Cybersecurity marketplace with search-first discovery

Conceptual marketplace for physical appliances, virtual appliances, and service add-ons in a single catalog. The portfolio centerpiece is a new search and discovery model: faceted refinement, trust signals, comparison workflows, and an explicit instrumentation layer (Mixpanel + Pendo) designed to validate whether buyers reach confident shortlists.

Product Manager · Concept design Cybersecurity · Marketplace · Search UX Mixpanel · Pendo instrumentation
3 catalog types
Physical appliances, virtual appliances, and service add-ons in one taxonomy
Search-first
Faceted discovery, query refinement, and comparison built into the core flow
Mixpanel
Behavioral funnels, cohort segments, and drop-off diagnosis across discovery
Pendo
In-product guidance for first-time buyers navigating complex catalog structure

Who it was for

IT admins, security architects, and procurement buyers evaluating cyber infrastructure across hardware, virtualized deployments, and managed service bundles.

The marketplace had to serve buyers with different evaluation mental models in the same catalog: hardware throughput specs, virtual deployment constraints, and recurring service entitlements.

Why discovery was the bottleneck

Cyber buyers don’t fail because options are scarce. They fail because the catalog is dense, vendor claims overlap, and add-on compatibility is opaque until late in the evaluation cycle.

The product thesis: make search the primary navigation model, not category browsing with filters bolted on afterward.

Before vs after search experience

Legacy catalog pattern

Browse categories → Open product page → Read specs → Check add-ons manually → Start over if wrong fit
  • Category-first navigation with shallow filters
  • Appliance types mixed without deployment context
  • Add-ons discovered only after deep page visits
  • Comparison requires opening multiple tabs
  • No instrumentation on where buyers stall

Search-first marketplace

Query or intent chip → Refine with facets → Compare shortlist → Surface compatible add-ons → Save evaluation set
  • Intent-aware search with progressive refinement
  • Deployment model as a first-class facet
  • Trust signals inline on results (certified, bundled, compatible)
  • Side-by-side comparison on buyer decision dimensions
  • Mixpanel funnels + Pendo guidance mapped to each stage

Search UX principles

The discovery model drew on established search UX patterns (progressive disclosure, scannable results, forgiving entry points) and translated them into a cyber marketplace context where buyers arrive with partial intent and need help narrowing without losing context.

1. Forgiving entry

Accept broad queries (“next-gen firewall branch office”) and map to intent chips before forcing facet selection. Zero-results states suggest alternate facets instead of dead ends.

2. Facets reflect buyer decisions

Deployment model, throughput tier, compliance certifications, and support tier, not vendor-internal product families. Facet counts update live so buyers see the effect of each refinement.

3. Trust signals on results

Certified compatible, commonly bundled, and deployment-validated badges inline on result cards so buyers don’t have to open every detail page to assess fit.

4. Comparison on decision dimensions

Compare up to four items on the attributes buyers actually weigh: deployment model, throughput, licensing model, add-on compatibility, and support SLA, not marketing feature lists.

5. Add-ons in the discovery path

Service add-ons surface during search and comparison, not only on product detail pages. Bundle configuration is a step in evaluation, not a post-purchase surprise.

6. Shortlist as the success state

Saving a shortlist is the primary conversion milestone in discovery, not page views. The UX optimizes for confident evaluation sets, not catalog browsing time.

Catalog taxonomy

Physical
On-prem appliances: NGFW, secure web gateway, IDS/IPS hardware. Facets: throughput (Gbps), form factor, port count, HA support, rack units.
Virtual
Virtual appliances: deployable on VMware, Hyper-V, cloud marketplace images. Facets: hypervisor compatibility, vCPU/RAM requirements, license model (perpetual vs subscription).
Services
Service add-ons: managed monitoring, threat intel feeds, compliance reporting, premium support tiers. Facets: compatible appliance families, SLA level, deployment assistance scope.
Trust meta
Cross-cutting metadata: certification badges (FedRAMP, Common Criteria), vendor-verified compatibility, bundle frequency signals, deployment validation status.
Compare dims
Comparison attributes: deployment model, throughput/licensing, compliance coverage, add-on compatibility matrix, support SLA, total cost framing.

Two buyer scenarios

  1. Scenario A (IT admin, physical appliance): Query: “branch office firewall 2Gbps HA.” Refines with deployment=on-prem, throughput=2 to 5 Gbps, HA=required. Compares three NGFW appliances on throughput, port density, and support tier. Saves shortlist and views compatible monitoring add-ons before requesting a quote.
  2. Scenario B (Security architect, virtual + services): Starts from intent chip “Virtual appliance · hybrid cloud.” Filters by hypervisor (VMware), license model (subscription), and compliance (SOC 2). Compares two virtual appliances, then configures a bundle with threat intel feed and 24/7 managed monitoring. Shortlist includes appliance + service bundle as a single evaluation unit.

Search UX

HTML-native reconstructions of the core discovery surfaces. Annotated to show where facets, trust signals, and comparison dimensions appear in the flow.

Search results with facets
Deployment
On-prem (12) Virtual (8)
Throughput
2 to 5 Gbps (6) 5 to 10 Gbps (4)
HA
Required (5)
SecureEdge NGFW-2400
Physical · 3.2 Gbps · 8× GE ports · HA pair
Commonly bundled
FortiBranch X200
Physical · 2.8 Gbps · 6× GE ports · HA ready
Certified compatible
Palo Alto PA-410
Physical · 2.5 Gbps · 4× GE ports
Facets update counts live; trust badges visible without opening detail pages
Comparison view
Dimension NGFW-2400 FortiBranch X200 PA-410
Throughput3.2 Gbps2.8 Gbps2.5 Gbps
HA supportActive/ActiveActive/PassiveAdd-on
ComplianceCommon CriteriaFedRAMPSOC 2
Monitoring add-onCompatibleCompatibleBundle only
Support SLA24/7 PremiumBusiness hours24/7 Standard
Compare on buyer decision dimensions, not marketing feature lists
Bundle configuration

Shortlist item: SecureEdge NGFW-2400

Compatible service add-ons:

Managed Threat Monitoring: 24/7 SOC, incident escalation
Certified compatible · Commonly bundled
Compliance Reporting Pack: Automated audit logs, retention policy
Optional add-on
Evaluation bundle saved: appliance + monitoring add-on
Add-ons surface during evaluation, not after purchase commitment

Key design decisions

Search over browse

Category browsing remains available but secondary. Primary navigation assumes buyers arrive with partial intent and need refinement, not a taxonomy tour.

Deployment model as primary facet

Physical vs virtual is the highest-friction confusion point in cyber catalogs. Making it the first facet prevents mismatched results early.

Shortlist, not cart

Enterprise cyber evaluation is a research phase, not impulse purchase. The success metric is a saved evaluation set, not checkout conversion.

Instrumentation from day one

Every discovery stage has mapped Mixpanel events and Pendo guidance triggers. The UX was designed to be measurable before it was designed to be pretty.

Rejected
Vendor-brand-first navigation; buyers don’t search by OEM, they search by capability and deployment context.
Rejected
Infinite scroll results; comparison and shortlist require stable positions. Paginated results with persistent compare tray.
Rejected
Add-ons as post-detail upsell only; bundle discovery must happen during evaluation, not after commitment.
Stack
Mixpanel for behavioral funnels and cohort analysis; Pendo for in-product guidance and feature adoption
Status
Conceptual design with instrumentation model defined for validation and iteration

Measurement model

The discovery UX was laid out with an explicit instrumentation model. Mixpanel handles what buyers do; Pendo handles whether they understand how to do it. This split mirrors how I structured analytics at BVXpress: behavioral telemetry for diagnosis, in-product guidance for activation.

Search Refine Compare Shortlist Evaluate add-ons

Mixpanel: behavioral layer

Event tracking, funnels, cohort segments, and drop-off diagnosis across the discovery flow.

  • Funnel: search → refine → compare → shortlist → add-on config
  • Segments: first-time vs repeat evaluator; appliance-first vs virtual-first path
  • Drop-off diagnosis: zero-results, facet abandonment, compare stall, shortlist without add-ons
  • Cohort retention: do guided users return and complete evaluation faster?

Pendo: guidance layer

Onboarding, contextual tooltips, and feature adoption support for complex marketplace behaviors.

  • First-visit walkthrough: catalog structure (physical / virtual / services)
  • Contextual tooltip on facet panel: what each deployment filter means
  • Compare tray introduction: how to add items and read decision dimensions
  • Bundle builder nudge: when compatible add-ons are available for shortlist items
Layer Events tracked Question it answers
Discovery query_submitted, zero_results_shown, facet_applied, facet_removed, sort_changed, intent_chip_clicked Are buyers finding a viable path from broad search to narrowed results?
Evaluation result_clicked, detail_viewed, compare_started, compare_completed, shortlist_saved, add_on_viewed, bundle_configured Which results convert to confident evaluation sets? Where do buyers stall?
Guidance walkthrough_started, tooltip_dismissed, checklist_completed, return_after_guidance Does in-product education improve activation of search, compare, and bundle behaviors?
Pendo nudge placement map: Walkthrough on first catalog visit → facet tooltip on first filter interaction → compare tray tooltip when 2+ items selected → bundle builder prompt when shortlist item has compatible add-ons → checklist completion tracked as adoption milestone in Mixpanel.

PM takeaways

Marketplace IA Search UX design Faceted discovery Comparison workflows Mixpanel funnels Pendo guidance Event taxonomy Cohort segmentation Bundle configuration Trust signal design

“The best marketplace search doesn’t show more results; it gets buyers to a confident shortlist faster.”