Manual Testing Roadmap (2026): Fresher to 5 Years, Stage by Stage

This manual testing roadmap lays out what to learn at each stage of a QA career, from your first months as a fresher to leading a QA team at around five years: the concepts, tools, domain knowledge and mini projects for each stage, and the interview questions you should be able to answer before moving on. Use it to check where you are and what to learn next.

Each stage links to detailed interview questions with answers: freshers, 1 year, 3 years and 5 years of experience.

Stage 1: Foundation (0–6 Months · Fresher)

1.1 Core Concepts of Software Testing

Topics

• What is Software Testing? Objectives, Principles
• SDLC (Software Development Life Cycle)
  • Waterfall, Agile, V-Model, Spiral, RAD
• STLC (Software Testing Life Cycle)
  • Requirement Analysis, Test Planning, Test Design, Test Execution, Defect Reporting, Test Closure
• Verification vs Validation
• QA vs QC vs Testing
• Static vs Dynamic Testing
• Manual vs Automated Testing
• Error, Defect, Bug, Failure - Differences
• Severity vs Priority

1.2 Types of Testing

Functional Testing

• Unit Testing
• Integration Testing (Big Bang, Top-Down, Bottom-Up, Sandwich)
• System Testing
• Acceptance Testing (UAT, Alpha, Beta)
• Regression Testing
• Smoke Testing vs Sanity Testing
• Re-testing

Non-Functional Testing

• Performance Testing (Load, Stress, Soak, Spike)
• Security Testing (Basic concepts)
• Usability Testing
• Compatibility Testing (Browser, OS, Device)
• Accessibility Testing

Other Types

• Positive Testing vs Negative Testing
• Black Box, White Box, Grey Box Testing
• Ad-hoc & Exploratory Testing
• End-to-End Testing

1.3 Test Design Techniques

• Equivalence Class Partitioning (ECP)
• Boundary Value Analysis (BVA)
• Decision Table Testing
• State Transition Testing
• Use Case Testing
• Error Guessing
• Pairwise / Orthogonal Array Testing

1.4 Test Artifacts

• Test Plan - Components & Template
• Test Scenario - Writing Guidelines
• Test Case - Format, Preconditions, Steps, Expected Result
• Test Data Preparation
• Test Summary Report
• RTM (Requirements Traceability Matrix)

1.5 Defect Life Cycle & Reporting

• Defect Life Cycle - New, Assigned, Open, Fixed, Retest, Closed, Rejected, Deferred
• Bug Report Writing - Components
  • Title, Steps to Reproduce, Expected vs Actual, Screenshots, Severity, Priority, Build
• Defect Metrics - Defect Density, Leakage, Removal Efficiency

1.6 Tools (Beginner)

1.7 Mini Projects - Stage 1

1.8 Interview Questions - Stage 1

Full answers: manual testing interview questions for this stage.

Conceptual Questions

1. What is the difference between Smoke and Sanity testing?
2. Explain SDLC vs STLC with phases.
3. What is Severity vs Priority? Give examples.
4. What is a Test Plan? What does it contain?
5. How do you write a test case? Explain with an example.
6. What is the difference between Regression and Re-testing?
7. What is RTM and why is it important?
8. What is Defect Life Cycle?
9. What is the difference between Bug, Defect, Error, and Failure?
10. Explain Black Box vs White Box vs Grey Box testing.
11. What is ECP and BVA? Explain with examples.
12. What is an Exit Criterion in testing?

Practical / Scenario Questions

1. How would you test a Login page? Write test cases.
2. You found a critical bug one hour before release. What do you do?
3. How do you prioritize your test cases when time is short?
4. You are given a new application with no documentation. How do you test it?

Stage 2: Building Expertise (6 Months – 1 Year)

2.1 Agile & Scrum in Testing

• Agile Manifesto and Principles
• Scrum Framework - Roles, Artifacts, Ceremonies
• Sprint Planning, Daily Standup, Sprint Review, Retrospective
• Testing in Agile - Continuous Testing, Shift Left
• User Stories & Acceptance Criteria
• Definition of Done (DoD)
• Kanban vs Scrum

2.2 Web Application Testing (Deep Dive)

• HTTP/HTTPS Basics - Request/Response Cycle
• Browser Developer Tools for Testing
  • Network Tab, Console, Elements inspection
• Cookie, Session, Cache Testing
• Cross-Browser Testing
• Responsive/Mobile Testing
• Form Validation Testing
• File Upload/Download Testing
• URL Manipulation & Parameter Tampering
• Broken Link Testing

2.3 API Testing

• REST API Basics - HTTP Methods (GET, POST, PUT, DELETE, PATCH)
• Status Codes (200, 201, 400, 401, 403, 404, 500)
• JSON & XML - Reading and Validating Responses
• Request Headers, Body, Query Parameters
• Authentication - Basic Auth, Bearer Token, API Keys
• Postman - Collections, Environment Variables, Pre/Post Scripts
• API Test Cases - Positive, Negative, Schema Validation
• REST vs SOAP Basics

2.4 Database Testing Basics

• SQL Basics - SELECT, INSERT, UPDATE, DELETE
• Joins - INNER, LEFT, RIGHT, FULL
• WHERE, GROUP BY, ORDER BY, HAVING
• Database Testing Types - Schema, Data Integrity, CRUD
• Stored Procedures & Triggers (Conceptual)
• Tools: MySQL Workbench, pgAdmin, SQL Developer

2.5 Test Management Tools (Advanced)

• JIRA - Epics, Stories, Tasks, Bugs - Workflows
• Zephyr Scale / Zephyr Squad (Test Management in JIRA)
• Confluence - Test Documentation
• TestRail - Test Suites, Runs, Reports
• Qase.io - Modern Test Management

2.6 Mini Projects - Stage 2

2.7 Domain Knowledge - Stage 2

Banking & Finance Domain

• Core Banking Systems (CBS) - Accounts, Loans, Deposits
• SWIFT, NEFT, IMPS, RTGS - Transaction types
• KYC, AML - Compliance Testing
• Credit Card & Debit Card Testing
• Internet Banking / Mobile Banking

E-Commerce Domain

• Product Catalog, Inventory Management
• Shopping Cart & Checkout Flow
• Payment Gateways (Razorpay, Stripe, PayPal)
• Order Management & Returns
• Warehouse & Logistics Integration

2.8 Interview Questions - Stage 2

Full answers: manual testing interview questions for this stage.

1. What is the testing approach in an Agile project?
2. How do you test APIs manually? What do you verify?
3. Write SQL query to find duplicate records in a table.
4. What is the difference between PUT and PATCH?
5. Explain different HTTP status codes and their meaning.
6. How do you test a Payment Gateway?
7. What are the challenges in Cross-Browser Testing?
8. What is JSON Schema Validation?
9. How do you test a login API? What test cases would you cover?
10. How do you handle a situation where requirements are unclear?
11. What is the purpose of a Test Summary Report?
12. Explain the difference between Integration Testing and System Testing.

Stage 3: Senior QA Engineer (1–3 Years)

3.1 Performance Testing

• Types: Load, Stress, Soak/Endurance, Spike, Scalability
• Key Metrics: Response Time, Throughput, Error Rate, CPU/Memory
• JMeter - Test Plans, Thread Groups, Samplers, Listeners
• k6, Gatling - Modern Performance Tools
• Performance Test Reports - Analysis & Interpretation
• Bottleneck Identification

3.2 Security Testing

• OWASP Top 10 - Understanding & Manual Testing
  • SQL Injection, XSS, CSRF, Broken Auth, IDOR
• Authentication & Authorization Testing
• Session Management Testing
• Input Validation & Sanitization Testing
• SSL/TLS Certificate Testing
• Tools: Burp Suite (Community), OWASP ZAP

3.3 Mobile Application Testing

• Android vs iOS Testing Differences
• Mobile Testing Types - Functional, Performance, Usability, Security
• Device Testing vs Emulator/Simulator Testing
• Gestures Testing - Tap, Swipe, Pinch, Long Press
• App States - Foreground, Background, Suspend, Kill
• Interrupt Testing - Calls, Notifications, Battery Low
• Network Conditions Testing (2G, 3G, 4G, Offline)
• Installation/Uninstall/Update Testing
• Tools: Android Studio Emulator, XCode Simulator, BrowserStack, pCloudy

3.4 Automation Testing Basics (Manual QA Awareness)

• Why Automation? When NOT to Automate
• Test Automation Pyramid
• Selenium WebDriver - Basic Concepts
• Framework Types: Page Object Model (POM), Data Driven, BDD
• Cucumber & Gherkin - Feature Files
• API Automation with RestAssured / Postman Newman
• CI/CD Integration - Jenkins Basics

3.5 Test Estimation & Metrics

• Test Estimation Techniques
  • Work Breakdown Structure (WBS)
  • Three-Point Estimation (Optimistic, Pessimistic, Most Likely)
  • Function Point Estimation
• Test Metrics: Defect Density, Pass/Fail Rate, Test Coverage, Defect Leakage
• Risk-Based Testing
• Test Coverage - Requirements Coverage, Code Coverage Awareness

3.6 Domain Knowledge - Stage 3

Healthcare / HealthTech

• HL7 & FHIR Standards
• EMR/EHR Systems - Patient Records, Clinical Workflow
• HIPAA Compliance Testing
• Medical Device Software Testing (IEC 62304)
• Pharmacy & Insurance Claim Processing

Telecom Domain

• OSS/BSS Systems - CRM, Billing, Network Management
• VoIP Testing, IVR Testing
• SIM Provisioning & Number Porting
• CDR (Call Detail Records) Validation

Insurance Domain

• Policy Management - Quote to Issue
• Claims Processing Workflow
• Reinsurance & Actuarial Systems
• Regulatory Compliance Testing

3.7 Mini Projects - Stage 3

3.8 Interview Questions - Stage 3

Full answers: manual testing interview questions for this stage.

1. How do you design a performance test strategy?
2. Explain OWASP Top 10. How do you test SQL Injection manually?
3. What is the difference between Load Testing and Stress Testing?
4. How do you test a mobile app on different devices without physical devices?
5. What is Test Coverage? What are different types?
6. How do you estimate test effort for a large project?
7. What is Risk-Based Testing? How do you prioritize risks?
8. Explain the Test Automation Pyramid. Where does Manual Testing fit?
9. You find a defect in production after the release. What is the process?
10. How do you test an application for GDPR compliance?
11. What is the difference between Alpha and Beta testing?
12. Describe a challenging bug you found and how you debugged it.

Stage 4: Lead QA / QA Architect (3–5 Years)

4.1 QA Strategy & Test Planning

• Test Strategy vs Test Plan - Difference & Creation
• Project-Level vs Organization-Level Test Strategy
• Risk Analysis & Risk Mitigation in Testing
• Test Environment Strategy
• Entry/Exit Criteria Design
• Test Data Management Strategy
• QA Sign-off & Go/No-Go Criteria

4.2 QA Process Improvement

• CMMI (Capability Maturity Model Integration) - Levels
• IEEE & ISO Standards for Software Testing
• TMMi (Testing Maturity Model Integration)
• Process Audits & Quality Reviews
• Root Cause Analysis (RCA) - Fishbone, 5 Whys
• Lessons Learned Documentation

4.3 Leading QA Teams

• Mentoring Junior QAs - Code Review, Test Case Review
• Test Case Review Checklists
• Conducting KT (Knowledge Transfer) Sessions
• Effort Estimation & Sprint Planning from QA side
• Stakeholder Communication - Status Reporting, Escalation
• Defect Triage Meetings - Process & Best Practices

4.4 Shift-Left & Shift-Right Testing

• Shift-Left: Early testing, BDD, TDD Collaboration
• Shift-Right: Production Monitoring, Canary Deployments, A/B Testing
• Testing in DevOps - CI/CD Pipelines
• Continuous Testing Strategy
• Production Bug Analysis & Impact Assessment

4.5 Advanced Domain Knowledge

FinTech Domain

• Payment Processing Systems - PCI DSS Compliance
• Digital Wallets & UPI Testing
• Blockchain & Smart Contract Testing Basics
• Trading Systems & Forex Testing
• Open Banking & PSD2 Compliance

Retail & Supply Chain

• ERP Testing (SAP, Oracle)
• Inventory Management & Warehouse Testing
• POS (Point of Sale) System Testing
• EDI (Electronic Data Interchange) Testing

Government & Public Sector

• Accessibility Testing (WCAG 2.1 AA compliance)
• Data Privacy & Compliance (GDPR, CCPA, IT Act)
• Digital Identity & e-KYC Testing

4.6 Tools Mastery - Stage 4

4.7 Mini Projects - Stage 4

4.8 Interview Questions - Stage 4 (Lead Level)

Full answers: manual testing interview questions for this stage.

1. How do you set up a QA process from scratch for a new project?
2. How do you measure and improve test team productivity?
3. What is your approach to testing microservices architecture?
4. How do you handle conflicts between developers and QA about severity/priority?
5. What QA metrics do you track and report to stakeholders?
6. How do you implement Shift-Left testing in your team?
7. How do you ensure test coverage in an Agile project with short sprints?
8. Describe a situation where you improved the QA process significantly.
9. How do you evaluate whether a product is ready for release?
10. What is your approach to test data management in a secure environment?
11. How do you handle QA in a CI/CD pipeline?
12. What is the role of QA in a DevOps culture?

Domain-Wise Testing Guide

Certifications and Career Tips

Recommended Certifications

Career Growth Path

Portfolio Building Tips

• Create a GitHub profile with all mini projects
• Write technical blogs on Testing topics (Medium, Hashnode, Dev.to)
• Contribute to open-source testing projects
• Build a personal website showcasing your QA projects and resume
• Get active on LinkedIn - share testing insights & case studies
• Join communities: Ministry of Testing, Software Testing Help, Reddit r/softwaretesting

Key Skills Summary by Year

Where to Go After This Roadmap

Many manual testers add automation around the 2–3 year mark. If that's your plan, the manual tester to automation guide and the 6-month SDET roadmap pick up where this one leaves off.