Neu 2025.1.24

Plexicus 2025.1.24: Expanded & Improved Features

Workflow Variables and Secrets for Gitea — Added functions to create workflow variables and secrets for Gitea.

🚀 New Features

  • Workflow Variables and Secrets for Gitea: Added functions to create workflow variables and secrets for Gitea.
  • Gitea Workflow Actions: Implemented workflow action content specific to Gitea.
  • Bulk Actions for Remediations and PRs: Introduced bulk actions functionality for remediations and PRs.
  • Historical Graph Collection Updates: Automatic updates for the Historical Graph collection.
  • SCM Security Connector: Added a new connector category for SCM Security.
  • IaC scanner Connector Integration: Moved the IaC scanner connector into CI/CD Posture.
  • Gitea Integration: Added Gitea as a new SCM connector, including API service, branch/repository interfaces, token management, and flow integration.

🛠 Enhancements

  • Findings Chart Calculation: Improved how findings chart results are calculated.
  • Validation Enhancements: Better input validation for Gitea URLs.
  • Subscription Plan UI Updates: Added extra information and smoother flows for pricing and subscription plans.
  • Payment Card Component: Introduced a payment card component with added usage and pricing details.
  • Improved Auto Scan Flow: Enhanced the automatic scan and validation process for findings.
  • Gitea Modal Interface: Added a close button for connector modal and better flow management for repository selection.
  • Organization Wizard UI: Hid the map component in the organization structure wizard for cleaner UI.

📋 Compliance & Customization

  • API Key Cloud Input: Updated with an asterisk indicator for required fields.
  • Banner Pricing: Enhanced compliance with interval pricing and subscription banners for better clarity.
  • Inactive Subscription Middleware: Added middleware to manage actions for inactive subscriptions.

🔧 Integrations

  1. Stripe Integration:
  • Added a new service for Stripe API.
  • Integrated pricing and subscription flows with card payment and plan banners.
  • Improved payment card components for readonly and advanced pricing plans.
  1. Gitea Continuous Integration:
  • Improved flow for connecting, managing, and deleting Gitea repositories.
  • Updated cache and websocket handling for repository updates.
  • Improved test connection functionality for hosted and cloud domains.
  • Fixed token configuration issues for SCM connectors.
Qualifizierung

Prüfen Sie, ob AI Swarm Pentest zu Ihrer Umgebung passt.

Teilen Sie den wichtigsten Kontext. Wir prüfen den Umfang und nennen den nächsten kommerziellen Schritt.

Vor dem Absenden — prüfen Sie, ob Sie passen

0 / 280

Keine Verpflichtung. Wenn Sie nicht passen, sagen wir es Ihnen.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Private Runde Für Investoren