Reflectiz

Home
Israel
Ramat Gan
Reflectiz

Reflectiz is the AI-powered web exposure company, monitoring everything that runs on live websites.

Explore agentic pentesting, client-side risks, AI agent vulnerabilities, Magecart, supply chain attacks, and PCI DSS gaps most security tools never catch.

01/09/2026

Cyber community, this one is for you🙌. Or Sahar is speaking at Hackeriot 2026.

Hackeriot is a professional community with an important agenda: bringing together young women👧 💻 who want to explore the world of cybersecurity from the inside. No matter who you are, all are welcome to learn together.

Or is bringing real, impactful 💥 research that turned heads at BSides Las Vegas, earned a CVE, and changed how everyone thought about Apache Airflow security. Now it is coming to Hackeriot 2026. Stage after stage, Or keeps showing up for the communities that are building the next generation of security professionals.

This is the kind of community involvement we believe in at Reflectiz. The web is safer when more people understand how it gets attacked, and that knowledge📚 should be shared with everyone who needs to hear it.

The more voices in the room, the stronger the industry gets.

Follow our page for more community highlights coming soon.👋

31/08/2026

Top 3 ways GRC professionals use Reflectiz 👇

1. Turning third-party web risk🕷️ into auditable evidence

66% of CISOs say their GRC platforms are not effective at managing third-party cyber risk. The gap is almost always the client-side layer. Reflectiz monitors every third-party script on your live pages and produces timestamped, QSA-ready evidence automatically. No manual exports before audits.

2. Replacing alert counts🚨 with posture reporting

Reflectiz Policies let GRC teams define standards once and enforce them automatically across your entire web environment. Instead of "we handled 200 alerts this week," you tell leadership "we are meeting our Restricted tier requirements, here are the open gaps." That is the shift boards actually understand.

3. Closing the PCI DSS 6.4.3 and 11.6.1 gap💳 before the QSA arrives

Most GRC teams discover client-side compliance gaps during audits, not before. Reflectiz monitors payment page scripts continuously, flags behavioral changes the moment they happen, and generates the exact evidence format your QSA needs. Every published customer audit ended with zero observations.
GRC does not need more alerts. It needs proof, posture, and continuous visibility into what is actually running on your website.

👉https://hubs.ly/Q04vQC9q0

30/08/2026

Our team is focused on strong contribution and development 💻

28/08/2026

Are you red🔴 or blue🔵? Don't tell us your grey...😱

That's a real stat by the way from this report: https://hubs.ly/Q04vvgHH0

27/08/2026

The OWASP Top 10 is updated and this is what every security team needs to know in 2026. 🔥

Read the full breakdown 👉 https://hubs.ly/Q04vvCvy0

Two things stood out 💥 from the new list.

Software Supply Chain Failures 🔗 at number 3 with the highest incidence rate on the entire list, yet only 11 CVEs map to it. You cannot scan for a signature that does not exist.

And number 7 will surprise you...

One compromised script can hit four OWASP categories at once. The full guide breaks down all ten and exactly where conventional tools stop covering you.

If you are a security leader👆 this is a must read for you and your team!!

26/08/2026

Celebrating a big win for a client🥂

To really enjoy your summer vacation, you need to know someone has your back.

Because web risks don't take August off. The code still changes and new risks appear on payment pages while security teams are out of office.

This week we had a big win with one of our clients. The kind that reminds you why we do this.

Enjoy your vacation. We got your back. 🌊

Proud of our talented team, and even more proud of what we are doing for our clients and the people they serve.

25/08/2026

Agentic AI is reshaping how we test, how we defend, and how attackers exploit the gaps in between. 🗡️

Full edition in this month's newsletter 👇
https://hubs.ly/Q04v96Rw0

This month's edition goes deep on the new era of pentesting: why your agentic security tool might be flying blind, how continuous testing actually works, what it really costs, and how to choose the right platform when every vendor claims the same thing.

24/08/2026

Why Reflectiz? #2: Web🕸️is what we do.

Since day one☝️ And our founders were doing it before Reflectiz even existed.

Because the web is two things at once: your most valuable, front-facing application and your most exposed attack surface🔴That combination is what makes it uniquely dangerous, and uniquely overlooked.

The browser, the scripts, the third parties, everything running inside your users' sessions without anyone noticing. That is where we live.

That focus🎯changes everything.

Our threat intelligence comes from scanning thousands of live websites. When PCI DSS 4.0.1 introduced client-side requirements, we already had customers ready for it. When Magecart evolved, when supply chain🔗 attacks got more sophisticated, when AI started generating new attack vectors, we were already there.

You cannot fake that depth.

That is why Reflectiz. 👉 https://hubs.ly/Q04tYCKB0

23/08/2026

Everyone runs Apache Airflow. Almost nobody treats it like what it is😅

Read the full breakdown 👉 https://hubs.ly/Q04tXGDC0

In three days of research, our very own security researcher ,Or Sahar, found real exposed production instances leaking live credentials in plaintext, a ticketing platform exposing live barcodes for major league clients, and a brand new CVE she responsibly disclosed to the Apache Airflow security team: CVE-2026-45192, now patched in version 3.2.2.

The vulnerability is not a bug in the traditional sense. The Connection API redacts secrets by field name, not by value. Fields like webhook_url come back in plaintext because nobody added that name to the allowlist. Airflow's own Slack documentation uses exactly that field name.

Curious, responsible, and genuinely useful to the people who need it most. This is what good security research looks like.

If Apache Airflow runs anywhere in your stack, this one is required reading.

22/08/2026

The old fable taught us that slow and steady 🐢 wins the race.
That trick does not work anymore 🐰

For a long time, that was true in security too. Methodical. Periodic. Annual.
Take your time, run a thorough test, write the report.

Then AI showed up to the starting line.

Attackers now move in minutes. Vulnerabilities get weaponized in a few hours. Your web application ships new code every sprint.

"Slow and steady"? You're gonna lose 😰

Offensive Hub brings agentic pe*******on testing to the modern web. AI agents that map, attack, validate, and report continuously across your most critical web assets.

And this is just one hub. Reflectiz runs agentic intelligence across security monitoring, privacy enforcement, and compliance automation.

The race changed. We built for the new rules.

👉 https://hubs.ly/Q04sK7DV0

Address

Shoham Street 5
Ramat Gan

Website

https://www.reflectiz.com/

Alerts

Be the first to know and let us send you an email when Reflectiz posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Reflectiz:

Want your business to be the top-listed Computer & Electronics Service in Ramat Gan?