Guna Solutions

Security assessments.

Our assessment history, what each review covers, and the work that follows.

Assessment history

Security review, with the scope attached.

These public summaries help district teams review our security work. Results apply to the systems, procedures, and dates described in each assessment.

September 21–23, 2026

Internal assessment

Guna Suite security controls review

An internal review of the proposed Student Support service and the shared application and cloud controls on which it depends, covering security, availability, and confidentiality.

Prepared by
Guna Solutions, using automated scanning and testing tools.
Report
Security Controls Report, version 2.0. This page summarizes the internal report for public review.
Assurance level
Internal assessment. It is not a SOC 2 report or an independent third-party security assessment, and expresses no auditor opinion.

What we reviewed

  • Source code, dependency vulnerabilities, and potential exposed secrets.
  • Automated access-control tests, including role restrictions and protected student safety records.
  • Repository authentication, database connection protections, and sampled backup records.

What the review found

  • No critical or high-severity dependency advisories in the patched source scan; moderate and low tooling advisories remained.
  • The tested access-control suites passed. Secure two-factor authentication enforcement was verified for the GitHub organization.
  • Private, encrypted database connections and successful sampled automated backups were observed.

Independent assurance

SOC 2 examination status

As of September 23, 2026, Guna had begun preliminary discussions with a prospective independent auditor. No signed engagement, agreed examination type or period, or confirmed report issuance date was established by the assessment.

Management is targeting a SOC 2 report in Q4 2026, subject to auditor engagement, scope, scheduling, readiness, and the required evidence. This is a planning target. No issued Guna SOC 2 report or completed independent application assessment was available in the records reviewed.

For procurement teams

Discuss the assessment and supporting evidence.

Contact us with your district, the product you are evaluating, and your review requirements. We can coordinate review of the relevant report, evidence, and remediation status.

Request assessment information

For our broader security, privacy, and procurement approach, visit Trust & Procurement.

Page updated . Assessment observations retain their original dates.