Nouveau v1.2.42

Plexicus v1.2.42: Next-Gen AI Pentest Engine, Live Pentest War Room & Automations That Scroll

AI Pentest moves to a next-generation scanning engine with a live War Room, the pentest sidebar gets a fresh AI icon, Automations pages now scroll properly, and certifications gain richer question types and lifecycle management.

🚀 What’s New

  • Next-Generation AI Pentest Engine: AI Pentest scanning now runs on a completely new engine that launches dynamically for each engagement — delivering faster, more efficient penetration tests with a leaner footprint. The pentest sidebar sports a fresh AI brain-circuit icon to match the upgraded experience.
  • Live Pentest War Room: During an active AI Pentest, a new live War Room card shows the scan in progress from the moment it starts — with a Starting badge and waiting state — so you always know your test is underway before the first frame arrives. Real-time agent activity and target expansion are visualized as the scan unfolds.
  • Certifications v2 — Enriched Questions: Certification exams now support per-question explanations (revealed only after a pass or final attempt), weighted scoring, randomized question ordering, and SSRF-safe imagery — making exams fairer, harder to game, and richer as study material.
  • Certifications v2 — Course Lifecycle: Courses can now be in draft, published, or archived state. Admins can preview draft courses, duplicate existing ones, and control exactly what appears in the partner catalogue — no more accidental exposure of unfinished content.

🛠 Improvements

  • Automations Pages Scroll: The Automations, Integrations, and Runs pages now scroll smoothly under the layout, so long template lists and large tables are fully browsable without content getting clipped.
  • Priority Scoring Backfill: A corrected backfill ensures all existing findings carry accurate multi-factor priority scores, so your risk-ranked backlog stays trustworthy after the upgrade.
  • Boot-Time Migrations: Post-deploy setup steps now run automatically at startup — no more manual scripts to remember after an upgrade, and no risk of forgetting a required data migration.

🔧 Fixes

  • War Room Console Stability: The live War Room no longer floods the browser console with color-rendering errors or reconnect loops when the upstream scan stream goes quiet — proxy and error lifecycle frames are now handled cleanly, and the card correctly marks the stream as unavailable instead of retrying forever.
  • On-Prem & Evaluator Tenants: On-premise and evaluator tenants no longer see incorrect subscriptioninactive errors — the Enterprise stamp is now applied properly so local deployments work without SaaS billing checks interfering.
Qualification

Vérifiez si l'AI Swarm Pentest convient à votre environnement.

Partagez le contexte minimum. Nous vérifierons le périmètre et indiquerons la prochaine étape commerciale.

Avant d'envoyer — vérifiez que vous correspondez

0 / 280

Sans engagement. Si vous ne correspondez pas, nous vous le dirons.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Tour privé Pour les investisseurs