Evaluating Software for Community Safety and Readiness
A community partner approached me with a critical question: Is a Kiyanaw.net secure and reliable enough for our language data? They were interested in adopting this new platform but needed an independent, technically grounded assessment before moving forward. Revitalization Technology was brought in to evaluate the software’s data‑security posture, test its API for vulnerabilities, and determine whether it was a good fit for their workflows and long‑term stewardship needs.
Our work focused on four key areas:
Security Review on Behalf of the Community
Acting as the community’s technical advocate, we interfaced directly with the Kiyanaw development team to understand their security model, data‑handling practices, and architectural decisions. We documented existing safeguards and identified areas where additional protections or clarity were needed.
API Stress Testing and Vulnerability Discovery
To ensure the platform could safely support community data, we conducted hands‑on testing of the API—pushing it to failure points, probing authentication flows, and examining rate‑limiting and error‑handling behavior. This surfaced potential vulnerabilites early, before they could impact real users.
Actionable Recommendations for Security and UX
We delivered a prioritized set of recommendations to the developers, outlining improvements to strengthen data security and reduce risk. We also provided non‑security suggestions to improve usability, onboarding, and overall user experience—ensuring the platform would be approachable for community teams.
Fit Assessment for the Community Client
Beyond the technical review, we worked directly with the community to evaluate whether Kiyanaw aligned with their workflows, capacity, and values around data ownership and long‑term sustainability. This helped them make an informed decision grounded in both security and practical use.
The Result
Through this collaboration, the community gained a clear, independent understanding of Kiyanaw’s strengths, risks, and readiness — and the developers received concrete guidance to strengthen the platform as it moves toward broader adoption.
