Clay

A security teammate for every employee.

Huntress· 2026

↓
The live report for admins, counters rolling
A workshop with the assistant in use: a dictated question, then a live call
The admin dashboard and chat, as it happens
The same conversation with Clay in Slack, Microsoft Teams and SMS

Results

Clay is the first agentic experience Huntress has shipped. It went from go to live in 8 weeks and was released to more than 1.2 million users.

Learners now have an agentic experience across our platform and inside the tools they already use, like Slack and Teams, plus a personal line to Clay by email or text. It was shaped by what partners and learners told us along the way.

Resolved without a ticket
18,420
Security concerns resolved
42,615
Escalated after a learner clicked
1,284
Attacks that never reached an inbox
9,730
Words spoken to Clay by voice
2.4M

Across every Huntress customer since launch.

My role

I was the only designer on Clay, from the first research call to shipped code. I surveyed more than 100 partners, the MSPs who run Huntress for their clients and act as its admins, and more than 6,000 learners. Then I got on calls with 12 partners and more than 15 learners, sometimes one person, sometimes six people from the same company.

I brought the team into those calls. An engineer, the PM, or whoever needed convincing heard our users in their own words, and we iterated on what they told us together.

I designed both sides of the product, the experience for learners and the report for admins, art-directed the clay brand, and built the front end: every screen, in production code, shipped by an agent swarm I run. The back end was built by the engineers on the team.

Team

We work together as a team, and everyone had an opinion on how Clay should be built. Dima (Principal product manager) trusted the team to run and weighed in at the key decisions. Eric (Senior manager, engineering) staffed it.

Truman (Principal threat researcher) built the threat library Clay answers from: every kind of phish, how Clay should respond, and what a learner should do next, including the steps for anyone who already clicked.

Aaron and Daniel (Principal software engineers), with Donna, Neil and Kevin (Senior software engineers), built the back end that runs Clay.

Built with

  • React
  • CBColoring Book design system
  • HTML prototypes
  • Figma
  • Claude
  • Slack

Clay is an app designed, developed and released to over 1.2 million users.

Admin · Dashboard
Admin · Dashboard1 / 7

Helping people with security has never scaled, so the industry made content instead: videos, quizzes, fake emails to catch you out. Clay is the expert you can ask, in the workshop and in Slack, Teams, email and text.

It's a B2B product with two sides. I designed both: the experience for learners and the one for their admins.

Where I started

Problem

When a suspicious message lands, there is nobody to ask in the moment. The help arrives later, as a video or a quiz, and it is the same for everyone. Admins see clicks and completions, not who needed a hand.

Hypothesis

If the expert is where people already are, in the workshop, in Slack, in Teams, in a text, people will ask before they act. And if the conversation stays private and the admin sees only what was caught, security gets the win without the words.

Goal

A security teammate for every employee: an answer in the moment, in the channel they are in. For the admin, a report that rolls the wins up live, with no leaderboards and no risk scores.

The brand is made of clay

Every framework got a book and every idea got an object, art-directed as one set: one clay, one light, one camera.

A clay book titled SOC 2
SOC 2
A clay book titled HIPAA
HIPAA
A clay book titled ISO 27001
ISO 27001
A clay book titled PCI DSS
PCI DSS
A clay book titled GLBA
GLBA
A clay book titled Cyber Insurance
Cyber insurance
The mark as three stacked clay blocks
The mark, in clay
A clay security key with a K on it
The key
A clay envelope stamped Phishing
Phishing
A red clay fishing hook
The hook
A clay keyboard and mouse
The desk
A stack of clay books
The library

Ask mid-workshop

Type a question, dictate it, or call Clay and talk it through while the workshop waits.

A personal CISO for every employee

Nobody opens a security portal to ask a question. Clay answers in a Slack DM, a Teams chat or a text. No login.

The same conversation in Slack, Microsoft Teams and SMS.

Admins get the win, never the words

Conversations stay private. Security sees what Clay caught, and every number rolls up live.

The report inside the existing admin console. The nav stays put while the report scrolls.

Every number has four states

Off, on but quiet, live, and a channel down. No leaderboards, no risk scores, no color that grades people.

Every pixel is the real component

The boards are generated from the live design system, so the build can be checked against the design.

Settings → Clay: three channel states, and a security contact set in one place.

One designer. A fleet that ships.

33 work packages, sent in waves to five parallel agents. Two models review every pull request, and a person signs off before merge.

Swipe sideways to follow the wave from the plan to the merge.
Build plan33 packages · 44 boards22 golden conversationsOrchestratorClaude Codedispatches, gates, verifiesone PR per issue5 workers in parallel · Azure AI FoundryWorker 1gpt-6-astra · hard packagesWorker 2gpt-5.6-solWorker 3gpt-5.6-solWorker 4gpt-5.6-solWorker 5gpt-5.6-solEvery PRReview · grok-4.6Review · Kimi K3Verify · Claude Codelint, tests, evals, tenantscope, golden contractsHumanQA againstthe boardmergePRPRPRPR
Build plan33 packages · 44 boards22 golden conversationsOrchestratorClaude Code · dispatches, gates, verifiesone PR per issue5 workers in parallel · Azure AI FoundryWorker 1gpt-6-astra · hard packagesWorker 2gpt-5.6-solWorker 3gpt-5.6-solWorker 4gpt-5.6-solWorker 5gpt-5.6-solEvery PRReview · grok-4.6Review · Kimi K3Verify · Claude Codelint, tests, evals, tenantscope, golden contractsHumanQA against the boardmergePRPR

Clay is live in Slack, Teams, email and text. Employees ask, Clay answers, and security teams get to brag about a person, not a finding.