Plexicus TUI

Security findings and remediation context, right in your terminal.

A zero-dependency static binary for browsing findings, reviewing vulnerabilities, requesting remediation context, and preparing pull requests without leaving your shell.

Workflow

From finding to a reviewed change, in one terminal.
one terminal.

Sign in, review findings, request a remediation diff, and prepare a pull request from one terminal.

plexicus — authorized-demo-target
$ plexicus login
› Opening browser to authorize this device…
✓ Authenticated as demo user
 
$ plexicus pentest --target authorized-demo-target
› Discovering endpoints (DNS · TLS · OpenAPI · Wayback)…
› Scanning 12 endpoints…
› Found 3 findings (2 verified, 1 requires review)
 
$ plexicus findings list --severity critical,high
CRITICAL Finding-001 authorized-demo-target Access control review
HIGH Finding-002 authorized-demo-target Request validation review
 
$ plexicus findings diff Finding-001 --ai
› Generating a remediation diff for review…
✓ Diff ready — review with `:open Finding-001`
 
$ plexicus findings pr Finding-001 --base main
› Pushed branch fix/finding-001
✓ PR opened: review queue / change-001
0
Setup

Prerequisites

  • macOS (Apple Silicon / Intel) or Linux (x86_64)
  • A Plexicus account with access arranged for your engagement
  • curl + a POSIX shell (no Node.js / Bun runtime required)
1
Download

Install

Download the latest binary for your platform from the GitHub releases page:

Open releases page →
macos · apple silicon
$ curl -fsSL https://github.com/plexicus/tui/releases/latest/download/plexicus-darwin-arm64 \
    -o plexicus && chmod +x plexicus && sudo mv plexicus /usr/local/bin/

macOS Intel, Linux x86_64 and Linux ARM64 binaries available — see the releases page for direct download links.

2
Sanity check

Verify the install

Confirm the binary is on your PATH and prints its version:

$ plexicus --version
plexicus 0.1.0 (darwin-arm64, build a1b2c3d)
3
Authenticate

Authenticate

The first launch opens your browser to the Plexicus web app, which opens a secure browser sign-in. Use --headless for CI environments.

$ plexicus login
› Opening browser to authorize this device…
✓ Authenticated as demo user

Headless mode: plexicus login --headless for CI environments.

4
Scan

Launch a pentest

Specify a target scope and the TUI streams scan progress live while enumerating endpoints, dependencies, and exposure surfaces.

$ plexicus pentest --target authorized-demo-target
› Discovering endpoints (DNS · TLS · OpenAPI · Wayback)…
› Scanning 12 endpoints…
✓ 3 findings · 2 verified · 1 requires review
5
Triage

Browse findings

Browse, filter, and triage every finding surfaced by the platform. Severity, CVSS, EPSS, CWE, language, repository — all filterable from the keyboard.

$ plexicus findings list --severity critical,high
CRITICAL Finding-001 authorized-demo-target Access control review
HIGH Finding-002 authorized-demo-target Request validation review
6
AI Fix

Request an AI diff

Trigger an AI-generated remediation and review the unified diff inline before applying it.

$ plexicus findings diff Finding-001 --ai
› Generating a remediation diff for review…
✓ Diff ready — review with `:open Finding-001`
7
Ship

Open a PR

Push the fix to a branch and open a pull request directly against your connected SCM (GitHub, GitLab, Bitbucket, Gitea).

$ plexicus findings pr Finding-001 --base main
› Pushed branch fix/finding-001
✓ PR opened: review queue / change-001
PLEXICUS TUI

Bereit zu validieren, was zählt.

Plexicus ist Proof-Driven AppSec: validierte Funde, kontextuelles Verständnis und geprüfte Remediation — in Evidenz verankert, mit Ihnen gescoped.

Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit
Do you have a recent classic pentest you're not happy with?

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorised target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)