Nye BlackDuck-integrationer forbedrer sikkerhedsscanningsmulighederne i Plexicus

Opdag hvordan Plexicus' nye BlackDuck-integration forbedrer open-source sikkerhed med realtids sårbarhedsdetektion, automatiseret risikoprioritering og problemfri DevSecOps-arbejdsgange.

José Palanco José Palanco
Last Updated:
2 min read
Share
Nye BlackDuck-integrationer forbedrer sikkerhedsscanningsmulighederne i Plexicus

Beyond ASPM

Proof-Driven AppSec for teams building with AI

Plexicus uses AI Swarm Pentest to explore authorised application paths, validate what is exploitable, and give teams evidence they can use to prioritise remediation.

Explore AI Swarm Pentest

Santa Clara, CA – 13. februar 2025 – Plexicus, en førende innovator inden for Application Security Posture Management (ASPM), annoncerede i dag nye integrationer med BlackDuck, en førende open-source sikkerheds- og compliance-løsning. Denne strategiske integration forbedrer Plexicus’ AI-drevne sikkerhedsplatform, hvilket giver organisationer dybere indsigt og hurtigere afhjælpning af open-source sårbarheder.

“Vores partnerskab med BlackDuck repræsenterer et stort skridt fremad inden for proaktiv sikkerhed,” sagde Jose Ramon Palanco, grundlægger af Plexicus. “Ved at kombinere BlackDucks robuste SCA-kapaciteter med vores AI-drevne ASPM-platform, giver vi sikkerheds- og udviklingsteams de værktøjer, de har brug for til at identificere, prioritere og afhjælpe trusler hurtigere end nogensinde før.”

Nøglefordele ved BlackDuck-integration:

  • Omfattende Open-Source Sikkerhed – Opdag og afhjælp sårbarheder i open-source biblioteker og afhængigheder.
  • Automatiseret Risikoprioritering – AI-drevet risikoanalyse hjælper teams med at fokusere på de mest kritiske trusler først.
  • Problemfri DevSecOps Workflow – Integreret scanning inden for CI/CD-pipelines sikrer sikkerhed uden at bremse udviklingen.
  • Overholdelse af Regulatoriske Krav – Forbedret synlighed i open-source licensering og overholdelseskrav.

Plexicus fortsætter med at omdefinere cybersikkerhed med sin innovative, AI-drevne tilgang til ASPM. Ved at integrere BlackDucks betroede SCA-teknologi styrker virksomheden sin mission om at give virksomheder en smartere og mere effektiv måde at håndtere sikkerhedsrisici på.

Om Plexicus

Baseret i Santa Clara, CA, er Plexicus et AI-drevet cybersikkerhedsfirma, der baner vejen for fremtiden inden for Application Security Posture Management (ASPM). Grundlagt med missionen om at revolutionere sikkerhed gennem automatisering og intelligens, giver Plexicus organisationer mulighed for proaktivt at håndtere sårbarheder og overholdelse på tværs af deres applikationslandskaber.

Written by
José Palanco
José Palanco
José Ramón Palanco is the CEO/CTO of Plexicus, a pioneering company in ASPM (Application Security Posture Management) launched in 2024, offering AI-powered remediation capabilities. Previously, he founded Dinoflux in 2014, a Threat Intelligence startup that was acquired by Telefonica, and has been working with 11paths since 2018. His experience includes roles at Ericsson`s R&D department and Optenet (Allot). He holds a Telecommunications Engineering degree from the University of Alcala de Henares and a Master`s in IT Governance from the University of Deusto. As a recognized cybersecurity expert, he has been a speaker at various prestigious conferences including OWASP, ROOTEDCON, ROOTCON, MALCON, and FAQin. His contributions to the cybersecurity field include multiple CVE publications and the development of various open source tools such as nmap-scada, ProtocolDetector, escan, pma, EKanalyzer, SCADA IDS, and more.
Read More from José
More to read

Related posts

SAST vs DAST: Hvad er forskellen, og hvorfor du bør bruge begge
Cybersecurity

SAST vs DAST: Hvad er forskellen, og hvorfor du bør bruge begge

SAST og DAST er sikkerhedstestmetoder, der bruges til at beskytte applikationer mod angreb. For at se, hvordan hver enkelt hjælper med applikationssikkerhed, lad os se på deres forskelle og hvor de passer ind i din arbejdsgang

José Palanco José Palanco ·
Webapplikationssikkerhed: Bedste praksis, test og vurdering for 2026
Cybersecurity

Webapplikationssikkerhed: Bedste praksis, test og vurdering for 2026

Webapplikationssikkerhed er afgørende for at beskytte dine apps mod cyberangreb, der målretter følsomme data og forstyrrer driften. Denne guide dækker vigtigheden af webappsikkerhed, almindelige sårbarheder, bedste praksis og testmetoder, der hjælper dig med at sikre din applikation, sikre overholdelse og opretholde brugertillid

José Palanco José Palanco ·
15 DevSecOps-trends til at sikre din virksomhed
Cybersecurity

15 DevSecOps-trends til at sikre din virksomhed

Et mareridtsagtigt sikkerhedsbrud er blevet en realitet for mange europæiske virksomheder. Lær de 15 transformative DevSecOps-trends, du skal kende for at undgå at komme på brudlisten.

José Palanco José Palanco ·
Ready to validate what matters?

Ready to validate what matters?

Plexicus is Proof-Driven AppSec: validated findings, contextual understanding, and reviewed remediation — anchored in evidence, scoped with you.

Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

Teams with fewer than 50 developers: start a 14-day Trial instead of booking a demo. Start a 14-day Trial →

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorised target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)