Nouveau 2025.4.15

Plexicus 2025.4.15: Power Up: New Features, Better Flow

**Microsoft Marketplace integration** is now available, including subscription support.

🚀 New Features

  • Microsoft Marketplace integration is now available, including subscription support.
  • Total Finding Graphs can be filtered from selected repositories.
  • Create Remediation supported timeout handling for more reliable processing.
  • Google authentication now supports terms & conditions display after register for first time.
  • Introducing Trial plans will be the default plan for users.

🛠 Enhancements

  • Optimized sidebar behavior and banner styling for better navigation.
  • Updated layout visuals for login and error screens.
  • Smoother tab component styling for improved UI consistency.
  • Better error handling across payment flows and remediation systems.
  • Updated project ID handling for GitLab plugin integrations.

📋 Compliance & Customization

  • Adjusted subscription flow logic for more accurate behavior when switching plans.
  • Added validation and expiration fields for free-to-trial upgrades, only valid for 30 days after user registered.
  • Expanded support for self-hosted GitLab URLs.

🔧 Integrations

  • Checkmarx integration is now supported.
  • GitLab authorization scopes and plugin systems have been improved.
Qualification

Vérifiez si l'AI Swarm Pentest convient à votre environnement.

Partagez le contexte minimum. Nous vérifierons le périmètre et indiquerons la prochaine étape commerciale.

Avant d'envoyer — vérifiez que vous correspondez

0 / 280

Sans engagement. Si vous ne correspondez pas, nous vous le dirons.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Tour privé Pour les investisseurs