high level of automation, which helps ensure the product's stability and reliability. 
• 15 bug reports were created, making it possible to identify and eliminate errors in the product. This testifies to the effectiveness of the conducted testing and the increased quality of the software solution. 
• Enhanced Security Measures. Conducted security testing, including vulnerability assessments and penetration testing using tools like OWASP ZAP and Burp Suite. Identifying and addressing security vulnerabilities bolstered the product's resilience against cyber threats, safeguarding sensitive user data and fostering trust among users and stakeholders. 
• Implementation of a custom Coroutine Scope for iOS applications since iOS and Android platforms have different approaches to working with threads. All requests were wrapped in common Interactors, which were used on each platform, allowing for consistent data processing and error handling.