Setting Up a QA Department from Scratch: A Founder's Playbook
The Reactive Trap
The typical startup QA story goes like this: engineers test their own code, the founder does a manual click-through before shipping, and this works fine — until a release corrupts customer data or an enterprise deal falls through during a security review. Only then does "we should probably have QA" become a priority, and by then it's a scramble instead of a plan.
Building QA proactively, in the right sequence, is dramatically cheaper than building it reactively under pressure. Here is that sequence.
Step 1: Establish the Culture Before the Team Exists
Quality cannot be a department that gets bolted onto an engineering org that doesn't already value it. Before hiring anyone:
- Require code review on every pull request, no exceptions for "urgent" fixes.
- Set an expectation that developers write unit tests for new logic — this is a developer responsibility, not something QA backfills later.
- Establish a lightweight incident review process: when something breaks in production, write a one-page summary of what happened and why it wasn't caught, without blame.
If this culture isn't in place, hiring a QA team will just create friction — testers reporting bugs that engineering treats as "someone else's problem."
Step 2: Hire a QA Lead or SDET, Not a Junior Tester
This is the single most common mistake. The instinct is to hire a cheap junior manual tester first. The better move is to hire one experienced QA Lead or SDET (Software Development Engineer in Test) who can:
- Design the overall test strategy (what gets automated, what stays manual, what tooling to use).
- Set up the first CI-integrated test suite personally, rather than delegating an undefined task to a junior hire.
- Establish standards (bug report templates, severity definitions, test case structure) that scale as the team grows.
A strong first QA hire pays for themselves by preventing months of "we'll fix the process later" debt. A junior first hire, without senior guidance, often just produces a pile of untriaged bug tickets.
Step 3: Choose Your Core Tooling Stack
Resist the urge to evaluate a dozen tools. A minimal, proven stack for an early-stage team:
| Function | Recommended Starting Tool | Why | |---|---|---| | Issue tracking | Jira or Linear | Whatever engineering already uses — don't fragment workflows | | Test case management | TestRail, or a well-organized Notion/Confluence page for very early stage | Full test management tools are overkill under ~5 engineers | | E2E automation | Playwright | Fast setup, multi-browser, strong CI integration (see our framework comparison) | | API testing | Postman + Newman | Low barrier to entry, integrates cleanly into CI/CD | | CI/CD | GitHub Actions (if already on GitHub) | Avoid adding a new platform just for testing |
The theme: use tools that integrate with what engineering already runs. A separate QA toolchain that lives outside the engineering workflow gets ignored within a month.
Step 4: Bring QA Into Planning, Not Just Testing
The highest-leverage change a young QA function can make isn't writing more tests — it's showing up earlier. Have your QA lead join sprint planning and ask "what could go wrong here?" before a single line of code is written. This single habit — reviewing acceptance criteria for testability before development starts — catches an entire category of expensive requirements bugs that no amount of post-hoc testing would find.
Step 5: Define What "Done" Means
Before scaling the team further, get engineering leadership to agree on an explicit Definition of Done that includes QA sign-off criteria:
- Acceptance criteria met and verified
- No open Critical or High severity bugs
- Automated regression suite passing
- Manual exploratory pass completed for user-facing changes
Without this written down, QA involvement stays optional and gets skipped under deadline pressure — exactly when you need it most.
When to Scale Beyond One Person
Add a second QA hire when any of these signals appear: release frequency exceeds what one person can manually verify, the automated suite has grown beyond what one person can maintain, or a new product surface (mobile, a second platform) needs dedicated coverage. Scale the team against these signals, not against a headcount plan set six months in advance.