Hira Ahmed
Case Study · professionalClient: ToolPotion.ai·Role: Quality Assurance Lead·Practice Area: B2B SaaS QA, API Testing

ToolPotion: 28K+ AI Directory Data & Listing QA

QA governance for a 28,000+ listing AI directory: 1,300+ defects across 10 QA rounds, with phishing and malware listings flagged. Read the case study.

1,300+
Defects (1,398 logged entries)
10
QA rounds
170+
Critical defects (172)
300+
Fixes verified (316 closed)
190+
Dead or fake tools identified
3
Malicious listings flagged
System Architecture & Execution Flow
ToolPotion QA: 1,300+ defects across 10 rounds, defect categories and severity1,398 logged entries across 10 QA rounds for a 28K+ AI tools directory. Severity: Critical 172, Major 1,003, Minor 223. 316 fixes verified and closed after retesting.Top Defect Categories (Tagged across 1,398 entries)Wrong category / miscategorized544Ranking / relevancy failures457Data integrity errors214Duplicate listings122Fake or dead tools71Broken listing links22Defects by SeverityCritical172Major1,003Minor223Security & Abuse Flags Isolated• 1 Phishing-flagged listing detected & removed• 1 Malware-flagged listing intercepted• 1 Clone listing redirecting to an external gambling site190+ dead or fake tools identified across multi-tool records1,300+ defects (1,398 logged entries) · 10 QA rounds · 170+ critical (172) · 300+ fixes verified (316)
Ten QA rounds across a 28K+ AI tool directory. 316 fixes verified and closed. Security testing flagged a phishing listing, a malware listing, and a clone listing redirecting to a gambling site.

Problem

ToolPotion is a comprehensive AI tools directory indexing over 28,000 listings across categories, pricing models, and functional tags. At this catalog scale, data integrity drift, incorrect AI-generated taxonomies, broken hyperlinks, and malicious third-party submissions threaten directory authority, SEO rankings, and user safety.

The platform required rigorous multi-round QA to audit directory taxonomies, verify listing integrity, and intercept security threats.

Context

Quality Assurance Lead governing data accuracy, search rankings, link health, and submission safety across 10 structured QA rounds on a 28,000+ listing production directory.

My Role

Quality Assurance Lead: established classification standards, conducted manual and automated directory sweeps, flagged abuse and security risks, and tracked defect remediation and retest closures.

Architecture & Coverage Scope

Testing covered 10 QA rounds spanning directory search, category taxonomies, ranking algorithms, metadata integrity, outbound link health, and third-party developer submissions:

  • •Categorization & Taxonomies: AI domain mapping, sub-category routing, and multi-tag consistency
  • •Search & Ranking: Relevancy scoring, keyword match accuracy, and featured listing precedence
  • •Listing Data Integrity: Developer URLs, pricing tiers, logo assets, feature summaries, and duplicate suppression
  • •Safety & Malicious Submissions: Phishing detection, malware scanners, and redirection hygiene

Reliability & Key Findings

Over 10 QA rounds, testing logged 1,300+ defects (1,398 total logged entries across all rounds). Defect severity breakdown recorded 172 critical failures, 1,003 major issues, and 223 minor items. Systematic retesting verified and closed 316 fixes.

Top defect categories included:

  • •Wrong category / miscategorization: 544 entries where AI or submitters assigned tools to incorrect functional categories.
  • •Ranking and relevancy failures: 457 entries with inaccurate search ranking, keyword drift, or suppressed relevancy scores.
  • •Data integrity errors: 214 entries with broken metadata, truncated pricing, or mismatched platform fields.
  • •Duplicate listings: 122 entries containing duplicated tool records across different submission batches.
  • •Dead or fake tools: 71 logged entries identifying 190+ dead, abandoned, or counterfeit tools.
  • •Broken listing links: 22 entries with 404 dead links or expired target domains.

Critical security findings uncovered during sweeps included:

  • •Phishing-flagged listing: Identified and removed a counterfeit listing designed to steal user credentials.
  • •Malware-flagged listing: Intercepted and quarantined a submitted download link pointing to malicious payloads.
  • •Gambling redirect clone: Flagged and purged a clone listing configured with a hidden redirect to an external gambling website.

Results & Impact

  • •1,300+ defects documented across 10 rigorous QA rounds (1,398 total entries)
  • •316 verified and closed fixes through regression sweeps
  • •Purged 190+ dead or fraudulent tools and blocked active phishing, malware, and gambling redirects
  • •Restored search relevancy and categorization accuracy across 28,000+ directory records
Author & System Architect

Hira Ahmed

AI Engineer & Systems QA Lead specializing in autonomous LLM pipelines, formal verification with Z3 SMT solvers, and mission-critical SaaS reliability.

Technologies & Tools Used

Data integrity auditsURL verificationSecurity threat flaggingExploratory testingRegression sweeps