DevSafe

Security above all

Research
SaaS
UX
UI
App
Mobile

DevSafe is a comprehensive security tool designed for DevSecOps teams, focusing on analyzing potential security risks on developers' machines. It meticulously scans and monitors system configurations, installed software, and network activities, providing real-time alerts when potential risks are detected. The goal of the project was to redesign the DevSafe mobile dashboard to enhance its usability, accessibility, and overall user experience.

Non-commercial project

Problems & Solutions

Pain points

  • Daily risk score: Users struggle to quickly understand their daily security posture at a glance.
  • Critical alerts: Prioritizing log messages is challenging because some have varying degrees of urgency.
  • Non-Critical alerts: Difficulty in prioritizing non-critical logs due to their large volume
  • Transparency: Users required clarity on why risk scores change, necessitating a deep dive into the logs.

Solutions

  • Risk score visualization: Clear daily risk score to quickly gauge security status.
  • Critical alerts section: Immediate access to critical alerts and detailed logs.
  • Non-Critical alerts: Prioritize non-critical yet important alerts.
  • Score Explanation: Clear explanations for score changes.

Competitor research

In my research I uncovered a range of mobile options for DevOps professionals. While dedicated mobile apps like Azure DevOps exist, many development tools provide mobile-friendly web interfaces.

These allow core functionalities like viewing code, managing issues, and monitoring builds on a mobile device.

AZ DevOps

Microsof SaaS that provides DevOps practices and tools

GitLab Mobile

Managing Gitlab projects from the mobile

GitHub Mobile

Mobile web interface for developers

User research

Sarah Lee | 35-years-old

Sarah, a Senior DevOps Engineer with over a decade of experience, has been using DevSafe for two years to secure her company's development environment. Her main objectives are to maintain system security, identify risks quickly, and enhance team efficiency. She reviews DevSafe's score daily and monitors logs for unusual activities, but needs improved log prioritization and clearer explanations of score changes to streamline her workflow and reduce unnecessary investigations.

Pain points

  • Enhanced log prioritization to distinguish between critical and non-critical but significant alerts
  • Clear explanations for changes in scores to streamline her workflow and reduce the need for detailed log investigations
  • Advanced features that support her expertise and allow for more efficient monitoring and risk mitigation.

Goals

Risk score visualization
Critical alerts section
Prioritized alerts
Score explanation

Frameworks

Dev_wire1

Overall score

Upon logging in, users are presented with an overall score, ensuring they have immediate access to key system health information. This allows users to quickly gauge the status of the system.
A clear indication of whether the score has risen or declined since the last visit helps users track changes in system performance over time. This enables them to stay informed about any trends or developments that may impact their operations.

Log overview

By implementing a prioritization system for logs based on severity or relevance, I ensure accessibility while allowing users to focus on critical information. This involves categorizing logs into different priority levels: critical, high, medium, and informational.
By implementing collapsible/expandable sections, I ensured accessibility while avoiding visual overload.
Dev_Wire2
Dev_wire3

Task management

Users can create new tasks either from within the log overview or by opening a new one from the to-do list section, providing them with flexibility and ease of task management.
A clear description of the assignment, the assigned person, and further information about the log are provided.
Log info Devs

Task management

Users can create new tasks either from within the log overview or by opening a new one from the to-do list section, providing them with flexibility and ease of task management.
A clear description of the assignment, the assigned person, and further information about the log are provided.
03/03
Taskinfo devs

Log overview

By implementing a prioritization system for logs based on severity or relevance, I ensure accessibility while allowing users to focus on critical information. This involves categorizing logs into different priority levels: critical, high, medium, and informational.
By implementing collapsible/expandable sections, I ensured accessibility while avoiding visual overload.
02/03
overallscore_mockUX

Overall score

Upon logging in, users are presented with an overall score, ensuring they have immediate access to key system health information. This allows users to quickly gauge the status of the system.
A clear indication of whether the score has risen or declined since the last visit helps users track changes in system performance over time. This enables them to stay informed about any trends or developments that may impact their operations.
01/03

UI Design

Mockup_dev
Dev1
Dev2

Intuitive risk management

DefSafe’s user-friendly UI uses clear visual cues, like color-coded severity indicators, for instant risk assessment and prioritization. Expandable sections offer in-depth information, enabling deeper insight into each risk as needed.
log info_devs

Log overview

The DevSafe log overview UI presents critical system information with color-coded severity indicators, concise summaries, and customizable filtering options, enabling users to quickly prioritize logs. A log info pop-up offers detailed views of individual entries - displaying timestamp, source, and severity - while the to-do pop-up streamlines task assignments with an intuitive interface for efficient team management.
Dev4
Dev3

Mobile access & efficiency

DefSafe's mobile app keeps you connected to critical risk management tools anytime, anywhere, with an optimized, user-friendly interface for on-the-go access. Focused on simplicity and functionality, it streamlines risk monitoring and mitigation for swift, effective decision-making.

What's next?

In the future, DefSafe's impact can be evaluated through key metrics like task success rates, completion times, user engagement, and most importantly, risk mitigation rates. By closely monitoring these KPIs, DefSafe can ensure it continuously empowers users and optimizes the risk management process for maximum effectiveness.