Test metrics & reporting
Metrics exist to make QA's work visible — not to justify it. A good metric serves a decision: are we ready to release? Which module needs attention? What is degrading in the process?
The core metrics and how to read them:
- Test execution progress — executed / planned cases (%). Question: are we on schedule?
- Pass rate — passed / executed. Question: how stable is the build?
- Defect density — defects per module (relative to code size or number of features). Question: which module is risky?
- Defect leakage / escaped defects — defects found in production over total defects. Question: how effective is the testing process?
- Defect removal efficiency (DRE) — found before release / (before + after). Higher is better.
- Reopen rate — the share of bugs reopened. Question: is this a fix-quality or a bug-report-quality problem?
- Average time to fix — from opening to closing a bug. Question: is triage working?
| Vanity metric (misleading) | Why it's bad | Replace it with |
|---|---|---|
| Number of test cases written | 500 weak cases are worse than 50 good ones; volume doesn't measure coverage and creates an incentive to write filler | Requirement/AC coverage: what share of critical flows is covered |
| Bugs found (per tester) | Cosmetic bugs start getting filed; it discourages early prevention (shift-left) and creates internal competition | Escaped defects: how many defects reached production and at what severity |
| 100% pass rate | Weak tests also produce 100%; "everything is green" carries no information | Pass rate plus which cases ran plus the escaped-defect trend, together |
| Number of automated tests | What matters is which risk is covered, not the count; flaky tests raise the number and lower trust | Automated coverage of critical flows + suite stability percentage |
| Hours spent executing tests | It rewards inefficiency — working slowly looks good | Coverage of critical flows and the release's quality outcome |
Who gets which report — rarely asked in interviews, yet answering it well immediately sets you apart:
- Developer / dev lead — specific bugs, reproduction detail, which module's defect density is rising
- Product Owner — the release-readiness picture: known problems, risks, what wasn't tested, points needing a decision
- Management / stakeholders — trends and outcomes: whether escaped defects are falling or rising, the state of critical flows, resourcing risks
The golden rule: a report is not a list of numbers, it is a story leading to a decision. "142 tests executed" says nothing. "Critical flows fully covered, 2 open Medium bugs — one with a workaround, GO recommended" enables a decision.
A trap question in interviews: "How many bugs did you find last month?" Don't stop at a number. A strong answer wraps the number in context: "About 40 — but I don't use that metric alone. The more important number is that only 1 Medium defect reached production in that release. Beyond that, questions asked in refinement meant several defects were never created at all — they appear in no statistic, yet they're the most valuable outcome."