Private Round Access

Be part of Plexicus's next chapter

Plexicus builds AI security for applications, APIs and code. Register your interest in our private round. The Plexicus team reviews every registration and contacts you privately.

Joining the Waiting List is an expression of interest. No investment is accepted here, no payment is taken and no allocation is reserved.

Round snapshot

Building toward the round target

Provisional figures shared by the Plexicus team. Subject to final confirmation before public launch.

01Plexicus is conducting a private investment round.

02Register your interest and the Plexicus team will contact you.

03Review the opportunity before deciding.

Discover Plexicus

The product. The problem. The person behind it.

Explore the platform
  1. Find risk
  2. Validate
  3. Remediate
The company

AI security for the software teams depend on

Plexicus helps security and engineering teams find and address risk across applications, APIs and source code, including AI-generated and legacy code.

The product

From a finding to a fix teams can review

Plexicus combines security scanning, AI Swarm Pentest and AI-assisted remediation to help teams validate exposure, prioritize fixes and review the supporting evidence.

Why now

Faster development needs security that keeps pace

AI-assisted development adds to the code teams must secure. Plexicus brings testing and remediation into the workflow, so security can move with software delivery.

Product areas

AI Swarm Pentest. Deep Code Analysis. Remediation.

Application and API testing, deep code analysis and reviewed remediation bring real risk into view and help teams act on it.

How we sell

From a scoped test to an annual program

Businesses buy an initial AI Swarm Pentest, ongoing coverage through an annual Continuous Program, or a custom enterprise engagement.

The next chapter

Understand what this round will support

Ask the Plexicus team about product priorities and the proposed use of funds. Review the funding plan and milestones in the round materials before deciding.

José Ramón Palanco

José Ramón Palanco

Founder & CEO/CTO

20 years in cybersecurity Dinoflux founder → Telefónica acquisition Published vulnerabilities + open-source tools

Founder track record

Security experience that predates Plexicus

José Ramón Palanco is Plexicus's Founder and CEO/CTO. He brings 20 years in cybersecurity and offensive research, including published vulnerabilities, security tools and complex incident work. He previously founded Dinoflux, a threat-intelligence company acquired by Telefónica.

Meet the founder

Your next steps

Start with a conversation

Register your interest. The Plexicus team reviews each registration, contacts you privately and shares the private access link once the opportunity page is live.

01

Register your interest

Share your contact details and indicative ticket, and authorize Plexicus to contact you about the round.

02

Hear from Plexicus

The Plexicus team reviews your registration and contacts you privately to answer your questions.

03

Access the opportunity

Once the opportunity page is live, Plexicus shares the private access link with you. Review the materials, terms and risks before deciding.

Private Round Access

Join the Waiting List

Let's talk about the round

Leave your details and the Plexicus team will contact you privately. Your registration is non-binding.

Your indicative ticket helps us prepare. It is non-binding and does not reserve a seat or set terms.

This form is about investing in Plexicus. For product support, please use our support channels.

Private Investment FAQ

Before you register.

Is the private round happening?

Yes. Plexicus is conducting a private investment round. This page lets interested people register early. The Plexicus team reviews each registration and contacts you privately.

Does registration mean I am investing?

No. It is a non-binding expression of interest. It does not accept an investment or reserve a seat.

What happens after I register?

The Plexicus team reviews your registration and contacts you privately. Once the opportunity page is live, we share the private access link with you.

What are the risks I should understand?

Early-stage investing in private companies is high risk. The value of your investment can fall as well as rise, and you may not be able to sell your shares easily. Dilution, lack of liquidity and total loss of capital are all possible. You will receive the formal risk disclosure document before you commit.

What jurisdictions can participate?

The private round is structured for Spanish and broader EU investors under current Spanish equity-crowdfunding regulation. Non-EU investors should ask the Plexicus team about eligibility and any required local filings before committing.

Will I be added to a marketing email sequence?

No. This form is only used to contact you about the private round, not to add you to an automated marketing sequence.

Who will receive my details?

Plexicus uses the details you authorize in the checkbox to contact you about the round. They are shared with our placement partner only to give you access to the opportunity.

Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)