What metrics would you use to evaluate Duo Security's Device Health application?

Introduction

Evaluating the success of Duo Security's Device Health application requires a comprehensive approach to product metrics. To address this product success metrics challenge effectively, I'll follow a structured framework that covers core metrics, supporting indicators, and risk factors while considering all key stakeholders.

Step 1

Product Context

Duo Security's Device Health application is a critical component of their zero-trust security ecosystem. It assesses the security posture of devices attempting to access corporate resources, ensuring they meet defined security standards before granting access.

Key stakeholders include:

• IT administrators: Seeking to enforce security policies across the organization
• End-users: Needing seamless access to corporate resources
• Security teams: Aiming to reduce the organization's overall risk profile
• Executives: Concerned with protecting company assets and maintaining compliance

User flow:

1. Device attempts to access a protected resource
2. Device Health app performs a rapid security check
3. If compliant, access is granted; if not, remediation steps are provided

The application fits into Duo's broader strategy of providing comprehensive, user-friendly security solutions. It complements their multi-factor authentication (MFA) offerings by adding an additional layer of security at the device level.

Compared to competitors like Crowdstrike Falcon or Microsoft Intune, Duo's Device Health app is often praised for its simplicity and ease of integration with existing systems.

Product Lifecycle Stage: Growth - The product has established market fit and is now focusing on expanding its user base and feature set.