Comparison Overview

Pukunui

VS

Sandcastle Educational Consulting

Pukunui

116 Parry Street, Perth, Perth, WA, AU, 6000
Last Update: 2025-12-02
Between 750 and 799

Say goodbye to disengaged learners with our interactive learning management system. Pukunui, a company founded in Perth, Western Australia in the year 2000, has a clear mission to revolutionise education by providing cutting-edge e-learning solutions to institutions of all sizes. The company's team of experienced professionals from the education and IT sectors is committed to making education accessible to everyone, everywhere. With a lead developer who played a crucial role in writing the core Moodle code, Pukunui has a deep understanding of the challenges facing educators today. The company recognised that traditional classroom-based teaching is no longer enough to engage and inspire learners, which led them to turn to Moodle, a local product of outstanding quality. In 2004, Pukunui became an official Moodle partner, and although not currently a partner, we are still involved in the ongoing development of the core Moodle code, striving to make the platform even better for educators and learners alike. Today, Pukunui is a global enterprise with offices in Perth, Hong Kong, and Kuala Lumpur, and serves clients from around the world. We understand that every institution is unique, and there is no one-size-fits-all solution when it comes to education. That's why we offer custom e-learning solutions tailored to the specific needs of each and every client. Our interactive learning management system, based on the core Moodle code, provides educators with the flexibility to create engaging and effective learning experiences that cater to the diverse needs of their learners. With Pukunui, say goodbye to disengaged learners and embrace active learning that is customised to your institution's requirements. At Pukunui, the belief is that education is a lifelong journey, and the company is poised to assist learners at every step of the way. Be a part of Pukunui's mission to transform education and unleash the potential of learners worldwide.

NAICS: None
NAICS Definition: Others
Employees: 14
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Sandcastle Educational Consulting

16500 Avondale Ave Woodinville, WA, US
Last Update: 2025-12-02

Sandcastle Educational Consulting provides content development, project management, and marketing services to companies and organizations that deliver media to the youth market. Are you looking for expertise in creative design, educational content development, efficient project management, and/or effective marketing? We’ve worked with some of the best companies to develop award-winning educational media products — and we can help you! Experience includes: *One of the first five members of what’s now Disney Interactive *Lead Educational Design Consultant for Humongous Entertainment’s award-winning Blue’s Clues computer games *Designer and Producer of Edmark’s award-winning Carnival Countdown math game for grades K – 2 *Lead Creative Producer at Sandcastle Designs, creating multiple games for The Learning Company *Designer, Developer and Executive Producer of Comprehensive Health Education Foundation’s FUEL and CHILL, ground-breaking and award-winning video series for teens focusing body image, self-esteem, and the media *Developer of educational content for Microsoft’s My Personal Tutor series for primary grades And we can help you!

NAICS: None
NAICS Definition: Others
Employees: 1
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/pukunui.jpeg
Pukunui
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/sandcastle-educational-consulting.jpeg
Sandcastle Educational Consulting
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Pukunui
100%
Compliance Rate
0/4 Standards Verified
Sandcastle Educational Consulting
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs E-learning Industry Average (This Year)

No incidents recorded for Pukunui in 2025.

Incidents vs E-learning Industry Average (This Year)

No incidents recorded for Sandcastle Educational Consulting in 2025.

Incident History — Pukunui (X = Date, Y = Severity)

Pukunui cyber incidents detection timeline including parent company and subsidiaries

Incident History — Sandcastle Educational Consulting (X = Date, Y = Severity)

Sandcastle Educational Consulting cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/pukunui.jpeg
Pukunui
Incidents

No Incident

https://images.rankiteo.com/companyimages/sandcastle-educational-consulting.jpeg
Sandcastle Educational Consulting
Incidents

No Incident

FAQ

Sandcastle Educational Consulting company demonstrates a stronger AI Cybersecurity Score compared to Pukunui company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Sandcastle Educational Consulting company has disclosed a higher number of cyber incidents compared to Pukunui company.

In the current year, Sandcastle Educational Consulting company and Pukunui company have not reported any cyber incidents.

Neither Sandcastle Educational Consulting company nor Pukunui company has reported experiencing a ransomware attack publicly.

Neither Sandcastle Educational Consulting company nor Pukunui company has reported experiencing a data breach publicly.

Neither Sandcastle Educational Consulting company nor Pukunui company has reported experiencing targeted cyberattacks publicly.

Neither Pukunui company nor Sandcastle Educational Consulting company has reported experiencing or disclosing vulnerabilities publicly.

Neither Pukunui nor Sandcastle Educational Consulting holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Pukunui company nor Sandcastle Educational Consulting company has publicly disclosed detailed information about the number of their subsidiaries.

Pukunui company employs more people globally than Sandcastle Educational Consulting company, reflecting its scale as a E-learning.

Neither Pukunui nor Sandcastle Educational Consulting holds SOC 2 Type 1 certification.

Neither Pukunui nor Sandcastle Educational Consulting holds SOC 2 Type 2 certification.

Neither Pukunui nor Sandcastle Educational Consulting holds ISO 27001 certification.

Neither Pukunui nor Sandcastle Educational Consulting holds PCI DSS certification.

Neither Pukunui nor Sandcastle Educational Consulting holds HIPAA certification.

Neither Pukunui nor Sandcastle Educational Consulting holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OAuth2 endpoints for social login providers such as Google, GitHub, GitLab, Facebook or Dropbox lack CSRF protection, since they don't send a state parameter and verify the response using this parameter. This vulnerability is fixed in 1.10.4.

Risk Information
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Description

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.

Risk Information
cvss4
Base: 9.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. This vulnerability affects the function OtherEmbedding.aencode of the file /src/models/embed.py. Performing manipulation of the argument health_url results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may be used. The patch is named 0ff771dc1933d5a6b78f804115e78a7d8625c3f3. To fix this issue, it is recommended to deploy a patch. The vendor responded with a vulnerability confirmation and a list of security measures they have established already (e.g. disabled URL parsing, disabled URL upload mode, removed URL-to-markdown conversion).

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the component com.rarlab.rar. Such manipulation leads to path traversal. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is indicated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 7.20 build 128 is able to mitigate this issue. You should upgrade the affected component. The vendor responded very professional: "This is the real vulnerability affecting RAR for Android only. WinRAR and Unix RAR versions are not affected. We already fixed it in RAR for Android 7.20 build 128 and we publicly mentioned it in that version changelog. (...) To avoid confusion among users, it would be useful if such disclosure emphasizes that it is RAR for Android only issue and WinRAR isn't affected."

Risk Information
cvss2
Base: 5.1
Severity: HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
cvss3
Base: 5.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safe_dir causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X