Neu 2025.9.16

Plexicus 2025.9.16: Platform Evolved: A Major Leap in Connectivity and Enhanced Controls

**Internationalization (i18n) Support — ** The Plexicus platform is now equipped for multiple languages, with initial translations…

🚀 New Features

  • Internationalization (i18n) Support: The Plexicus platform is now equipped for multiple languages, with initial translations rolled out across the Dashboard, Applications, Findings, Integrations, and Settings pages to support our global user base.
  • Domain Management for Integrations: Implemented a new workflow for managing and validating domains within integration providers, simplifying the setup process.
  • Automated Repository Priority Updates: Implemented a system to automatically and regularly update repository priorities based on recent activity and new findings.
  • Registry Connector Support: Added support for connecting to container registries and managing multiple tool configurations from a centralized UI.

🛠 Enhancements

  • Major UI Overhaul: Revamped the main user interface for a more modern look, improved navigation, and a more intuitive user experience.
  • Smarter AI-Powered Remediations: Enhanced the AI prompt engine to more accurately target and modify only the necessary dependency files for remediations.
  • Synchronized Live Terminal: Upgraded the live terminal to use a new mechanism, ensuring more reliable, real-time logging. Log messages have also been improved with color-coding and validity levels for better readability.
  • General Stability Improvements: Addressed various issues, including fixes for the GitHub callback flow, the OWASP Top 10 dashboard section, plexalyzer token expiration, and pipeline functionality for special deployments.

📋 Compliance & Customization

  • Redesigned Subscription & Payment System: Overhauled our Stripe integration and improved checkout session handling for a smoother payment experience.

🔧 Integrations

  • Improved GitHub Integration Flow: Refined the GitHub App installation and callback process to create a more seamless and reliable connection experience.
  • Burp Suite Enterprise Support: Users can now import security findings directly from Burp Suite Enterprise scan reports via the UI.
  • dependency-confusion detector Parser: Added a new parser for the dependency-confusion detector tool, expanding our security scanner compatibility.
  • Enhanced CI/CD Actions: Improved our suite of CI/CD actions to support environment-specific variables and secrets.
  • OAuth Token Validation: Strengthened integration security by adding validation for all incoming OAuth tokens.
Qualifizierung

Prüfen Sie, ob AI Swarm Pentest zu Ihrer Umgebung passt.

Teilen Sie den wichtigsten Kontext. Wir prüfen den Umfang und nennen den nächsten kommerziellen Schritt.

Vor dem Absenden — prüfen Sie, ob Sie passen

0 / 280

Keine Verpflichtung. Wenn Sie nicht passen, sagen wir es Ihnen.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Private Runde Für Investoren