Nuevo v1.2.32

Plexicus v1.2.32: Smoother GitLab Onboarding, Sharper Findings Exports & Deeper Code Analysis

Connect GitLab repositories with fewer friction points, export findings with precision, and benefit from a faster, more reliable deep semantic code analysis pipeline.

🚀 What’s New

  • Deep Analysis Index Snapshots: Deep Analysis now restores a pre-built code-graph snapshot during false-positive detection instead of re-reading your repository file by file. This makes verification passes significantly faster and more reliable for large codebases.
  • AI Usage Visibility: Per-run AI usage logs and drilldown views give you deeper insight into how AI features are being consumed across your organization — perfect for understanding where your AI credits are going.

🛠 Improvements

  • GitLab Connect Flow: Connecting GitLab repositories is now smoother and more reliable. The OAuth flow no longer corrupts your server URL, the repository picker includes groups alongside personal projects without duplicating them, and identically-named groups are clearly disambiguated so you always pick the right one. Projects where your connected account has Reporter or Developer access are also no longer excluded from the picker.
  • Findings Export Precision: When you export findings to JSON or PDF, the download is now correctly scoped to the finding type you requested. Repository filters applied via typed queries are also honored in JSON exports, so what you see in the list is exactly what you get in the file.

🔧 Fixes

  • Findings List Filters: Your active list filters are now preserved when you navigate into a finding’s detail page and return — no more re-applying your view after every click.
  • Registry Audit Visibility: Registry audit results are now reliably visible when expected, and cloud and SCM remediation actions are properly gated so they only proceed when the right conditions are met.
Calificación

Comprueba si el AI Swarm Pentest encaja en tu entorno.

Déjanos el contexto mínimo. Revisaremos el alcance y te indicaremos el siguiente paso comercial.

Antes de enviar — verifica que encajas

Equipos con menos de 50 desarrolladores: empieza una prueba de 14 días en lugar de reservar una demo. Empieza una prueba de 14 días →

0 / 280

Sin compromiso. Si no encajas, te lo decimos.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorised target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)