# Carlos A. Muñoz: interactive CV, free QA tools, and QA-lab URL Review > carlosandmunoz.com is the site of Carlos A. Muñoz Ardila, a senior QA architect and IT project manager with over 18 years of experience, based in Medellín, Colombia. It holds his interactive CV, a free QA regression lab, a free SDLC studio, and QA-lab URL Review, which analyzes one public https address, scores its SEO, AI-search visibility, analytics, security, accessibility, and performance, and proposes test cases written for 20 frameworks. Full text for answer engines, in one file: https://carlosandmunoz.com/llms-full.txt ## Carlos A. Muñoz - [Interactive CV](https://carlosandmunoz.com/): Senior IT Project Manager, QA Architect, and QA Leader. Available for contract, freelance, advisory, and mentoring, and to build a full QA path: strategy, automation, CI, and the team. Readable in English, Spanish, Portuguese, German, French, and Italian, with competency filters, a career timeline, print, and PDF, JPG, Word, JSON, and text downloads. - CV languages: [Spanish](https://carlosandmunoz.com/?lang=es), [Portuguese](https://carlosandmunoz.com/?lang=pt), [German](https://carlosandmunoz.com/?lang=de), [French](https://carlosandmunoz.com/?lang=fr), [Italian](https://carlosandmunoz.com/?lang=it) - [LinkedIn](https://www.linkedin.com/in/carlos-andres-m-2a60b8b/) - Contact: the form on the CV, or kaanmuar@gmail.com. ## Free QA tools - [CV regression lab](https://carlosandmunoz.com/qa-lab.html): runs one catalog against the CV in 20 frameworks (Playwright, Cypress, Robot, Selenium, WebdriverIO, CodeceptJS, Selenide, TestNG, Watir, Cucumber, Behave, Reqnroll, Jest, Vitest, Mocha, Appium, Maestro, k6, JMeter, Gatling), with smoke, functional, security, accessibility, mobile, and performance filters, a results dashboard, and a text report. In the browser, free. - [SDLC studio](https://carlosandmunoz.com/simulador.html): four agents walk one sprint. Ticket Steward rewrites the story on Jira, Azure DevOps, Monday, Trello, Linear, Asana, MS Project, or Backlog; Test Designer writes Gherkin and Xray cases; Automation Engineer generates Playwright, Cypress, and Robot scripts; Release Verifier checks the Definition of Done. In the browser, free, no account. - [Clip: QA Lab running](https://carlosandmunoz.com/media/qa-lab-running.html), [QA Lab tour](https://carlosandmunoz.com/media/qa-lab-tour.html), [SDLC Studio sprint](https://carlosandmunoz.com/media/sdlc-studio-running.html), [SDLC Studio tour](https://carlosandmunoz.com/media/sdlc-studio-tour.html) ## QA-lab URL Review QA-lab URL Review analyzes one public https address and proposes test cases. It does not run those cases, sign in to the site, submit a form, or generate load. It is not a certification. A review starts after you sign in on the device that runs it, with email (a 6-digit code or a link) or an account you already have: Google, Microsoft, GitHub, Yahoo, or X. The email comes from that sign-in. Signed-in runs are listed on the account page. Records are deleted automatically when their time is up: review records 12 months after the run, accounts 12 months after the last sign-in, sessions after 30 days, and logs of failed or stopped reviews after 90 days. Every day, newly finished public reviews are published as Live Reports on this site and posted as images and voiced clips on LinkedIn, Facebook, Instagram, X, Threads, Bluesky, Mastodon, TikTok, and YouTube, without the asker's name, email, or reason. The asker can tick “Don't publish this review”; sites flagged by Safe Browsing and test runs are never published. Carlos A. Muñoz, Bogotá, Colombia, is responsible for the service and its records. Contact: qa@carlosandmunoz.com. ## Pages - [Review](https://carlosandmunoz.com/qa-review.html) - [Review, Spanish headline](https://carlosandmunoz.com/qa-review-es.html) - [Review, Portuguese headline](https://carlosandmunoz.com/qa-review-pt.html) - [Review, German headline](https://carlosandmunoz.com/qa-review-de.html) - [Review, French headline](https://carlosandmunoz.com/qa-review-fr.html) - [Review, Italian headline](https://carlosandmunoz.com/qa-review-it.html) - [How it works, a guided tour](https://carlosandmunoz.com/qa-review-guide.html): who it helps, the six steps, how to read the six scores, and what a review never does - [Facts](https://carlosandmunoz.com/qa-review.html#service-facts) - [Sample report, this site's own review](https://carlosandmunoz.com/qa-review.html?sample=1) - [Live reports](https://carlosandmunoz.com/qa-review.html#live-reports): 255 real public sites analyzed by the review, with new requested reviews added daily, tagged by sector, scope (worldwide, national, regional, local), country, and test type, view and share only - [Privacy and disclaimers](https://carlosandmunoz.com/qa-review-legal.html): what is stored, for how long, who receives it, and how to ask for a copy or deletion - Languages: English, Spanish, Portuguese, German, French, Italian. ## Elsewhere - [YouTube](https://www.youtube.com/@qalaburlreview) - [X](https://x.com/qalaburlreview) - [LinkedIn](https://www.linkedin.com/company/qalab-url-review) - [TikTok](https://www.tiktok.com/@qalaburlreview) - [Facebook](https://www.facebook.com/qalaburlreview) - [DEV](https://dev.to/qalaburlreview) - [Reddit](https://www.reddit.com/user/qalaburlreview/) ## Films - [A tactical read (English)](https://www.youtube.com/watch?v=jW4T-qQK01E) - [The included first review (English)](https://www.youtube.com/watch?v=OKvR95YHAng) - [Una lectura táctica (Spanish)](https://www.youtube.com/watch?v=Cenj3l_0osA) - [Uma leitura tática (Portuguese)](https://www.youtube.com/watch?v=GwLZ1WuLSpU) - [Eine taktische Lesung (German)](https://www.youtube.com/watch?v=AMIO6n_6Ok8) - [La première lecture (French)](https://www.youtube.com/watch?v=JpyBMIeXTL0) - [La prima lettura (Italian)](https://www.youtube.com/watch?v=MiXooYDM-Uo) ## What a review names Frameworks (20): browser: Playwright, Cypress, Robot, Selenium, WebdriverIO, CodeceptJS, Selenide, TestNG, Watir. Behavior-driven: Cucumber, Behave, Reqnroll. JavaScript runners: Jest, Vitest, Mocha. Mobile: Appium, Maestro. Load and performance: JMeter, Gatling, k6. axe-core runs in the review's headless browser. Lighthouse runs on the start page through Google PageSpeed Insights (mobile score, plus real-user Core Web Vitals from the Chrome UX Report when the site has enough traffic). Named only when they apply, and never launched: BrowserStack, Applitools, Percy, Provar, Copado. Kinds of cases (21): Functional, Content, Links, Accessibility, Security, Privacy, SEO, GEO, Performance, Load, Mobile, Internationalization, Resilience, Compatibility, Media, Analytics, Commerce, Forms, Visual, Platform, API. Every report scores six areas from 0 to 100: SEO, GEO (whether AI search and answer engines can read and cite the site), analytics, security, accessibility, and performance. Each check is marked fails now, at risk, passes, or needs a person, with evidence, a fix, and an effort estimate. The report also shows a Google result preview, a share-card preview, an AI crawler matrix from robots.txt, a map of the pages analyzed, and a fix-first list. A headless Chromium visit from an EU address (Belgium) loads the start page and up to two linked pages. It records which tracking requests and cookies appear before a cookie choice and after Reject, runs axe-core against WCAG 2.2 AA, compares the HTML text with the rendered text, checks a 390 px phone width and a 768 px tablet width, measures lab paint and layout shift, and keeps desktop, tablet, and phone screenshots. Its only click is the banner's reject button. It also checks chat widgets and AI chatbots (consent, weight, and keyboard access), the accessibility statement, imprint, and privacy pages, outdated front-end libraries (bundled retire.js data), Google Safe Browsing through the Web Risk API, domain expiry and transfer lock through the registry's RDAP service, and MTA-STS, TLS-RPT, and BIMI for mail, and estimates the carbon of one visit. A site whose bot protection refuses the plain request is analyzed in headless Chrome. Google PageSpeed Insights and Google Web Risk receive the start address; the domain's registry receives the domain. The report can also list technologies, pages analyzed, public signals, and public write-ups. Secrets are not copied. A missing header is not proof of a break-in. Cases are written for each chosen framework. The case export carries a starting script per framework; the review never runs them. Journey cases come from the site's own visible navigation: the link text, a unique selector, the page it opens, and the heading the review found there. The scripts click; the review does not. A later review of the same host with the same email shows what was fixed, what is new, and how each area score moved. The script ZIP also holds a GitHub Actions workflow for the chosen frameworks and a fix kit: security headers for common hosts, a Report-Only content security policy, structured data, llms.txt, and security.txt drafts, and DNS records. Case exports: automation scripts (ZIP, one suite per framework), Excel, TestRail, Xray, Zephyr Scale, Jira, Azure Test Plans, MantisBT, JSON, plain text, PDF. ## Price The first selection is 19 USD at full price. The 2nd and 3rd selections are 10 percent off, the 4th and 5th 15 percent, then 20, 25, 30, and 35 percent for each following pair, and 40 percent from the 14th on. A return within 30 days takes another 10 percent off the first time, 15 percent the second, and 20 percent after that. A selection never falls under 9.50 USD. The included first completed review is 20 pages and 2 links deep. ## News The news strip uses the country of the connection and the language selected on the page. Headlines come from publisher feeds. The page does not invent a headline. ## Not for indexing Payment, the account page, and the operator desk are not public catalogs. The payment page and the account page (saved runs, behind sign-in) ask crawlers not to index them.