Session-based exploratory testing per the Bachs' SBTM: authoring charters (Explore X with Y to discover Z), running time-boxed sessions (60-90 min), logging session sheets with TBS metrics, and closing with the PROOF session debrief (Past, Results, Outlook, Obstacles, Feelings). Bundles the classic exploration heuristics as references: Whittaker's seven test tours (Feature, Money, Landmark, Intellectual, Bad-data, Configuration, Garbage collector's), Kelly's FCC CUTS VIDS recon tours, Bach's SFDPOT what-to-vary catalog, Bolton's HICCUPPS-F oracle heuristic, and Bach's CRUSSPIC STMPL quality criteria - plus a ready-to-fill charter-card template and a session-sheet review checklist. Use when planning, chartering, running, debriefing, or reviewing an exploratory testing session, or when picking a test tour, heuristic, or oracle mid-session. For scripted manual test cases, use manual-test-script-author instead.
86
91%
Does it follow best practices?
Impact
86%
1.01xAverage score across 10 eval scenarios
Passed
No findings from the security scan
Deep reference for exploratory-testing SKILL.md. FCC CUTS VIDS is Michael
Kelly's touring heuristic, published on his blog on 20 September 2005. It
names eleven tours, each a short reconnaissance pass over an application
with one question in mind. Kelly introduced it as a companion to his
test-reporting heuristic, writing "I think I will need something similar for
application touring. Here is my attempt: FCC CUTS VIDS"
(michaeldkelly.com).
The tours answer what does this product even consist of - they are aimed at a tester who does not yet know the application. That is the axis that separates them from Whittaker's seven tours (tours.md), which come from Exploratory Software Testing (2009) and frame a themed bug hunt on a product the tester already understands. Kelly's tours precede that work by four years and are used earlier in the lifecycle: recon first, mission after.
Do not reach for this once the product is well understood; at that point a themed mission from tours.md is the better tool.
Each description is Kelly's own wording.
| Group | Tour | Kelly's description |
|---|---|---|
| FCC | F - Feature | "Move through the application and get familiar with all the controls and features you come across." |
| C - Complexity | "Find the five most complex things about the application." | |
| C - Claims | "Find all the information in the product that tells you what the product does." | |
| CUTS | C - Configuration | "Attempt to find all the ways you can change settings in the product in a way that the application retains those settings." |
| U - User | "Imagine five users for the product and the information they would want from the product or the major features they would be interested in." | |
| T - Testability | "Find all the features you can use as testability features and/or identify tools you have available that you can use to help in your testing." | |
| S - Scenario | "Imagine five realistic scenarios for how the users identified in the user tour would use this product." | |
| VIDS | V - Variability | "Look for things you can change in the application - and then you try to change them." |
| I - Interoperability | "What does this application interact with?" | |
| D - Data | "Identify the major data elements of the application." | |
| S - Structure | "Find everything you can about what comprises the physical product (code, interfaces, hardware, files, etc...)." |
The User and Scenario tours are ordered: Scenario builds on the personas the User tour produced, so run User first.
Each tour below quotes Kelly's own one-line description verbatim. The prompts and worked example under each are elaboration for this catalog, not Kelly's text.
Running example throughout: a self-serve expense-reporting web app the tester has never opened before.
"Move through the application and get familiar with all the controls and features you come across."
Prompts
Worked example. Clicking every nav item surfaces a "Recurring expenses" screen that appears in no onboarding material. Nobody on the team mentions it. That absence is the finding.
"Find the five most complex things about the application."
Prompts
Worked example. The five: multi-currency conversion, approval-chain routing, receipt OCR, the mileage calculator, and per-country tax rules. Complexity concentrates risk, so this list is usually the first draft of a charter backlog.
"Find all the information in the product that tells you what the product does."
Prompts
Worked example. The pricing page says receipts are processed "instantly"; the in-app tooltip says "within a few minutes". Both are claims, and they conflict. That conflict is testable, and it is also material for hiccupps-f.md, where Claims is one of the oracles.
"Attempt to find all the ways you can change settings in the product in a way that the application retains those settings."
Prompts
Worked example. The default currency is settable per user, but resets to the org default after a session expires. Persistence is the part of the tour that matters: a setting that does not stick is a different product than the one the settings screen advertises.
"Imagine five users for the product and the information they would want from the product or the major features they would be interested in."
Prompts
Worked example. A field engineer filing from a phone, a manager approving in bulk, a finance analyst exporting for reconciliation, an auditor reading historical records, and an admin configuring policy. The analyst and the auditor want opposite things from data retention.
Run this tour before the Scenario tour, which depends on its output.
"Find all the features you can use as testability features and/or identify tools you have available that you can use to help in your testing."
Prompts
Worked example. An admin "impersonate user" action removes the need to hold five sets of credentials, and a CSV import can seed a hundred expenses in one step. Both cut session setup time, which is the constraint the SBTM TBS metrics care about (session-sheet-and-metrics.md).
"Imagine five realistic scenarios for how the users identified in the user tour would use this product."
Prompts
Worked example. The field engineer photographs a receipt in a basement with no signal, files it later, and the manager approves it from an email link while travelling. That scenario crosses offline capture, sync, deep linking, and approval - four areas one tour surfaced together.
"Look for things you can change in the application - and then you try to change them."
Prompts
Worked example. An expense category can be renamed after reports referencing it are submitted. Whether historical reports show the old or new name is a real question the tour raises but does not answer.
Note the overlap with SFDPOT (sfdpot.md): variability is about finding what can change, SFDPOT is about systematically varying it once found.
"What does this application interact with?"
Prompts
Worked example. Single sign-on, a corporate card feed, an accounting export, and an email notification service. The card feed is the one nobody on the team controls, which makes it the first candidate for contract-level attention.
"Identify the major data elements of the application."
Prompts
Worked example. Expense, Report, Approval, Policy, User. An Approval references a User who may later be deactivated, which raises the question of what an audit view shows for a departed employee.
"Find everything you can about what comprises the physical product (code, interfaces, hardware, files, etc...)."
Prompts
Worked example. A React front end, a REST API, a background OCR worker, object storage for receipt images, and a nightly export job. The worker and the export job have no UI, so nothing in the Feature tour would have found them.
A tour produces questions; a charter answers one. When a tour surfaces something worth pursuing, charter it with a stated mission and a time box (charter-template.md). The Complexity and Claims tours tend to generate the most charter-worthy material, because both surface places where the product's stated behaviour and its actual behaviour can diverge.
| Anti-pattern | Why it fails | Do instead |
|---|---|---|
| Running all eleven tours on every product | The heuristic is a menu, not a checklist; eleven shallow passes crowd out one useful one | Pick the tours that target what is actually unknown |
| Treating a tour as a test pass | A tour builds familiarity; it is not coverage and finds bugs only incidentally | Charter a session for the risks the tour surfaced |
| Confusing these with Whittaker's tours | Different author, different set, different lifecycle stage | Kelly's eleven for recon, tours.md for themed missions |
| Attributing the mnemonic to James Bach | It is Kelly's, from his own blog | Cite michaeldkelly.com |
| Touring without notes | The familiarity evaporates and the next tester starts over | Record findings per tour so gaps become charters |