Why does it not need the code?
This kind of check is called black-box testing: the agent opens the page, clicks, types and reads the result like any visitor. It does not care which language the site was written in or where it is hosted. So you can test work you never wrote a line of, and judge it by what it really does instead of what you were told.
How to accept a project from an agency or freelancer
- 1Go back to what was agreed
Open the contract or requirements document and rewrite each item as a sentence that can be verified.
- 2Ask for a test version and accounts
A test address and an account for each role: customer, staff, manager.
- 3Run a check for each item
Each item passes or fails, and a failure comes with a screenshot and steps.
- 4Send the report as it is
A documented report ends the argument: the bug is visible and repeatable.
- 5Re-test before final acceptance
Do not sign off until the core items pass on the re-test.
Limits you should know
- It tests websites and web apps, not native apps on mobile devices.
- It does not find security holes or measure behavior under heavy load.
- It cannot see code quality from the inside; that needs a developer's review.
- Pages behind a login need a test account that you provide.