AI in Testing AI
The vocabulary a classic QA glossary doesn't have yet — agentic testing, LLM evaluation, hallucination testing, prompt injection.
A
Agentic testing uses autonomous AI agents that can plan, execute, and adapt a multi-step testing process with minimal human direction — exploring an application, deciding what to test next based on what they observe, and adjusting when something unexpected happens. It differs from scripted automation, which only ever does exactly what it was explicitly told to do.
AI adversarial testing deliberately crafts inputs designed to fool a model into making mistakes — a slightly perturbed image that causes misclassification, a carefully worded prompt that triggers unintended behavior — probing how robust a model is against inputs specifically engineered to break it, not just naturally occurring edge cases.
An AI agent evaluation harness is the testing infrastructure built specifically to assess an autonomous AI agent's performance across a suite of tasks — measuring success rate, efficiency, and safety of its actions — accounting for the fact that an agent's exact path to a goal can vary between runs.
AI bias testing evaluates whether a model's outputs systematically favor or disadvantage particular groups — based on race, gender, age, or other protected characteristics — often unintentionally inherited from patterns in its training data, checking for fairness the model wasn't explicitly designed to consider.
AI code review uses a large language model to automatically analyze code changes — flagging potential bugs, security issues, style violations, and suggesting improvements — as a first-pass complement to human code review, not a full replacement for it.
AI in software testing refers broadly to the use of machine learning and generative AI to assist or automate testing activities — generating test cases, healing broken locators, evaluating outputs a simple assertion can't judge, and exploring applications autonomously — a fast-growing set of techniques reshaping how testing gets done.
AI model regression testing verifies that a new version of a model — retrained, fine-tuned, or swapped for a different provider — doesn't perform worse than the previous version on the tasks that matter, using a consistent golden dataset and evaluation criteria across versions to make the comparison meaningful.
An AI test agent is a software agent powered by a large language model that can autonomously plan and execute testing tasks — navigating an application, deciding what to check, and adapting based on what it observes — rather than following a fixed, pre-written script.
An AI test oracle uses a machine learning model — often another LLM — to judge whether a test's actual output is correct, especially for outputs too subjective or too varied for a simple equality check, like evaluating whether a generated summary is accurate or a chatbot's response is appropriately helpful.
An autonomous testing agent operates with minimal human direction — setting sub-goals, executing multi-step plans, and adapting its approach based on results — the most independent end of the AI test agent spectrum, distinguished from simpler tools that still need a human to define each specific step.
C
Chatbot testing verifies that a conversational AI system responds appropriately across a range of user inputs — correctly understanding intent, staying on topic, handling ambiguous or off-topic questions gracefully, and maintaining coherent context across a multi-turn conversation.
Context window testing verifies how a model behaves as the amount of information in its context (conversation history, retrieved documents, system instructions) approaches or exceeds its maximum context length — checking for degraded accuracy, forgotten instructions, or dropped information as context grows large.
Conversational AI testing evaluates multi-turn dialogue systems broadly — voice assistants, chatbots, AI copilots — covering not just individual response quality but the coherence, appropriateness, and reliability of an entire conversation across many exchanges.
Copilot-assisted test automation uses AI coding assistants — GitHub Copilot and similar tools — to help write, complete, and refactor automated test code, speeding up test authoring while still relying on a human to review, run, and validate the generated tests actually do what's intended.
G
Generative AI test case generation uses a large language model to automatically draft test cases from requirements, user stories, or existing code — producing a first-pass set of scenarios, including edge cases a person might not immediately think of, for a human to review and refine.
A golden dataset is a curated, trusted set of input-output pairs used as the fixed reference point for evaluating an AI model's performance — the AI-testing equivalent of a regression suite, run consistently across model or prompt versions to track quality over time.
Ground truth testing compares a model's output against a verified, known-correct answer — established by human experts or an authoritative source — to measure factual accuracy, distinguishing genuinely correct output from merely plausible-sounding output an AI test oracle alone might not catch.
Guardrail testing verifies that an AI system's safety mechanisms — content filters, topic restrictions, refusal behaviors — actually work as intended, correctly blocking harmful, off-topic, or out-of-scope requests without also incorrectly blocking legitimate ones.
H
L
LLM evaluation is the process of measuring how well a large language model's outputs meet quality, accuracy, and safety expectations — using benchmark datasets, human review, or another model acting as a judge (LLM-as-a-judge). Unlike testing deterministic code, there's rarely one exact "correct" output to assert against, so evaluation measures degrees of correctness instead.
LLM-as-a-judge uses a capable language model to evaluate the quality of another model's output against defined criteria — accuracy, helpfulness, tone — providing a scalable alternative to human review for judging subjective or open-ended AI-generated responses.
M
MCP testing verifies implementations of the Model Context Protocol — the standard that lets AI models discover and call external tools and data sources — checking that a server correctly exposes its tools, and that a client correctly discovers, calls, and handles responses from them.
Model drift testing detects when a deployed model's performance degrades over time — because real-world input has shifted away from the data it was trained on, or the underlying task itself has changed — catching gradual quality decay that a one-time pre-deployment evaluation wouldn't reveal.
N
P
Prompt engineering for QA is the practice of designing and refining prompts used to instruct AI systems for testing purposes — generating test cases, evaluating outputs, or driving an AI test agent — where the quality of the prompt directly determines the quality and reliability of the AI's output.
Prompt injection testing probes whether user input can override an AI system's original instructions — tricking it into ignoring its guardrails, revealing its system prompt, or performing an action it was explicitly told not to. It's the AI-era equivalent of SQL injection: untrusted input manipulating a system that wasn't built to distinguish instructions from data.
Prompt-based test generation uses natural-language prompts to instruct an AI model to produce test cases, test scripts, or test data — letting a tester describe what they want tested in plain language rather than manually writing each test case or script by hand.
R
S
Semantic similarity testing measures whether two pieces of text mean roughly the same thing, even if worded differently, using embedding-based comparison rather than exact string matching — essential for evaluating generative AI output, where a correct answer can be phrased in many valid ways.
Synthetic test data generation uses AI or algorithmic techniques to create realistic but artificial test data — mimicking the shape, variety, and statistical distribution of real data without containing any actual real user information, sidestepping both privacy risk and the manual effort of hand-crafting large datasets.