This is a security application installed directly on endpoints (e.g., user laptops or desktops). It allows for:
- On-demand and scheduled malware scans
- Viewing detected threats (Events)
- Managing quarantined files
- Configuring security settings
- Accessing help content
The UI is used by non-technical users, while still offering enough visibility and control for power users or admins who might access the endpoint locally.
Challenges:
- Balancing Simplicity with Security Complexity:
Security software inherently deals with complex data—threat types, severities, file paths, scan configurations—but the end-user shouldn’t be overwhelmed. Most users only want to know “Am I safe?”. - Status Communication:
Users need confidence that the system is protecting them. Vague statuses like “Running” or “Stopped” can leave users confused. - Data Overload in Event Views:
Screens like Events and Quarantine can be filled with dozens or hundreds of entries. Users need to quickly scan, identify threats, and take action. - Scan Scope Clarity:
The Custom Scan interface needed to allow detailed control (e.g., choose C:, D:, USB drives) without looking like a file explorer, which can confuse non-tech users. - In-Scan Feedback:
During scans, users expect more than a spinner—they want progress visibility (time, file being scanned, number of threats) to stay informed and reassured. - Recovery & Decision Making:
When files are quarantined or detected as threats, the user must decide: Restore? Delete? Add to allowlist? These decisions carry risk and require clarity and trust. - Settings Complexity:
Too many toggles or advanced options might confuse users or lead to incorrect disabling of protection (e.g., turning off real-time protection).
Solutions:
- Simple Navigation Structure:
A vertical side nav (Home, Scan, Events, Quarantine, Settings, Help) with clear icons enables users to find what they need without digging.
Grouping actions by intent (scan vs. post-scan actions) minimizes cognitive load. - Status-Centric Home Screen:
A clear “Protection Enabled” message reassures users immediately.
Breakdown of protection types (automatic updates, URL filtering, etc.) shown with ✅ or ❌ enhances clarity without overwhelming.
“Device is Secure” acts as a calming summary state. - Clean Scan Flow:
Custom Scan UI: Uses a folder-tree style with checkboxes for drives and folders (C:, D:, USBs, etc.). This maintains familiarity and avoids overwhelming detail.
Scan in Progress: Shows file count, elapsed time, threats detected/quarantined, and current file—this builds user confidence.
Scan Results: “Scanned” stamp and clear summary numbers (e.g., files scanned, threats found) close the loop. - Effective Use of Data Grids (Events & Quarantine):
Tabular layout with sortable headers: Event ID, Date, Type, Severity, Path.
Severity tags (“High,” “Very High”) offer immediate prioritization.
Bulk actions (Restore, Delete, Add to allow list) above the grid reduce friction for power users. - Quarantine Feedback:
Shows file name, path, date quarantined.
Clear call-to-action buttons: Restore or Delete, with checkbox selection.
Reinforces the idea that “You’re in control but we’ve already protected you.” - Settings Simplification:
Light/dark mode toggle and language selection grouped under “Appearance.”
Endpoint protection toggle is clearly labeled and shown as enabled.
Email notification input is simple and clear. - User Assistance:
The Help screen opens within the app and uses placeholder “Lorem ipsum” for now—but its presence indicates proactive support.
Clear Help icon in the side nav shows it’s always available.
This UI design demonstrates thoughtful UX decisions to bridge complex cybersecurity functionality with an approachable, non-intimidating interface. The design balances visibility, control, and simplicity. It provides clarity and assurance to everyday users, and supports informed actions through clean data presentation.
Click the gallery to zoom-in.