Plexicus TUI

Security findings and remediation context, right in your terminal.

A zero-dependency static binary for browsing findings, reviewing vulnerabilities, requesting remediation context, and preparing pull requests without leaving your shell.

Workflow

From finding to a reviewed change, in one terminal.
one terminal.

Sign in, review findings, request a remediation diff, and prepare a pull request from one terminal.

plexicus — authorized-demo-target
$ plexicus login
› Opening browser to authorize this device…
✓ Authenticated as demo user
 
$ plexicus pentest --target authorized-demo-target
› Discovering endpoints (DNS · TLS · OpenAPI · Wayback)…
› Scanning 12 endpoints…
› Found 3 findings (2 verified, 1 requires review)
 
$ plexicus findings list --severity critical,high
CRITICAL Finding-001 authorized-demo-target Access control review
HIGH Finding-002 authorized-demo-target Request validation review
 
$ plexicus findings diff Finding-001 --ai
› Generating a remediation diff for review…
✓ Diff ready — review with `:open Finding-001`
 
$ plexicus findings pr Finding-001 --base main
› Pushed branch fix/finding-001
✓ PR opened: review queue / change-001
0
Setup

Prerequisites

  • macOS (Apple Silicon / Intel) or Linux (x86_64)
  • A Plexicus account with access arranged for your engagement
  • curl + a POSIX shell (no Node.js / Bun runtime required)
1
Download

Install

Download the latest binary for your platform from the GitHub releases page:

Open releases page →
macos · apple silicon
$ curl -fsSL https://github.com/plexicus/tui/releases/latest/download/plexicus-darwin-arm64 \
    -o plexicus && chmod +x plexicus && sudo mv plexicus /usr/local/bin/

macOS Intel, Linux x86_64 and Linux ARM64 binaries available — see the releases page for direct download links.

2
Sanity check

Verify the install

Confirm the binary is on your PATH and prints its version:

$ plexicus --version
plexicus 0.1.0 (darwin-arm64, build a1b2c3d)
3
Authenticate

Authenticate

The first launch opens your browser to the Plexicus web app, which opens a secure browser sign-in. Use --headless for CI environments.

$ plexicus login
› Opening browser to authorize this device…
✓ Authenticated as demo user

Headless mode: plexicus login --headless for CI environments.

4
Scan

Launch a pentest

Specify a target scope and the TUI streams scan progress live while enumerating endpoints, dependencies, and exposure surfaces.

$ plexicus pentest --target authorized-demo-target
› Discovering endpoints (DNS · TLS · OpenAPI · Wayback)…
› Scanning 12 endpoints…
✓ 3 findings · 2 verified · 1 requires review
5
Triage

Browse findings

Browse, filter, and triage every finding surfaced by the platform. Severity, CVSS, EPSS, CWE, language, repository — all filterable from the keyboard.

$ plexicus findings list --severity critical,high
CRITICAL Finding-001 authorized-demo-target Access control review
HIGH Finding-002 authorized-demo-target Request validation review
6
AI Fix

Request an AI diff

Trigger an AI-generated remediation and review the unified diff inline before applying it.

$ plexicus findings diff Finding-001 --ai
› Generating a remediation diff for review…
✓ Diff ready — review with `:open Finding-001`
7
Ship

Open a PR

Push the fix to a branch and open a pull request directly against your connected SCM (GitHub, GitLab, Bitbucket, Gitea).

$ plexicus findings pr Finding-001 --base main
› Pushed branch fix/finding-001
✓ PR opened: review queue / change-001
PLEXICUS TUI

Listo para validar lo que importa.

Plexicus es Proof-Driven AppSec: hallazgos validados, comprensión contextual y remediación revisada — anclada en evidencia, acotada contigo.

Calificación

Comprueba si el AI Swarm Pentest encaja en tu entorno.

Déjanos el contexto mínimo. Revisaremos el alcance y te indicaremos el siguiente paso comercial.

Antes de enviar — verifica que encajas
¿Tienes un pentest clásico reciente con el que no estás satisfecho?

0 / 280

Sin compromiso. Si no encajas, te lo decimos.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorised target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)