B2B SaaS HRM CYBERSECURITY
B2B SaaS HRM CYBERSECURITY
Kymatio
Kymatio
Designing a more actionable cybersecurity experience
Designing a more actionable cybersecurity experience
COMPANY
COMPANY
Kymatio
Kymatio
YEAR/S
YEAR/S
2026
2026
ROLE
ROLE
Product Strategy, Lead UX/UI, Design System, Data & Information Design
Product Strategy, Lead UX/UI, Design System, Data & Information Design
01 / ABOUT THE PROJECT
01 / ABOUT THE PROJECT
A cybersecurity platform built around human risk
A cybersecurity platform built around human risk
Kymatio is a B2B cybersecurity platform focused on human risk management, employee training and attack simulations. I joined as Lead Product Designer, taking ownership of research, product strategy, UX/UI and the Design System across a complex, data-heavy product.
Kymatio is a B2B cybersecurity platform focused on human risk management, employee training and attack simulations. I joined as Lead Product Designer, taking ownership of research, product strategy, UX/UI and the Design System across a complex, data-heavy product.
Role & scope
Role & scope
Product Strategy, Lead UX/UI, UX Research, Design System, Data & Information Design
Product Strategy, Lead UX/UI, UX Research, Design System, Data & Information Design
PLATFORM
PLATFORM
B2B SaaS · Desktop-first · Cybersecurity
B2B SaaS · Desktop-first · Cybersecurity
02 / PRODUCT CHALLENGE
02 / PRODUCT CHALLENGE
Making complexity understandable and actionable
Making complexity understandable and actionable
When I joined, the platform had grown without a consolidated design strategy. There was no Design System, screens had been created independently and large amounts of sensitive data were difficult to interpret and act on.
When I joined, the platform had grown without a consolidated design strategy. There was no Design System, screens had been created independently and large amounts of sensitive data were difficult to interpret and act on.
01
COMPLEX DATA
COMPLEX DATA
COMPLEX DATA
Operators needed to understand company risk, awareness, simulations, breaches and employee performance without being overwhelmed by information.
Operators needed to understand company risk, awareness, simulations, breaches and employee performance without being overwhelmed by information.
02
MULTIPLE USERS
MULTIPLE USERS
Employees, operators and administrators interacted with the same ecosystem but had radically different goals, permissions and levels of complexity.
Employees, operators and administrators interacted with the same ecosystem but had radically different goals, permissions and levels of complexity.
03
03
FRAGMENTED EXPERIENCE
FRAGMENTED EXPERIENCE
The product lacked a consistent visual and interaction system, making new features harder to scale coherently.
The product lacked a consistent visual and interaction system, making new features harder to scale coherently.
03
FRAGMENTED EXPERIENCE
The product lacked a consistent visual and interaction system, making new features harder to scale coherently.
03 / BUILDING THE FOUNDATION
03 / BUILDING THE FOUNDATION
Research first, system second
Research first, system second
Before redesigning anything, I carried out a full product audit and worked closely with Product, Sales and Kymatio’s cyberpsychology experts to understand users, business needs and the logic behind the data.
From there, I began building the Design System in parallel with the product, creating reusable patterns from real needs rather than designing an abstract library upfront.
Before redesigning anything, I carried out a full product audit and worked closely with Product, Sales and Kymatio’s cyberpsychology experts to understand users, business needs and the logic behind the data.
From there, I began building the Design System in parallel with the product, creating reusable patterns from real needs rather than designing an abstract library upfront.
01
SEMANTIC HIERARCHY
SEMANTIC HIERARCHY
Clear visual priority for risk, status and action.
Clear visual priority for risk, status and action.
02
REUSABLE DATA PATTERNS
REUSABLE DATA PATTERNS
KPI cards, charts, badges and states designed to scale.
KPI cards, charts, badges and states designed to scale.
03
COMPLEX INPUTS
COMPLEX INPUTS
Selectors, filters, controls and workflows made consistent.
Selectors, filters, controls and workflows made consistent.
04
ROLE-BASED EXPERIENCES
ROLE-BASED EXPERIENCES
Patterns adapted to Employee, Operator and Administrator needs.
Patterns adapted to Employee, Operator and Administrator needs.
05
PRODUCT-SPECIFIC COMPONENTS
PRODUCT-SPECIFIC COMPONENTS
Action Plan, campaign steps, simulation cards and training modules.
Action Plan, campaign steps, simulation cards and training modules.
04 / TURNING DATA INTO DECISIONS
04 / TURNING DATA INTO DECISIONS
From reporting to action
From reporting to action
The Operator Dashboard was redesigned to help cybersecurity teams understand the state of their organization at a glance. Critical KPIs are prioritized first, followed by trends and operational detail, allowing users to move from overview to diagnosis without losing context.
The biggest shift was the Action Plan: instead of leaving users to interpret metrics on their own, Kymatio now connects data with prioritized recommendations and concrete next steps.
The Operator Dashboard was redesigned to help cybersecurity teams understand the state of their organization at a glance. Critical KPIs are prioritized first, followed by trends and operational detail, allowing users to move from overview to diagnosis without losing context.
The biggest shift was the Action Plan: instead of leaving users to interpret metrics on their own, Kymatio now connects data with prioritized recommendations and concrete next steps.
METRIC
METRIC
INSIGHT
INSIGHT
RECOMMENDATION
RECOMMENDATION
ACTION
ACTION
05 / DESIGNING ACTIONABLE WORKFLOWS
05 / DESIGNING ACTIONABLE WORKFLOWS
From insight to execution
From insight to execution
Kymatio is not only a monitoring tool. Operators need to act on risk, configure interventions and measure their outcome. I designed complex workflows that translate insights into action.
Kymatio is not only a monitoring tool. Operators need to act on risk, configure interventions and measure their outcome. I designed complex workflows that translate insights into action.
Campaigns
Campaigns
Operators can create phishing, smishing, vishing and other attack simulations by selecting the technology, template, audience, schedule and reinforcement strategy.
Operators can create phishing, smishing, vishing and other attack simulations by selecting the technology, template, audience, schedule and reinforcement strategy.
Campaign outcomes track behaviour across critical events, such as opening, clicking, submitting credentials or reporting an attack.
Campaign outcomes track behaviour across critical events, such as opening, clicking, submitting credentials or reporting an attack.
SCORM
SCORM
SCORM introduced a strategic new capability: clients can upload their own training content, target specific audiences, schedule it and monitor results alongside Kymatio’s native sessions.
SCORM introduced a strategic new capability: clients can upload their own training content, target specific audiences, schedule it and monitor results alongside Kymatio’s native sessions.
The functionality responded to a recurring customer need and became an important differentiator during client conversion.
The functionality responded to a recurring customer need and became an important differentiator during client conversion.
Reporting evolved through stakeholder requirements, requiring additional KPI visibility while preserving hierarchy and system consistency.
06 / EMPLOYEE EXPERIENCE
06 / EMPLOYEE EXPERIENCE
Refocusing the experience around learning
Refocusing the experience around learning
The employee experience required a different hierarchy. Instead of analyzing organizational data, users needed immediate access to training, personal progress and actions they could take to improve their cybersecurity behaviour.
Previous versions gave prominence to low-value elements and introduced unnecessary steps before accessing training. The redesigned dashboard moved sessions and activities into the primary hotspot, integrating native Kymatio content and SCORM activities within the same experience.
The employee experience required a different hierarchy. Instead of analyzing organizational data, users needed immediate access to training, personal progress and actions they could take to improve their cybersecurity behaviour.
Previous versions gave prominence to low-value elements and introduced unnecessary steps before accessing training. The redesigned dashboard moved sessions and activities into the primary hotspot, integrating native Kymatio content and SCORM activities within the same experience.
ACTION PLAN
ACTION PLAN
The primary action for each persona occupies the most prominent area.
The primary action for each persona occupies the most prominent area.
SESSIONS & ACTIVITIES
SESSIONS & ACTIVITIES
Native training sessions use scenario-based learning, immediate feedback and reinforcement to help employees understand not only what is correct, but why.
Native training sessions use scenario-based learning, immediate feedback and reinforcement to help employees understand not only what is correct, but why.
07 / SCALING & EVOLVING THE PRODUCT
07 / SCALING & EVOLVING THE PRODUCT
A system designed to keep growing
A system designed to keep growing
Kymatio continues to evolve through incremental releases. I work closely with Product and Development to assess feasibility, review implementation and maintain design quality from concept through pre-production and QA.
Redesigned areas are connected to Analytics, and the next validation phase combines interviews, representative user archetypes, A/B testing and behavioural data to guide future iterations.
Kymatio continues to evolve through incremental releases. I work closely with Product and Development to assess feasibility, review implementation and maintain design quality from concept through pre-production and QA.
Redesigned areas are connected to Analytics, and the next validation phase combines interviews, representative user archetypes, A/B testing and behavioural data to guide future iterations.
01
SYSTEM THINKING
Designing patterns that can support future features without fragmenting the experience.
Designing patterns that can support future features without fragmenting the experience.
02
DATA WITH PURPOSE
Information should help users understand what is happening and what to do next.
Information should help users understand what is happening and what to do next.
03
03
ITERATION OVER FINALITY
The product is continuously measured, tested and refined rather than treated as finished.
The product is continuously measured, tested and refined rather than treated as finished.
03
ITERATION OVER FINALITY
The product is continuously measured, tested and refined rather than treated as finished.
