Plexicus × La Nave · Startup Program

ASPM built for the era of agentic AI.

Six months of Plexicus Starter for La Nave startups.

Autonomous application security for every La Nave startup — AI scans and filters findings, then delivers remediations as pull requests your team can review.

Apply for the program

Enrollment open 15 Sep 2026 → 15 Sep 2027 · 6 free months from your activation date

The benefit

The Starter plan, free for 6 months

Every startup accepted into the program gets the full Plexicus Starter plan — not a stripped-down trial.

Unlimited developers & repos

Your whole team and every repository, covered. Security that doesn't charge you for growing.

1,500 AI credits every month

1,500 credits for AI-powered actions each month. Remediations can be delivered as pull requests your team can review.

Jira & compliance mapping

Connect findings to Jira and use NIS2/DORA compliance mapping included in the Starter plan.

Built for AI-written code

Purpose-built to catch what Cursor, Copilot, Claude Code, and other AI assistants introduce — plus your legacy stack.

How it works

From application to autonomous fixes in three steps

1

Apply below

Tell us about your startup. It takes two minutes — no credit card, no commitment.

2

We verify with La Nave

We confirm your La Nave membership within 5 business days and activate your Starter plan.

3

Fix vulnerabilities for 6 months

Your 6 free months start on your activation date — whenever you join inside the enrollment window, you get the full benefit.

Plexicus × La Nave · Startup Program

Apply for the Startup Program

Two minutes now, six months of autonomous security after.

AI coding tools you use (optional)
Is your startup part of a current La Nave program? *

No credit card · Verification within 5 business days · One benefit per startup

Program terms

The fine print, in plain language

  • Enrollment is open from 15 September 2026 to 15 September 2027 for startups that are part of La Nave (Madrid).
  • The benefit is the Plexicus Starter plan, free for 6 months from your activation date — not from the program start date.
  • Activation happens after we verify your La Nave membership. One benefit per startup.
  • At the end of the 6 months you can keep Plexicus on a paid plan or walk away — no automatic charges, ever.
FAQ

Questions, answered

Who can apply?

Any startup that is part of La Nave Madrid's programs. We verify membership with La Nave after you apply — you don't need to prove anything in the form.

When do my 6 free months start?

On your activation date, not on the program start date. If you join any time before 15 September 2027, you still get the full 6 months.

What exactly is included?

The full Starter plan: unlimited developers and repositories, 1,500 AI credits per month, automated remediation delivered via pull requests, Jira integration, and NIS2/DORA compliance mapping.

What happens after the 6 months?

You choose: continue on a paid plan or stop. We never auto-convert and never charge your card — we don't even ask for it.

Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

Teams with fewer than 50 developers: start a 14-day Trial instead of booking a demo. Start a 14-day Trial →

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorised target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)