Ranking / Vendor profile

QA Mentor

Overall score: 32.4 / 100, rank 3 of 12
Headquarters: New York, US [e-0072]
Headcount range: 250 to 999 [e-0072][e-0079]
QA-only company: Yes, QA and testing only [e-0073]
Evidence verified on: 2026-11-11

Not ideal for

Situations where the published evidence does not support this vendor. Each line links to its source.

Buyers who need QA for endpoint, SIEM or network security products: the only evidenced security-product engagement is for an identity assurance client. [e-0071]
Buyers who need evidenced performance, compatibility or detection-regression testing for a security product: the evidenced work covers test automation only. [e-0071]
Buyers who need a named client reference: the only evidenced security-product engagement is an anonymous Clutch review. [e-0071]

Security-product QA evidence

Case studies and reviews that describe QA work on a product whose primary purpose is security. Penetration testing for other clients is excluded under the methodology.

e-0071
reviewClutch review, identity and access management
clutch.co · 2024-01-08 · C indirect · verified 2026-11-11
Identity and access management; tests: automation; duration: 48 months; client not named

Score breakdown

Eight dimensions, each scored 0 to 10 by the frozen rules and multiplied by its weight. Bars are drawn from data/scores.json.

1 Security-product evidence depth weight 202.0 / 10
One verified security-product QA item. Of these, zero name the client, one states team size or duration and zero state a metric. [e-0071]
2 Product-class coverage weight 122.0 / 10
One product class evidenced: Identity and access management. [e-0071]
3 Test-type depth weight 152.0 / 10
One test type evidenced on security products: automation. [e-0071]
4 Engagement longevity weight 108.0 / 10
Longest evidenced engagement with a security vendor: 48 months. [e-0071]
5 Third-party review signal weight 123.0 / 10
One verified platform review of security-product QA work within 60 months; newest dated 2024-01-08. [e-0071]
6 Vendor's own security posture weight 100.0 / 10
ISO 27001 is claimed without a certificate number or registry link, which scores zero under the rule. [e-0073]
7 Team scale and specialisation weight 96.0 / 10
Headcount 250 to 999, 3 points; QA-only company, 3 points; no dedicated security-product QA page, 0 points. [e-0072][e-0079][e-0073]
8 Transparency weight 125.0 / 10
Two of four items present: public rate, team locations; missing: named leadership with profiles, published QA process page. [e-0072]

Product classes covered

Verified security-product QA items per class. A class counts only when the source names the product type, for example EDR¹ for endpoint or SIEM² for detection platforms.

Product class	Evidence items
Endpoint protection and EDR	0, no evidence
SIEM, XDR and detection platforms	0, no evidence
Identity and access management	1
Network security	0, no evidence
Email and web security	0, no evidence
Data protection and backup	0, no evidence
Vulnerability and exposure management	0, no evidence
SOAR and incident response	0, no evidence
Cryptography and key management	0, no evidence
Mobile and application security products	0, no evidence

Test types evidenced on security products: automation. [e-0071]

1 EDR: Software that watches laptops, servers and phones for suspicious behavior, records what it sees, and alerts administrators so they can investigate and respond. Source
2 SIEM: A system that collects log data from many sources into one place so security teams can search it, correlate events and spot attacks. Source

Vendor's own security posture

Controls a security vendor usually asks of a QA partner that will handle builds and test data.

ISO 27001: Claimed, certificate reference not published [e-0073]
SOC 2: Not published
Test-data handling: Not published
Security page or officer: Not published

Transparency

The four items scored in dimension 8 of the methodology.

Public rate: < $25 / hr [e-0072]
Leadership: Not published with profiles
QA process page: Not published
Team locations: New York, US; Toulouse, France; Cherkasy, Ukraine [e-0072]

Compare and browse

The two vendors nearest by overall score, and the facet pages that list this vendor.

DeviQA vs QA Mentor DeviQA overall 44.8
QA Mentor vs QASource QASource overall 43.1
Identity and access management facet page
Test automation facet page
North America facet page
Europe facet page
RFP questions to send this vendor
How to shortlist a QA vendor for a security product
Full ranking of 12 vendors

Logged corrections: changelog. Raw evidence: data download.

Scores are computed from publicly available evidence as of the verifiedOn date on each item. They describe published evidence, not service quality. Re-verify with the vendor before contracting.