Neu v1.2.32

Plexicus v1.2.32: Smoother GitLab Onboarding, Sharper Findings Exports & Deeper Code Analysis

Connect GitLab repositories with fewer friction points, export findings with precision, and benefit from a faster, more reliable deep semantic code analysis pipeline.

🚀 What’s New

  • Deep Analysis Index Snapshots: Deep Analysis now restores a pre-built code-graph snapshot during false-positive detection instead of re-reading your repository file by file. This makes verification passes significantly faster and more reliable for large codebases.
  • AI Usage Visibility: Per-run AI usage logs and drilldown views give you deeper insight into how AI features are being consumed across your organization — perfect for understanding where your AI credits are going.

🛠 Improvements

  • GitLab Connect Flow: Connecting GitLab repositories is now smoother and more reliable. The OAuth flow no longer corrupts your server URL, the repository picker includes groups alongside personal projects without duplicating them, and identically-named groups are clearly disambiguated so you always pick the right one. Projects where your connected account has Reporter or Developer access are also no longer excluded from the picker.
  • Findings Export Precision: When you export findings to JSON or PDF, the download is now correctly scoped to the finding type you requested. Repository filters applied via typed queries are also honored in JSON exports, so what you see in the list is exactly what you get in the file.

🔧 Fixes

  • Findings List Filters: Your active list filters are now preserved when you navigate into a finding’s detail page and return — no more re-applying your view after every click.
  • Registry Audit Visibility: Registry audit results are now reliably visible when expected, and cloud and SCM remediation actions are properly gated so they only proceed when the right conditions are met.
Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

Teams with fewer than 50 developers: start a 14-day Trial instead of booking a demo. Start a 14-day Trial →

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorised target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)