Skip to main content

AutoDesigner

AutoDesigner is an AI-powered tool that automatically generates detailed Threat Analysis & Risk Assessment reports to secure vehicles and ECUs while ensuring regulatory compliance.

AutoDesigner hero

My role and ownership

I was UX Lead for a newly built cybersecurity product, responsible for end-to-end design from concept to launch.

We kicked off with a discovery day where we conducted user observations and interview sessions with current users — cybersecurity engineers — to deeply understand their workflows and pain points.

I created early prototypes for each section and tested them with real users. Their input directly shaped the product and validated key design decisions.

The challenge

  • Security and safety teams struggled with scattered, disconnected data — from damage scenarios to attack paths — managed across spreadsheets, cloud tools, and manual workflows
  • System diagrams and asset identification (DFD) were created by hand or using drawing apps, making the process slow and inconsistent
  • Reviewing threats and risks often led to context switching and errors
  • Complying with regulations like ISO/SAE 21434 added even more complexity and overhead
Challenge overview

Solution

  • Built a system that generates Data Flow Diagrams and pre-filled TARA reports from uploaded architecture images
  • Created an editable, guided workflow aligned with ISO/SAE 21434 from system design to risk analysis
  • Designed exportable Cybersecurity Concept Reports for regulatory compliance

Creating a Data Flow Diagram

Key design decisions

  • The system enables users to either upload an architecture image or create one manually on a canvas

  • It automatically generates a Data Flow Diagram (DFD), identifies relevant assets, and builds a pre-filled TARA report

  • The entire flow — from system design to risk analysis — is editable, guided, and aligned with ISO/SAE 21434

  • Users can export a full Cybersecurity Concept Report at the end

Key screens

DFD canvas with asset connections
DFD boundaries and properties
TARA attack paths table
Attack path details panel
Attack path editing mode

Impact and learning

  • We launched an early trial version and got honest feedback that the product felt 'too immature'. This was a critical turning point.

  • We organized a full-day quality sprint with R&D, QA and Cyber teams, uncovering over 50 usability and stability issues.

  • We shifted from monthly releases to a bi-weekly deployment cadence — dramatically improving product maturity.

  • Once the product was more complete and stable, we signed key design partners like SureSoft, Tier IV, and Aurora.

  • Today, the platform is used by dozens of active users across multiple organizations.