Carbonetes — Comprehensive Container Security Platform

I was the only designer on this project across both the web application and the marketing website, responsible for the full design process — from research and user flows to prototyping and handoff.

My work covered two distinct but connected deliverables: designing the product itself and designing the marketing website that communicates the product's value to potential customers. Both required a deep understanding of the developer and security-focused audience.

Developers and security teams had to run each scanner separately — one at a time, with no unified view.

Carbonetes provides container security scanning: checking for vulnerabilities, licenses, secrets, software dependencies, and infrastructure issues. But the fragmentation meant slower workflows, higher risk of missed issues, and no clear way to prioritize what to fix first. The question the product needed to answer: what does my container actually look like from a security standpoint, right now, all at once?

Before designing any screen, the core question was: how do you surface five types of findings across potentially hundreds of issues without losing the user?

The answer was severity. Rather than organizing findings by scan type — showing all vulnerabilities, then all license issues, then all secrets — the decision was to surface everything through a single severity lens: Critical, High, Medium, Low.

This meant a developer opening the comprehensive scan report could immediately see what needed attention today versus what could wait. The scan type became a filter, not the primary structure. This made the report faster to act on and easier to trust — because the most important things were always visible first.