Nouveau 2025.9.16

Plexicus 2025.9.16: Platform Evolved: A Major Leap in Connectivity and Enhanced Controls

**Internationalization (i18n) Support — ** The Plexicus platform is now equipped for multiple languages, with initial translations…

🚀 New Features

  • Internationalization (i18n) Support: The Plexicus platform is now equipped for multiple languages, with initial translations rolled out across the Dashboard, Applications, Findings, Integrations, and Settings pages to support our global user base.
  • Domain Management for Integrations: Implemented a new workflow for managing and validating domains within integration providers, simplifying the setup process.
  • Automated Repository Priority Updates: Implemented a system to automatically and regularly update repository priorities based on recent activity and new findings.
  • Registry Connector Support: Added support for connecting to container registries and managing multiple tool configurations from a centralized UI.

🛠 Enhancements

  • Major UI Overhaul: Revamped the main user interface for a more modern look, improved navigation, and a more intuitive user experience.
  • Smarter AI-Powered Remediations: Enhanced the AI prompt engine to more accurately target and modify only the necessary dependency files for remediations.
  • Synchronized Live Terminal: Upgraded the live terminal to use a new mechanism, ensuring more reliable, real-time logging. Log messages have also been improved with color-coding and validity levels for better readability.
  • General Stability Improvements: Addressed various issues, including fixes for the GitHub callback flow, the OWASP Top 10 dashboard section, plexalyzer token expiration, and pipeline functionality for special deployments.

📋 Compliance & Customization

  • Redesigned Subscription & Payment System: Overhauled our Stripe integration and improved checkout session handling for a smoother payment experience.

🔧 Integrations

  • Improved GitHub Integration Flow: Refined the GitHub App installation and callback process to create a more seamless and reliable connection experience.
  • Burp Suite Enterprise Support: Users can now import security findings directly from Burp Suite Enterprise scan reports via the UI.
  • dependency-confusion detector Parser: Added a new parser for the dependency-confusion detector tool, expanding our security scanner compatibility.
  • Enhanced CI/CD Actions: Improved our suite of CI/CD actions to support environment-specific variables and secrets.
  • OAuth Token Validation: Strengthened integration security by adding validation for all incoming OAuth tokens.
Qualification

Vérifiez si l'AI Swarm Pentest convient à votre environnement.

Partagez le contexte minimum. Nous vérifierons le périmètre et indiquerons la prochaine étape commerciale.

Avant d'envoyer — vérifiez que vous correspondez

0 / 280

Sans engagement. Si vous ne correspondez pas, nous vous le dirons.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Tour privé Pour les investisseurs