SecureFirst

One dashboard for security awareness, monitoring and compliance.

SecureFirst helps Danish companies work systematically with NIS 2, CIS18 and ISO 27001, with awareness training, phishing tests and monitoring of data breaches. We worked on the product design and front-end architecture for the platform.

SaaS

SecureFirst platform design in two browser windows: a phishing email annotated with its red flags, and the NIS 2 risk assessment report in front — Design, example data. Background generated with AI; the interface is unaltered.

Client: SecureFirst
Sector: Cybersecurity and compliance
Platforms: Web
Our role: Product design
Period: Ongoing product partnership

What was the challenge?

SecureFirst had a broad security platform and a new NIS 2 supplier risk engine. The product needed a clear information architecture, a dashboard that could carry many modules, and a visual language that felt calm in a high-stakes category.

Product: Security and compliance platform
Users: CISOs · security teams · compliance leads
Type: B2B SaaS

What did bon.do build for SecureFirst?

We worked on the product design and front-end architecture: the navigation model, the dashboard, the compliance and awareness modules, and the design system. The work covers NIS 2, CIS18 and ISO 27001, and it is built to be extended as the platform grows.

Information architecture
A navigation model that can hold compliance, awareness and monitoring without turning into a menu of everything.
Dashboard and modules
The overview, the module patterns and the states a security team needs to act on.
Design system
Components and rules the team can extend as the platform grows.

Technology

Angular
TypeScript
design system

How did the project run?

01Discover
Map the security work
What a CISO does on a Monday, and what the platform has to make obvious.
02Design
A calmer dashboard
Hierarchy, density and states tested with security people.
03Build
Components, not screens
The design system and the front-end patterns the team can keep using.
04Run
Ready for the next module
The NIS 2 supplier risk engine fits the same model.

Inside the product

SecureFirst training highlights: a simulated phishing email with four numbered red flags explained beside it — After a phishing simulation, staff see exactly which red flags they missed. Design, example data.

SecureFirst phishing simulations list with campaigns, languages, recipients, status and click rate — Phishing simulations per campaign, in several languages. Design, example data.

SecureFirst SupplyRISK Manager dashboard with supplier count, assessment progress and risk distribution — SupplyRISK Manager: supplier risk and NIS 2 compliance. Design, example data.

SecureFirst NIS 2 risk assessment overview with counts per severity, a risk matrix and action plans — The NIS 2 risk assessment ends in a risk matrix and a report for the board. Design, example data.

SecureFirst risk treatment step: action, owner, planned measures, deadline and residual risk for a ransomware risk — Each risk gets an owner, measures, a deadline and a residual risk. Design, example data.

What was the result?

A single dashboard that lets a security team move from awareness to monitoring to compliance without losing context. The product design is in use across the platform, and the NIS 2 supplier risk engine is the next module.

One platform3modulesCompliance, awareness and monitoring.

FrameworkNIS 2Supplier risk, mapped to the regulation.

One view1dashboardFrom awareness to compliance without losing context.