VERACODE

Unification Reimagined

How I turned a fragmented security platform into a cohesive product experience — and transformed design from a service team into a strategic function along the way.

outcomes

Nearly 3× platform NPS

80% faster time to first value

25% reduction in support volume

14 products unified across one platform

Development

From Fourteen Products to One Platform

What I walked into

Veracode had grown by acquisition, not by design. When I joined in April 2022, the platform was fourteen products sharing a login and almost nothing else: SAST, SCA, DAST, an acquired DAST called CrashTest, Security Labs, Longbow (later VRM), Phylum (later Package Firewall), Container Scanning, Repo Scanning, IDE plugins, a CLI, Analytics, a Policy engine, and the AI product I'd go on to ship, Veracode Fix.

Five button styles. Multiple fonts. Disjointed navigation. An onboarding flow that dropped users off a cliff the moment they activated. Platform NPS sat well below the line where promoters outweigh detractors. And an enterprise customer base (the kind that stands up cross-functional committees to evaluate tools) trying to stitch together a coherent workflow across products that didn't know each other existed.

Design had gone more than a year without leadership. The team was operating as a service desk for engineering tickets. Engineering and architecture ran the roadmap. Design caught what they threw.

Role: Director of Product Design  
Duration: Apr 2022 to Present  
Team: 14 (design + content strategy)  
Customers: Enterprise

Before: inherited from the first version of the platform

After: the first surface rebuilt on the new system.

The bet I made

Most directors would have started with a style guide. I started with a platform audit and a question no one was asking:

What does it feel like to use Veracode end to end, as a customer, for a week?

The answer was: it feels like fifteen vendors.

So I made three bets. I ran them in parallel, not in sequence, because we didn't have the luxury of doing it cleanly.

1. Build the system before the surface.  A unified design language (tokens, components, governance) had to exist before any product team tried to "look unified." Otherwise we'd ship fourteen slightly different versions of the same redesign.

2. Treat the org as the product.  Design couldn't become strategic with the same people, the same rituals, and the same reporting lines. The team had to be rebuilt around the work, not around the legacy product boundaries.

3. Embed research, don't deliver it.  Enterprise customers weren't a survey population. They were partners I needed permanent access to, through ASCs, SEs, CSMs, and GTM, not a one-off interview cycle.

I presented all three as a single strategy to the executive team, anchored by 10 Veracode Design Principles that became the standard framework every product team designed against. That document is still how design decisions get argued at the company.


Phase 1: A design system built from scratch

I built Veracode's first unified design system in Figma, from zero. The lite version shipped first (buttons, typography, input fields, navigation) so we could stop the bleeding on visual drift while the deeper system was being built behind it.

From there I partnered with a dedicated UI Enablement engineering team to translate the Figma system into production React components in Storybook. That partnership is what made the system real: designers weren't handing off specs into a void, and engineers weren't rebuilding components per product.

The system grew into a comprehensive, production-grade component library covering every surface from core scan workflows to developer tooling, eLearning, analytics, and admin. It now underpins every surface across the platform, including three acquisition integrations that plugged in without re-platforming: CrashTest becoming DAST Essentials, Longbow becoming VRM, and Phylum becoming Package Firewall. That's the test of a design system: can it absorb an acquisition in weeks instead of quarters.

Old Inconsistent Legacy Components

New Design System Navigation

Phase 2: Rebuilding the team around the work

Design had been structured to match Veracode's product silos. I restructured it to match the platform we were trying to become.

I scaled and led a 14-person design and content organization: a Product Design Manager leading six designers (including a dedicated Lead Designer owning the design system), and a Content Manager leading six content developers and documentation writers covering docs.veracode.com, in-product UI, onboarding, and the Security Labs eLearning platform.

The more important shift was cultural. I established:

  • A critique practice with standing sessions and shared vocabulary, so quality became a team habit and not a director's bottleneck.
  • Design governance with clear ownership and escalation paths, so the system stayed coherent as more teams contributed to it.
  • Design thinking education for PMs and engineers across the org, delivered through workshops, seminars, and working sessions on how to partner with design, not just consume it.

The output wasn't headcount. It was that product and engineering leaders started bringing design into roadmap conversations months before feature work started, instead of at ticket time.

Phase 3: One platform, one experience

With the system and the team in place, the actual unification work began. The surfaces I audited on day one got rebuilt in priority order: login and onboarding, unified navigation, information architecture, then the core product surfaces themselves.

Key moves:

  • Unified navigation and IA across all fourteen products so customers could move between SAST, SCA, DAST, and the rest without changing mental models.
  • Redesigned onboarding to collapse a multi-step, multi-product activation flow into a single guided path, the single biggest driver of the 80% improvement in time to first value.
  • Integrated three acquisitions (DAST Essentials, VRM, Package Firewall) into the platform using the design system, instead of letting them live as acquired UIs wearing Veracode paint.
  • Unified scanning results so users could search, filter, and fix vulnerabilities across scan types from a single view, instead of jumping products.
  • Rebuilt the developer tooling surface (IDE plugins, CLI, Repo Scanning, and the AI-powered Veracode Fix) as a coherent developer experience, not four separate tools. (This work became its own case study. See [Veracode Fix & the AI Innovation Group].)

To make this real with customers, I launched an enterprise customer research initiative in partnership with Application Security Consultants, Sales Engineers, CSMs, and GTM teams. That gave design a permanent pipeline into enterprise users: not a survey panel, but the people already in weekly conversation with our most strategic accounts.

The quieter win: how design changed at the company

The metrics above are the story the business tells. The story I tell is this: when I arrived, design was where PMs sent tickets. When I left, design was where strategy started.

That shift showed up in small ways that mattered more than they sound. PMs brought problems instead of solutions. Engineers ran component questions through design governance before writing code. The executive team referenced the Design Principles in roadmap debates. The company-wide rebrand, which I partnered on with marketing leadership, treated product design and brand as a single system, not two departments.

None of those are KPIs. All of them are what design maturity actually looks like.

Outcomes

  • Nearly tripled platform NPS, driven by maturing product experience, design system adoption, and cross-functional UX quality.
  • ~80% improvement in time to first value through redesigned onboarding, unified navigation, and rebuilt information architecture.
  • ~25% reduction in support volume as workflows got clearer and self-service got usable.
  • 14 products unified under a single design language, including three acquisition integrations absorbed without re-platforming.
  • 14-person design and content org scaled and led, with embedded research, critique, and governance practices that outlasted any single project.
  • Company-wide rebrand shipped in partnership with marketing leadership, aligning brand and product design across every customer touchpoint.
  • Design thinking education delivered to PMs and engineers across the organization, changing how cross-functional teams start projects.

What I'd do differently

Two things.

I'd invest in design system adoption metrics earlier. We had the system, we had the components, and we had the engineering partnership, but I didn't instrument adoption well enough in year one. I was measuring the wrong thing (did we build it?) when I should have been measuring the thing that mattered (are teams using it without being asked?). I fixed it, but later than I should have.

And I'd fight harder, earlier, for dedicated research headcount. Embedding research through GTM was the right move under the constraints I had, but it capped how deep we could go. If I were doing it again, I'd make the hire in the first six months, not argue for it in year two.

Credits

Design, research, and content strategy led by me, with a team of product designers, researchers, content developers, and documentation writers. Engineering partnership from Veracode's UI Enablement team. Rebrand partnership with Veracode marketing leadership.