Ask a QA leader whether their team uses AI in testing and the answer
is almost certainly yes. Ask whether it runs in production at
enterprise scale, and the answer changes.
That gap is the real story of 2026. Depending on which survey you
read, somewhere between 61% and 93% of software teams touch AI
somewhere in their testing workflow. The share that has moved it
past pilots into production-grade operation sits closer to 12–15%.
BrowserStack's 2026 State of AI in Testing report found automated
test case generation to be the single most common use, which tells
you where most teams have started and where most have stopped.
Nothing about that is a failure. It is what adoption looks like when
a technology arrives faster than the operating model around it. But
it does mean the useful question is no longer whether AI belongs in
testing. It is which parts of the testing lifecycle it genuinely
improves, and which parts it quietly makes worse.
Traditional test automation has a maintenance problem
Most enterprise automation suites do not fail because the tests were
badly written. They fail because the application changed and the
tests did not.
A regression suite built around a stable Oracle EBS instance ages
well. The same suite pointed at Fusion Cloud, with quarterly updates
arriving whether you want them or not, ages badly. Selectors move.
Page structures change. A field that was optional last quarter is
mandatory this quarter, and forty tests fail for a reason that has
nothing to do with a defect.
Teams then spend their sprint triaging false failures. After enough
of those sprints, people stop trusting the suite. A red build that
is usually wrong is worse than no build at all, because it trains
everyone to ignore it.
The Sembi Software Quality Pulse Report put roughly 45% of QA teams
in the understaffed category. Those are the same teams being asked
to absorb testing volume from AI-generated application code. The
maintenance burden was already the constraint. It is now the
constraint under load.
Where AI actually fits
AI is useful in testing where the work is high-volume, pattern-heavy
and low-judgement. It is unreliable where the work requires knowing
what the business actually needs.
The places it earns its keep:
- Test creation from existing artefacts. Turning a documented
business process, a recorded session or an existing manual
script into an automated flow.
- Element identification and self-healing. Recognising that a
control has moved or been renamed rather than failing outright.
- Failure triage. Grouping a hundred failures into the four
underlying causes that produced them.
- Coverage gap analysis. Comparing what the suite exercises
against what the application contains.
- Test data generation. Producing valid combinations for
scenarios that would otherwise need manual setup.
The places it does not:
- Deciding which business processes carry the most risk.
- Interpreting a requirement that was written ambiguously.
- Judging whether a behaviour is a defect or an intended change.
- Signing off a release.
None of that is a limitation that better models will remove soon,
because those tasks depend on organisational context that does not
exist in the application under test.
AI-assisted test creation versus traditional scripting
Traditional scripting gives you precision and a maintenance bill. You
control exactly what the test does, and you own every line of it
forever.
AI-assisted creation inverts that. You get coverage quickly, and you give
up some control over how the test is constructed. For a regression suite
covering a stable business process, that trade is usually worth making.
For a complex integration test where the assertion logic matters more
than the navigation, it usually is not.
The mistake we see most often is treating this as a binary choice. The
teams getting real value run both: AI-generated coverage across the
broad, repetitive surface of the application, and hand-built tests for
the twenty or thirty flows where a defect would actually hurt.
There is also a quieter risk in generation. A suite that quadruples in
size without a traceability model behind it is not four times better
covered. It is four times more expensive to maintain, and nobody can
tell
you which requirement any given test is protecting. Volume is not
coverage.
Self-healing, and what it can and cannot fix
Self-healing gets oversold, so it is worth being precise about what it
does.
When a test fails because an element identifier changed, self-healing can
find the element by other attributes and continue. That is a genuine
reduction in false failures, and on a large Oracle or SAP suite it
removes a meaningful amount of weekly triage.
What it cannot do is tell you whether the change was intentional. If a
developer removed a field because it should no longer exist,
self-healing will route around the gap and report a pass. The test now
validates a workflow that no longer matches the requirement, and it does
so silently.
Self-healing needs to be visible. Every heal should be logged, reviewed
and either accepted into the test or escalated as a change. A
self-healing suite that nobody audits drifts away from the application
over months, and you find out at the worst possible time.
Regression testing for Oracle, SAP and cloud applications
ERP regression is where enterprise testing gets genuinely hard, for
reasons that have little to do with tooling.
A single order-to-cash test touches order management, inventory,
pricing, tax, receivables and whatever integration layer connects them.
It runs against configured data that varies by legal entity. It depends
on approval hierarchies that change when someone leaves the company.
When it fails, the cause could sit in any of six modules or in the data
setup, and working out which takes functional knowledge, not automation
skill.
AI helps with the mechanics: building the flows, keeping them running
through UI changes, clustering failures. It does not replace the person
who knows that this particular tax configuration behaves differently in
the Canadian entity.
For quarterly Fusion updates and SAP transports, the practical target is
a regression pack that runs unattended overnight and produces a triaged
result by morning. That is achievable. What is not achievable is a suite
that also tells you which of the failures matter to the business.
Where human testers still matter
The role is shifting rather than shrinking, and the shift is toward
judgement.
Exploratory testing has not been automated and probably will not be,
because it depends on curiosity about how a system might be misused.
Risk assessment stays human: deciding that a change to revenue
recognition needs three weeks of validation while a change to a report
layout needs an hour. Test design remains a modelling problem, and
models are only as good as the person's understanding of the domain.
There is also a review responsibility that did not exist before. Someone
has to check that generated tests assert the right things. An AI-written
test that navigates correctly and asserts nothing meaningful will pass
forever and protect nothing.
The risks of leaning too hard on AI-generated tests
Four failure modes worth planning against:
- Assertion drift. Generated tests tend to assert what the application
currently does rather than what it should do. If the application is
wrong at generation time, the test encodes the bug as expected
behaviour.
- False confidence from volume. A dashboard showing 8,000 automated
tests reads well in a steering committee. It says nothing about
whether the twelve critical business processes are covered.
- Opaque maintenance. When generated tests break, the team that did
not write them has to reverse-engineer the intent before fixing
them.
This is slower than fixing a test you designed.
- Governance gaps. In regulated environments, "the AI generated it" is
not an acceptable answer to an auditor asking why a control was
tested a particular way. The Perfecto State of DevOps AI in Testing
research found governance maturity and cost attribution to be
persistent weak points, and that matches what we see in
delivery.
What an enterprise AI testing strategy looks like
Start with risk, not with tooling. Rank the business processes by what a
production failure would cost. That ranking decides where automation
effort goes and where AI generation is safe to use unsupervised.
Then set the boundaries explicitly:
- Define what AI is allowed to author. Broad
regression coverage, yes. Compliance-critical assertions, reviewed
by a human first.
- Make self-healing auditable. Log every heal,
review
them weekly, accept or escalate.
- Keep traceability. Every test maps to a
requirement or a business process. Tests that map to nothing get
deleted, not archived.
- Measure the right things. Escaped defects,
regression cycle time and false-failure rate tell you whether the
suite works. Test count does not.
- Keep functional expertise close. For Oracle and
SAP, the automation engineer and the functional consultant need to
be the same conversation, not two tickets.
- Review the suite quarterly. Coverage decays.
Something has to force the cleanup.
The organisations getting value out of AI in testing are
not the ones with the most advanced tooling. They are the ones that
decided, deliberately, which decisions a machine gets to make.
Sources Referenced
- BrowserStack, State of AI in Testing Report 2026 — AI adoption
across testing workflows; test case generation as the leading use
case.
- Sembi / Ranorex Software Quality Pulse Report — QA
understaffing; AI-generated code outpacing automation coverage.
- Perfecto by Perforce, State of DevOps Report: AI in Testing Edition
2026 — governance maturity and cost attribution gaps.
- Industry survey range on pilot-versus-production AI testing
adoption.