I designed and built an internal application security platform that unified ticket management, code review, dependency analysis, and security investigations into a single workspace.
Role
Designer & Developer
Year
2026
Project type
Internal Tool
Concept interface for a calmer, more actionable application security workflow.
THE PROBLEM
Make the security program legible.
Security teams often have more data than usable context. This interface brings ownership, risk concentration, and remediation movement into one decision-ready view.
THE APPROACH
Prioritize action over dashboard noise.
The product reduces competing signals and makes the views that support a real decision easier to scan across engineering, security, and leadership.
THE RESULT
Turn findings into shared accountability.
Coverage, severity, trend direction, and ownership are connected so teams can distinguish activity from measurable remediation progress.
Selected evidence
A closer look at the work.
A personalized starting point built around saved queries, current work, recent changes, and direct access to natural-language investigation.The merge-review workspace keeps code changes, supporting evidence, and the final recommendation in one continuous review flow.Exploitability is evaluated through inspectable evidence including package verification, import discovery, runtime reachability, environment context, and mitigating controls.Suspicious traffic can be filtered, inspected, contextualized, and collected while the underlying event evidence remains visible.Static-analysis findings are reviewed against the surrounding source code and documented evidence rather than accepted solely on scanner output.Every workspace follows a shared product model: begin with a security question, gather relevant evidence, and document a defensible decision.