DontBreak

Connecting Your Site

DontBreak tests your site from the outside, like a real visitor — there's nothing to install on your server. "Connecting" your site just means giving a test a URL it can reach, and configuring access (like HTTP basic auth) if your environment is protected. This page covers URL requirements, authentication at the test and suite level, and how to handle staging versus production.

Test URL requirements

Every test starts at a Test URL, set when you create the test (it can't be edited afterwards, so pick the right environment up front):

  • Both HTTPS and HTTP URLs work. If you type a URL without a protocol, https:// is added automatically.
  • The URL must contain a valid domain with a TLD (e.g. example.com) — bare hostnames like localhost won't validate.
  • The site must be reachable from the public internet. DontBreak's cloud browsers can't reach sites on your local machine or inside a private network. For protected staging environments, use basic auth (below) or allowlist access.
  • If the test belongs to a test suite with a default URL, the test URL must be on the suite's domain — and you can leave it blank to inherit the suite's default URL.

HTTP basic auth

If your staging site sits behind HTTP basic authentication, store the credentials with the test and DontBreak will authenticate automatically on every run.

Per test

Open test settings

In the composer, open Test → Settings, or use the settings action on the test page. Go to the Authentication tab.

Enable Basic Authentication

Toggle Enable Basic Authentication, then enter the username and password. The tab shows an "Enabled" badge once configured.

Save

Click Save Changes. Runs on every browser and device will now authenticate with these credentials.

Per suite

For a whole environment, set credentials once on the test suite instead: open the suite's settings, go to Authentication, and enable basic auth there.

  • New tests created in the suite automatically inherit the suite's credentials.
  • For existing tests, check Apply to all existing tests in this suite when saving — this overwrites every test's credentials with the suite's. Leave it unchecked to only affect newly created tests.
  • When creating a test in a suite that has basic auth configured, the Create New Test dialog notes that the credentials will be inherited.

Staging vs. production

Two-suite setup for staging and production environmentsTwo-suite setup for staging and production environments
One suite per environment: a staging suite with basic auth that runs on every deploy, and a read-only production suite that runs on a schedule.

A clean setup is one test suite per environment:

  • A staging suite with your staging domain as the default URL and the staging basic auth credentials. Run these on every deploy via CI/CD.
  • A production suite with read-only smoke tests, run on a schedule as uptime-style monitoring.

Because a suite's default URL locks its tests to that domain, you can't accidentally point a staging test at production.

Be careful testing production

Tests perform real actions in a real browser. On production that means real form submissions, real emails to real addresses, and — if your test completes a checkout — real orders. Keep production tests read-only (navigation and assertions), or test destructive flows on staging. For signup and verification flows, use DontBreak's temp email inboxes instead of real addresses.

Cookies, banners, and sessions

  • Cookie banners — DontBreak auto-dismisses most cookie consent banners; the Auto-dismiss cookie banners option in test settings is on by default for new tests and handles the common consent managers. Fully custom banners may slip through — if one blocks your steps, dismiss it explicitly with a Click step or pre-set the consent cookie with Set Cookie.
  • Cookie-based setups — use the Set Cookie action to set a cookie before your steps run, e.g. a feature flag, a consent cookie, or a session token. See Interactions.
  • Login flows — for testing authenticated areas of your app (form-based login, not HTTP basic auth), see Testing login flows.

Next steps