Environment access

If a test cannot load the environment, match the symptom to a fix. Each row is a different blocker.

Symptom	Solution	Guide
Logs or a WAF need to recognize QA.tech traffic	Identify the bot by its User-Agent suffix	QA.tech Bot
A firewall, CDN, or CAPTCHA blocks the test by IP	Allowlist the outbound IPs	IP Access
Vercel Firewall returns a block before the app loads	Bypass remaining rules when the User-Agent contains `QATechBot`	Vercel Firewall
A Vercel preview is behind deployment protection or trusted IPs	Send the Protection Bypass for Automation secret	Vercel Preview
Cloudflare returns 403, 1020, or a challenge page, or a Turnstile widget stops a form	Allow the bot at the edge, or change how the app loads Turnstile	Cloudflare WAF and Turnstile
The app is on a private network or behind a jump host	Route the browser through an SSH tunnel	SSH Tunnel
The app is only on your machine	Expose local ports with `qatech tunnel`	`qatech tunnel`

QA.tech Bot

User-Agent suffix QATechBot/1.0 for logs and WAF rules.

Allowlist the current outbound IPs from Settings → Network.

Custom rule: User-Agent contains QATechBot, then Bypass.

Protection Bypass for Automation on a protected preview URL.

Edge WAF and in-app Turnstile are different fixes.

SOCKS proxy through your jump host for private apps.

qatech tunnel exposes a dev server to the agent.