Skip to main content

Key Features

Below is an overview of the core capabilities of Plexicus that help you build, deploy, and operate applications with confidence.

1. Application Security (AppSec)​

Secure your applications from the earliest stages of development. Plexicus's AppSec capabilities integrate directly into your CI/CD pipeline to identify and remediate vulnerabilities in your code and open-source dependencies.

  • Static Application Security Testing (SAST)
    Detect vulnerabilities in your source code with tools like Checkmarx, Semgrep, and Fortify, ensuring compliance with standards like the OWASP Top 10.
  • Software Composition Analysis (SCA)
    Identify vulnerable dependencies and manage license compliance across all major package managers with the plexicus-sca and plexicus-license bundles, and generate full SBOMs with plexicus-sbom.
  • Secrets Scanning
    Prevent exposure of sensitive credentials like API keys and passwords with the plexicus-secrets bundle — including Git-history scanning and live verification against issuing services.
  • Infrastructure as Code (IaC) Security
    Scan Terraform, CloudFormation, Kubernetes, Helm, and other IaC definitions for policy violations with the plexicus-iac and plexicus-cicd bundles.

2. Container Security​

Protect the containerized applications declared in your repositories. Plexicus scans Dockerfiles and the images they define, together with the Kubernetes manifests that deploy them.

  • Vulnerability Scanning
    Identify known vulnerabilities in the container images your repositories declare with the plexicus-container bundle.
  • Secure Configuration
    Ensure the Dockerfiles and Kubernetes manifests in your repositories are configured securely to prevent common attack vectors.

3. Supply-Chain Security​

Audit the integrity of your software supply chain and the posture of your source control.

  • Supply-chain posture
    Audit SLSA supply-chain compliance and source-control settings with the plexicus-scm bundle.
  • Bills of materials
    Generate SBOM, CBOM and AIBOM inventories with the plexicus-sbom, plexicus-cbom and plexicus-aibom bundles, and combine them in the XBOM.