DAST: Iterate on the configuration UI to further improve learnability

Insight

The DAST configuration pages recently went through a redesign (implementation still in process) that was focused on improving learnability (among other things). The additional UI text that was added in the redesign is helpful to many, but some users still have problems understanding aspects of the interface.

Supporting evidence

Below are a few problem areas that were identified during solution validation for the redesign:

1. Scanner (& target) profile descriptions

...I don't really have a good understanding of what the scanner profile is. I'd probably click on the "learn more" to try to get a better understanding before going into the configuration

Well I think the description used on the scanner profile, it could be even better... more well detailed.

🕊 Dovetail insight (halfway down page)

2. Meaning of values displayed on profile cards (after created/selected)

If a user isn't clear what the specific values that are displayed on the profile cards are for, there is no easy way to figure it out except for "editing" the profile itself.

And the target profile, it's more clear to me, you know. I can see that in this case... I see the target URL, the authentication URL, the username, password... Now =, when I go into the deep scan (scanner profile), it's not so clear.

🕊 Dovetail insight(second item)

Action

1. Conduct further research to pinpoint the specific problems and identify additional areas for improvement
2. Iterate on the UI to address some of the learnability issues that users encountered

Resources

• 🕊 Dovetail project
• 🔍 Research issue 1
• 🔍 Research issue 1

Tasks

• Assign this issue to the appropriate Product Manager, Product Designer, or UX Researcher.
• Add the appropriate Group (such as ~"group::source code") label to the issue. This helps identify and track actionable insights at the group level.
• Link this issue back to the original research issue in the GitLab UX Research project and the Dovetail project.
• Adjust confidentiality of this issue if applicable