Neu 2025.4.15

Plexicus 2025.4.15: Power Up: New Features, Better Flow

**Microsoft Marketplace integration** is now available, including subscription support.

🚀 New Features

  • Microsoft Marketplace integration is now available, including subscription support.
  • Total Finding Graphs can be filtered from selected repositories.
  • Create Remediation supported timeout handling for more reliable processing.
  • Google authentication now supports terms & conditions display after register for first time.
  • Introducing Trial plans will be the default plan for users.

🛠 Enhancements

  • Optimized sidebar behavior and banner styling for better navigation.
  • Updated layout visuals for login and error screens.
  • Smoother tab component styling for improved UI consistency.
  • Better error handling across payment flows and remediation systems.
  • Updated project ID handling for GitLab plugin integrations.

📋 Compliance & Customization

  • Adjusted subscription flow logic for more accurate behavior when switching plans.
  • Added validation and expiration fields for free-to-trial upgrades, only valid for 30 days after user registered.
  • Expanded support for self-hosted GitLab URLs.

🔧 Integrations

  • Checkmarx integration is now supported.
  • GitLab authorization scopes and plugin systems have been improved.
Qualifizierung

Prüfen Sie, ob AI Swarm Pentest zu Ihrer Umgebung passt.

Teilen Sie den wichtigsten Kontext. Wir prüfen den Umfang und nennen den nächsten kommerziellen Schritt.

Vor dem Absenden — prüfen Sie, ob Sie passen

0 / 280

Keine Verpflichtung. Wenn Sie nicht passen, sagen wir es Ihnen.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Private Runde Für Investoren