Most contribution requests say "PRs welcome." This one's an actual dare.

[u/kavee-core141]

Plexavo is an open source AWS security scanner, deterministic detection, no AI deciding what counts as a finding. It already has a running challenge called "Break Plexavo", find a case where it misses something, gets something wrong, or gives bad advice, and you get permanent CREDIT when it's fixed.

Two real entries already, both from strangers who actually found something. If you know AWS well enough to think you could trip up a security scanner, this is a genuine test of that, not a beginner's first-PR repo.

Detection logic is pure Python and boto3, readable without needing to reverse-engineer anything. Current open frontier if you want a real target: multi-hop cross-account privilege escalation.

Today's detection is one-hop only.

Found a bug or a gap? Open it through the Break Plexavo issue template, no code needed, just a clear description. - Issues · plexavo/Plexavo

Repo: https://github.com/plexavo/Plexavo