Update: turned "please test my tool" into "can you make it fail"

A while back I posted here looking for beta testers for Plexavo, an open-source AWS scanner.

A few of you actually ran it. That got me thinking the ask itself was backwards. "Please test my scanner" puts you in the position of doing me a favor.

So instead: Can you make Plexavo miss something? Just launched a proper program for it. Submit a false positive, a false negative, a weird IAM edge case, a detection bypass, anything that trips it up. Every confirmed one gets fixed and you get permanent credit in a public Hall of Bugs. Bug #1 is already up, and it's a good one: someone here mentioned a few weeks ago that Plexavo's sample report showed an S3 logging check but theirs skipped it.

I assumed it was a region thing. Turned out there was no check for S3 bucket logging anywhere in the codebase at all not broken, just never built. Real gap, now fixed, credited properly.

Repo + the actual issue template: https://github.com/plexavo/Plexavo

Curious what breaks it next.