Whitepaper · SLOs

The complete guide to SLOs for performance: turn every load test into a verdict

How to define, validate, and operate Service Level Objectives for your load testing practice, with the metrics that matter, industry benchmarks, and error budgets that govern releases.

See Gatling in action

Build, run, and interpret your first load test. A practical session: by the end, you'll know exactly what Enterprise gives you out of the box.

Loading next session...

30 minutes

Live + Q&A

The complete guide to SLOs

Most load tests produce data, not decisions

Teams run a test, get a p95 of 340 ms, and then debate whether that's good. The test did its job, but nobody defined what passing looked like.

A Service Level Objective (SLO) closes that gap. It's a performance contract: a target your system must meet, evaluated continuously, with a clear verdict on every run. And the cost of leaving it undefined is no longer abstract.

$300k+

Cost of a single hour of downtime for more than 90% of mid-size and large enterprises

ITIC, 2024
41%

Of enterprises put the cost of one hour of downtime between $1 million and $5 million

ITIC, 2024

This guide covers

Define

Why load tests without SLOs leave value on the table, and the anatomy of an SLO: metric, threshold, compliance.

Calibrate

Which metrics to track and which to ignore, plus industry benchmarks to put your targets in context.

Enact

How to put SLOs to work: use error budgets to govern releases, and turn every load test into a decision, not a debate.

Who it's for: engineering managers accountable for performance standards, platform and SRE teams standardizing targets across services, and development teams who want an unambiguous answer at the end of every test.

01

A load test without an SLO is just data

More than half of organizations still don't use SLOs at all. The direction of travel is clear, though, and the question is whether you get there before your next incident does.

54%

Of organizations still use no SLOs today, as SLOs move from early adopter to standard practice

O'Reilly / Google survey, 2025
95%

Of SLO users say SLOs help them make better business decisions

O'Reilly / Google survey, 2025

The cost of working without them is subtle, but real

Unfalsifiable results

Without a threshold, no run can fail, which means no run can meaningfully pass either.

Inconsistent judgment

Whether a run was "good" depends on who's looking and what they remember from last time.

Invisible regressions

Performance degrades gradually. Without a fixed line, each small regression looks acceptable next to the previous one.

Unproductive escalations

When an incident hits production, "did we test for this?" has no defensible answer.

02

The anatomy of an SLO

In Gatling Enterprise Edition, every SLO comes down to three parameters.

Metric

What you're measuring

A response time percentile (p50, p95, p99, up to p99.9999) or the error ratio across all scenarios.

Threshold

The target value

Milliseconds for response time, a percentage for error ratio.

Compliance

How long you held it

The percentage of seconds during the run where the condition held.

Compliance is what separates an SLO from a plain assertion. A pass/fail tells you whether the run ever crossed the line. A compliance score tells you how long you stayed on the right side of it. If your p99 held under 400 ms for 94% of the run, you know that number, and you know there's a 6% to look at.

Results show up in the run summary as color-coded gauges:

99%+

Green

The target held 99% of the time or more. The system held the line.

90–99%

Orange

Between 90% and 99%. Close enough to be worth a look.

<90%

Red

Under 90%. The SLO was breached.

In Gatling Enterprise Edition

SLOs are configured entirely in the platform, so engineering managers and platform teams can define and adjust thresholds without depending on the developer who wrote the test.

03

Choosing your metrics

Three metrics cover the vast majority of performance SLO needs.

1

p95 response time: your primary threshold

It captures the experience of your slowest 5% of requests: representative of real degradation without being dominated by outliers.

p50 hides tail behavior entirely. Half your users could be having a bad experience and the median wouldn't move.

2

p99 response time: your safety net

A service can pass p95 while a predictable 1% of sessions time out. On revenue-critical paths, that 1% matters.

One nuance: hold p99 to 95% compliance rather than 99%. Tail latency is naturally noisier, and 99% produces false failures on healthy runs.

3

Error ratio: your first signal of systemic failure

The most overlooked of the three. Almost every team tracks availability, fewer track latency percentiles, and almost none set an error ratio target.

Yet it catches the "available but failing" state that availability monitoring misses.

Common mistakes to avoid
  • Averages instead of percentiles: a 100 ms average can hide 1% of requests taking several seconds.
  • 100% targets: they're expensive, rarely match what users perceive, and leave no room for safe change.
  • p99.9+ on application services: right for carrier-grade infrastructure, noise for everyone else.
Measure what users actually feel

Google's Gmail team raised measured availability from 99.0% to over 99.9% without changing the service, by measuring at the client instead of the server. The server-side numbers had looked fine all along.

Where you measure matters as much as what you measure.

04

Setting thresholds for your service

Industry benchmarks are context, not prescription. Your SLO should reflect three things about your specific service.

1

Service type sets the base

Authentication needs to respond in about 150 ms: it's a gate, and users have no patience for slow logins. A background pipeline can take 2 seconds, because what matters is time to completion, not acknowledgement.

Expectations vary by an order of magnitude across service types, so a single standard gives thresholds that are either dangerously loose or impossibly tight.

2

Volume calibrates the consequence

A 5% p95 breach at 100 requests per minute affects 5 users. At 10,000 requests per minute, it affects 500, every minute.

High-volume services warrant tighter thresholds; low-traffic internal tools can afford looser ones.

3

Stakes determine the margin

If you have contractual SLAs, your internal SLO needs a safety buffer below the external commitment. Operate exactly at the SLA line and you will breach it.

If users tolerate some latency, give your team headroom instead.

Not sure where to start?

Chat with Aim, our AI assistant, about your SLOs. Tell it your industry, service type, traffic, and stakes, and it suggests p95, p99, and error ratio targets with the reasoning behind each.

Chat with Aim
05

Industry benchmarks

Typical targets by industry, drawn from regulatory guidance, published standards, and industry studies. Use them as a starting point for your own thresholds.

IndustryAvailabilityp95Error rate
Fintech and payments99.999%<200 ms<0.005%
E-commerce and retail99.95%<300 ms<0.1%
SaaS and enterprise99.9%<500 ms<0.1%
Media and streaming99.95%<500 ms<0.2%
Healthcare99.99%<300 ms<0.01%
90%

Of businesses now require at least 99.99% availability: just 52.6 minutes of downtime a year

ITIC, 2024
44%

Target five nines, which allows only 5.26 minutes of downtime a year

ITIC, 2024
4 nines

Is no longer aspirational. It's the baseline expectation for serious production systems

06

Operating SLOs day to day

Use error budgets to govern releases: an error budget isn't an abstraction, it's a spending account.

Setting targets is one thing; using them to run an engineering organization is another. Every SLO creates an error budget: the unreliability you can absorb before reliability work takes priority. A 99.95% target on 10 million monthly requests allows 5,000 bad events, and every one has a price.

$14,056

Average cost of unplanned downtime per minute

EMA Research, 2024
$23,750

Per minute for large enterprises specifically

EMA Research, 2024
5,000

Bad events allowed per month at 99.95% on 10 million requests

Budget stateAction
HealthyNormal releases
50% consumedIncrease monitoring, reduce risky deploys
80% consumedRequire approval for critical-path changes
ExhaustedFreeze non-critical releases
Separate your failures from the provider's

Track a customer-facing SLO alongside an internal one. It shows where failures originate, and stops "the provider was down" from masking your own gaps.

Test your SLOs, don't just monitor them

Monitoring tells you what happened. Load testing tells you what will happen under pressure. An SLO that has never been validated against peak traffic is a hypothesis, not a commitment.

07

From definition to verdict

The complete SLO loop turns performance from a debate into a measurement.

1 · Define

Choose p95, p99, and error ratio targets suited to your service. Not sure where to start? Ask Aim, our AI assistant, for a defensible first number.

2 · Configure

Set them in Gatling Enterprise Edition without code. Stack as many SLOs per test as you need.

3 · Run

Every load test evaluates every SLO continuously, second by second.

4 · Read

Compliance gauges give an instant verdict: green held the line, orange needs a look, red breached.

5 · Act

Burn rate informs release decisions; failed compliance points to exactly where to investigate.

6 · Refine

Adjust thresholds as your system and your standards evolve.

From debate to decision

Define what passing looks like before the next test runs

Teams that treat load test results as data to interpret will keep debating whether 340 ms is good. Teams that define SLOs get a verdict on every run, catch regressions while they're still small, and can show exactly how long their systems held the line.

Start with three metrics, set thresholds that fit your service, validate them under peak load, and let error budgets decide when to ship.

Every load test should end with an answer. SLOs give you one.

Ready to set your first SLO?

Keep the guide, or see it in action

Take the full guide to your next planning session, or see SLOs and compliance scoring working in a live session.

Download

Get the full guide

The anatomy of an SLO, the three metrics that matter, industry benchmarks, and error budget rules.

PDF · free, no form Download the PDF
Live session

See Gatling Enterprise Edition live

A guided walkthrough with a Gatling engineer, with time for your questions.

Join the next live session