Making security legible across 5000+ applications

Thomson Reuters' PS360 dashboard is the central hub for security monitoring across 5000+ applications, consolidating critical information for executives, project managers, and technical teams.

I was the key designer on this project. I ran the heuristic evaluation, took part in the interview and testing sessions with our researcher, and owned the dashboard design that came out of them.

• —Lack of personalization: executives couldn't track their OKRs, while developers couldn't prioritize security issues.
• —Unclear data visualization that lacked necessary context.
• —Poor OKR tracking capabilities for executive users.
• —Inefficient information hierarchy making navigation difficult.

We conducted a two-phase research study to thoroughly understand user needs.

Heuristic Evaluation

We ran an initial heuristic evaluation to collect all possible UX and accessibility issues.

Initial user interviews

We interviewed users across roles to map how each persona works with PS360 day to day.

Usability testing

We conducted 10 usability testing sessions focused on validating executive-specific and developer features.

Our research revealed distinct needs across user personas, but also important commonalities.

Executive leaders

• —Global view of security status
• —OKR tracking capabilities
• —Context for performance metrics

Developers and security teams

• —Detailed technical metrics
• —Clear SLA status indicators
• —Better organization of vulnerability data

Common needs across all personas

• —Better data context
• —Customizable views
• —Clear prioritization

These conversations revealed a common thread: users needed context, not just data.

Based on our research insights, we developed a solution guided by three core design principles.

Make data hierarchical

Instead of showing everything at once, we created a system that let users start broad and drill down as needed.

Provide context

We transformed raw numbers into actionable insights. For example, we clearly separated urgent issues from those still within acceptable timeframes rather than just showing vulnerability counts.

Personalize the experience

We designed flexible dashboards that could adapt to different roles while maintaining data consistency.

The redesign reorganized the dashboard around the decisions each role has to make. What it changed, in the interface itself:

For the people using it

• —Faster decision-making through clearer data presentation
• —Improved prioritization with enhanced SLA visualization
• —Personalized experience through customizable dashboards
• —Better understanding of security metrics with added context

For the organization

• —Enhanced security monitoring across 5000+ applications
• —More efficient resource allocation through clear prioritization
• —Improved compliance tracking with better SLA visibility
• —Reduced risk through earlier identification of security issues

The redesign gave two audiences with different questions, executives tracking OKRs and engineers triaging vulnerabilities, one dashboard that answers both from the same data. The design shipped to development; effects on remediation time were not measured on our side.