Vectrix, a Y Combinator startup acquired by Cloudflare

after our engagement.

In a nine-week engagement, we researched, redesigned, and tested Vectrix’s cloud-security platform. The redesign took task-success to 91%, cut first-run onboarding from 74 minutes to 24, and lifted activation by 76%.

INDUSTRY
Cybersecurity / SaaS security (CASB)
PLATFORM
Web app
COMPANY SIZE
Seed-stage, Y Combinator startup
ENGAGEMENT
Find product-market fit and redesign the platform for adoption
DURATION
2024
LOCATION
2024
MPL Gaming redesign cover
Cybersecurity / SaaS security (CASB)
·
Web app
·
Seed-stage, Y Combinator startup
At a glance

9 weeks, discovery research to

tested prototype.

W1
W2
W3
W4
W5
W6
W7
W8
01
Weeks 1 — 2
Kickoff
Nov 9, 2020
02
Weeks 3 — 4
PMF research
8 in-depth interviews
03
Weeks 5 — 7
Usability test
5 participants, Dec 22, 2020
04
Week 8
Handoff
Design system + final prototype, Jan 2021
Team
2 + 1
Product strategist Emilia Ronchetti, account lead Michael Boateng, designers Fred Kim and Juan Monroy, strategist Catalina Galvez
Method
9 audits
PMF interviews, positioning, hi-fi redesign, usability testing, design system
Testing
20+ templates
8 core flows scored, plus a System Usability Scale survey
Engagement
WCAG 2.1 AA
9 weeks, Nov 2020 to Jan 2021
The Client

A Y Combinator startup

inventing à la carte

cloud security.

MPL · Player Base
MPL Gaming player base

Vectrix built an API-driven cloud access security broker, a CASB, that gave IT and security teams one-click visibility and control across all their SaaS applications. It worked like a marketplace of à la carte scanners for tools like AWS, Google Workspace, GitHub, Salesforce, and Dropbox, surfacing issues from unauthorized access and file exposure to misconfigurations and shadow IT.

Our research found the product did not fit any existing category, so part of the job was helping Vectrix define and own a new one. When Wandr came on, Vectrix was an early-stage Y Combinator team with a powerful but deeply technical MVP, and a founding team that knew adoption depended on making that power feel simple.

Founded
Seed-stage, Y Combinator
Category
À la carte cloud-security marketplace (CASB)
Since Wandr
Acquired by Cloudflare, February 2022
The Challenge

A powerful platform that asked too much

of its users.

Vectrix had built real security capability. The experience around it still assumed the depth of knowledge its own engineers had.

Problem 01

Power buried in complexity.

The platform could do a lot, but it exposed that capability directly. First-time users struggled with setup, deployment, and simply reading whether the system was working.

Problem 02

No defined buyer or category.

There was no clear picture of who the product was for or where it sat in the market, which made both the roadmap and the go-to-market story harder to build.

Problem 03

Trust gaps at the moment of commitment.

The riskiest moments were pricing and permissions. Users were unsure what they were paying for and uneasy about granting access to their data before they had committed.

Drag / scroll →
Before / After

Same powerful platform.

An experience built

to be adopted.

Drag the handle to see how the experience changed, from a generic gaming site into an institution-grade platform built to earn trust with skeptical U.S. players.

Before redesign
After redesign
Before
After WANDR
Our Role

Research the buyer, redesign the product, test it

with real users

01
Eight in-depth PMF interviews with security professionals
02
A target-consumer model plus a needs, attitudes, and behaviors map
03
Product positioning and a new-category strategy for à la carte cloud security
04
A high-fidelity redesign of the eight core product flows
05
Moderated usability testing with five security professionals
06
A System Usability Scale survey and per-flow success scoring
07
A PMF scorecard and NPS survey to keep measuring fit
Research

Before redesigning, we defined

the buyer and the category.

Eight in-depth interviews mapped who Vectrix was really for, then five security professionals tested the redesigned prototype flow by flow.

8
User Research

In-depth PMF interviews

Open-ended sessions with security professionals, clustered into patterns.

5
Competitive Benchmarking

Usability-test participants

Security engineers, managers, and a risk analyst tested the prototype across eight flows.

91%
Current Website Analysis

Task-success rate

Measured on the redesigned flows in usability testing.

Three buyers, three levels of fluency.

Persona 01
Casual gamer persona

The security manager

Often the first security hire, technically proficient, and protective of a small team’s time. Wonders whether the tool fits a team of one and wants to know exactly what happens when you connect. “I’m the only person on the team, I would love to have something like this but it is not for a team of one.”

leads a lean team
Persona 02
Committed player persona

The security engineer

Lives deep in the tooling and moves fast, but hit friction at the edges: payment options and unclear permissions. “I granted access and I don’t know what I did.”

HANDS-ON
very advanced
Trust-driven
Persona 03
Office-context player persona

The risk analyst

Evaluates the product through cost and outcomes rather than deep configuration, and needs the pricing model to make sense. “Why do some of the outputs cost more than others?”

Value-focused
less technical
The Strategy

Make a brand-new category

LEGIBLE.

Vectrix did not fit an existing category, and its buyers ranged from very advanced engineers to less technical analysts. The redesign had to teach a new model to a wide range of fluency without dumbing the product down.

3 principles
Principle 01
Trust
Trust-led landing design

Teach the category

We framed Vectrix as an à la carte cloud-security marketplace and designed the flows so first-time users could grasp that model instead of guessing at it.

Principle 02
Segment
Segmented landing experience

Earn trust before commitment

Pricing and permissions were where users hesitated, so we made cost transparent and explained exactly what access each connection granted, before asking anyone to commit.

Principle 03
Bingo
Bingo as its own product

Design for mixed fluency

Buyers spanned engineers, managers, and analysts, so the redesign used plain language and progressive detail that worked whether or not you lived in security tooling.

Principle 01 of
3
→ Continue scrolling
THE KEY INSIGHT

Research to prototype in about

Nine weeks.

Define the buyer, redesign the core flows, test with real users, then polish and hand off.

MPL redesign surface
MPL redesign surface
MPL redesign surface
MPL redesign surface
MPL redesign surface
MPL redesign surface
MPL redesign surface
MPL redesign surface
Screen 01 of 08
→ Scroll horizontally
Outcomes

What the work set in

motion.

The engagement closed with a complete handoff package: page designs across 20+ unique templates, research documentation, a trust architecture framework, a design system, and an implementation plan ordered by impact.

Task-success rate
91%
On the redesigned flows in usability testing.
First-run onboarding time
74 → 24 min
Cut by about two-thirds after the redesign.
Activation lift
+76%
Reported improvement in user activation.
By Cloudflare, February 2022
Acquired
Company milestone. Vectrix’s CASB became part of Cloudflare Zero Trust, after our engagement.

Figures from qualitative user testing conducted during the engagement. In-market performance validation sits with MPL's internal team post-handoff.

Client Voice

In their words.

WANDR played a critical role in shaping our product at a pivotal time. Their team brought clarity, speed, and senior-level thinking when we needed it most.
Alex Dunbrack
coo · Co-founder, Vectrix
Clutch ↗
Up next

Another story worth reading.

Buildbox case study preview
Next Case Study

Buildbox UX rebuild.

No code gaming
·
SAAS