New 2026.1.29

Plexicus 2026.1.29: Performance, Design, and Intelligence Upgrades

Ultra Codex Remedium — We have overhauled our remediation engine. The new "Ultra" engine supports bulk actions, list processing, and…

🚀 New Features

  • Ultra Codex Remedium: We have overhauled our remediation engine. The new “Ultra” engine supports bulk actions, list processing, and AI-driven fixes per repository.
  • XBOM Management: We unified SBOM, AIBOM (AI Bill of Materials), and CBOM (Cryptography Bill of Materials) into a single “XBOM” dashboard with dedicated tabs and detailed views.
  • Jira Integration: Full-featured Jira integration allowing users to create tickets directly from findings, manage webhooks, and configure project settings.
  • Account Deletion: Users can now request account deletion directly from their settings.

🛠 Enhancements

  • Platform Redesign: A comprehensive UI overhaul including new layouts, a collapsible Sidebar, and a grid-based Dashboard.
  • Scanner Intelligence: Enhanced container & dependency scanner processor (CWE/CVE/CVSS detection), improved Minified file detection, and optimized SAST engine/DAST engine processing.
  • Worker Reliability: Major refactoring of the worker system including resource limits, health check improvements, and sequential creation logic.
  • UX Improvements: Added loaders for findings/repositories page, confetti effects for onboarding, and auto-scroll for remediation workflows.
  • Performance: Optimized workflows and finding deduplication strategies.

📋 Compliance & Customization

  • Bot Protection: Integrated Cloudflare Turnstile across Login, Registration, Forgot Password, and OAuth flows to prevent bot abuse.
  • Geolocation Security: Added geolocation validation during registration to restrict access based on country/region.
  • Data Privacy: Added IP address sanitization (removing ports) for GeoLocation feature.
  • Internationalization: Extensive updates to English and Spanish translations for XBOM, system status, and connectors.

🔧 Integrations

  • AIBOM & CBOM Connectors: Added specific connectors for generating AI and Cryptography Bill of Materials.
  • Analytics: Deep integration of our analytics platform for user onboarding/growth tracking.
  • GeoIP: Integrated GeoIP services for location-based validation.
Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Private Round For investors