Sunday, February 8, 2026

Salax: Automating Secure Messaging Web Client with Playwright




In this article we will discuss on how to automate SalaX secure messaging web client with Playwright. 

Today’s market offers many secure messaging applications, but the SalaX Secure Messaging stands out as a solution built for organisations that require trust, control, and enterprise-grade security.

The SalaX Secure Messaging client delivers end-to-end encrypted communication while giving organisations full ownership over their messaging infrastructure. Designed for real-world enterprise and government use, it combines strong security with practical usability across platforms.

SalaX is available on Windows, macOS, Android, iOS, web, and desktop, enabling secure communication without compromising consistency or user experience—regardless of the device.


Let’s discuss what SalaX Secure Messaging is and where it originated.

What Is SalaX Secure Messaging?


SalaX Secure Messaging is SSH Communications Security’s enterprise-grade secure messaging solution, designed to give organisations complete control over their instant communicationsSalaX is built for security-first organisations that require confidentiality, sovereignty, and interoperability, without compromising usability.



About SSH:

SSH Communications Security is a Finland-based cybersecurity company with decades of expertise in secure communications.

  • It was founded in Finland and headquarters are in Helsinki.

  • The company originated from the creation of the SSH (Secure Shell) protocol by Finnish researcher Tatu Ylönen.

Website:https://www.ssh.com/


Technology Behind SalaX Secure Messaging:-

SalaX Secure Messaging is developed by SSH using:

  • Element communications platform

  • Matrix open standard, a decentralised and open protocol for secure and interoperable communications

This architecture enables strong end-to-end encryption, federation capabilities, and long-term scalability while avoiding vendor lock-in.

Because it is based on open standards, SalaX supports secure collaboration across organisations while still allowing full control over data, infrastructure, and policies.


Key Strengths of SalaX Secure Messaging:-

  • End-to-end encrypted communications

  • Full organisational control over users, data, and infrastructure

  • Decentralised architecture based on open standards

  • Interoperable and future-proof messaging ecosystem

  • Cross-platform support (Windows, macOS, iOS, Android, desktop, and web)

  • Backed by SSH’s cryptographic expertise and security heritage


Why SalaX Matters

In a world where messaging platforms are often centralized, opaque, and outside organisational control, SalaX Secure Messaging offers a different approach:

"Secure, sovereign, and standards-based communication — built for organisations that take security seriously."

This makes SalaX especially suitable for governments, defense organisations, regulated industries, and enterprises handling sensitive information.

Links:

https://securemessaging.docs.ssh.com/

https://www.ssh.com/products/secure-messaging

Free-trialhttps://info.ssh.com/salax-messaging-free-trial


I have used the SalaX web messaging client https://chat.ssh.net/ for building the test automation frameworkLets dive into our technical topic with Playwright.


Why Playwright for Secure Messaging?

Secure messaging applications are complex by nature. They involve:

  • Multi-step authentication flows

  • Encrypted sessions and device verification

  • Real-time message delivery

  • Multiple users interacting simultaneously

  • Frequent UI state changes and dialogs


The Testing Challenge

Testing a secure messaging client is very different from testing a traditional web app. Some of the real-world challenges include:

  • Multi-step login with security keys

  • Post-login security prompts and warnings

  • Dynamic room lists and conversations

  • Real-time message synchronization between users

  • Ensuring complete session isolation between users

To address this, I designed a Playwright automation framework that focuses on real user behaviour rather than simple UI interactions.

I used Playwright’s accessibility-first locators (getByRole, getByLabel, getByText), which tend to be more stable and less prone to flakiness than brittle CSS/XPath selectors.


Login Flow

Login to the App : https://chat.ssh.net/













User is on the home page types message in the message box and sends to other user




Realistic Secure Messaging Scenarios

A key test case implemented in the framework validates bi-directional messaging:

  1. Two users log in simultaneously, verify their Security Key/Access codes each time.

  2. Both open the same direct message (DM)

  3. Messages are sent B and  A B

  4. (Usersa0008993 and User = tg0008993)

  5. Each user verifies message delivery in real time

User B --> A




User A --> B



For example, say if User B is Offline and User A is logged in and sends message to User B, then we see these uncrypted messages for User B, as user B is offline. meaning both users should be online federating with the same home server to view each of their messages otherwise the messages will be showed up as Unencrypted messages


User A Sends message to User B when User B is Offline.



When User B is back to online, he/she will see the messages as Unencrypted messages.


This mirrors how secure messaging is actually used in production — not just how the UI looks.


GitHub Repo:

https://github.com/JayKishoreDuvvuri/playwright-salax-secure-messaging.git

GitHub Actions (CI):

https://github.com/JayKishoreDuvvuri/playwright-salax-secure-messaging/actions


Limitations of Test Automation

While Playwright is well-suited for automating secure messaging workflows, some features are not practical to automate using browser-based testing tools.

  • Video and audio calls rely on real-time media streams, hardware access, and browser permissions.

  • Screen sharing and device interactions depend on OS-level controls outside Playwright’s scope.

  • Security-sensitive flows such as device trust and encryption verification cannot be fully validated via UI automation alone.

Test automation is ideal for messaging and authentication, but media features and encryption need manual testing.



Final Thoughts

Building a Playwright automation framework for the secure messaging web client has been a great example of how modern test tooling can support high-security applications.

If you’re working with:

  • Secure messaging platforms

  • Real-time web applications

  • Multi-user workflows

Playwright is absolutely worth considering.

Secure software deserves secure testing — and automation plays a big role in making that happen.

Happy Automation testing Guys :)!

Salax: Automating Secure Messaging Web Client with Playwright

In this article we will discuss on how to automate SalaX   secure messaging web client with Playwright.  Today’s market offers many secure ...