New v1.2.42

Plexicus v1.2.42: Next-Gen AI Pentest Engine, Live Pentest War Room & Automations That Scroll

AI Pentest moves to a next-generation scanning engine with a live War Room, the pentest sidebar gets a fresh AI icon, Automations pages now scroll properly, and certifications gain richer question types and lifecycle management.

🚀 What’s New

  • Next-Generation AI Pentest Engine: AI Pentest scanning now runs on a completely new engine that launches dynamically for each engagement — delivering faster, more efficient penetration tests with a leaner footprint. The pentest sidebar sports a fresh AI brain-circuit icon to match the upgraded experience.
  • Live Pentest War Room: During an active AI Pentest, a new live War Room card shows the scan in progress from the moment it starts — with a Starting badge and waiting state — so you always know your test is underway before the first frame arrives. Real-time agent activity and target expansion are visualized as the scan unfolds.
  • Certifications v2 — Enriched Questions: Certification exams now support per-question explanations (revealed only after a pass or final attempt), weighted scoring, randomized question ordering, and SSRF-safe imagery — making exams fairer, harder to game, and richer as study material.
  • Certifications v2 — Course Lifecycle: Courses can now be in draft, published, or archived state. Admins can preview draft courses, duplicate existing ones, and control exactly what appears in the partner catalogue — no more accidental exposure of unfinished content.

🛠 Improvements

  • Automations Pages Scroll: The Automations, Integrations, and Runs pages now scroll smoothly under the layout, so long template lists and large tables are fully browsable without content getting clipped.
  • Priority Scoring Backfill: A corrected backfill ensures all existing findings carry accurate multi-factor priority scores, so your risk-ranked backlog stays trustworthy after the upgrade.
  • Boot-Time Migrations: Post-deploy setup steps now run automatically at startup — no more manual scripts to remember after an upgrade, and no risk of forgetting a required data migration.

🔧 Fixes

  • War Room Console Stability: The live War Room no longer floods the browser console with color-rendering errors or reconnect loops when the upstream scan stream goes quiet — proxy and error lifecycle frames are now handled cleanly, and the card correctly marks the stream as unavailable instead of retrying forever.
  • On-Prem & Evaluator Tenants: On-premise and evaluator tenants no longer see incorrect subscriptioninactive errors — the Enterprise stamp is now applied properly so local deployments work without SaaS billing checks interfering.
Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Private Round For investors