Boston, MA, USA, September eighth, 2026, CyberNewswire
Specialised crew of AI brokers that uncover, assault, and validate net vulnerabilities, leveraging pre-existing web site context to get rid of noise and pace remediation.
Reflectiz, the continual net publicity administration firm, at the moment launched a multi-agent penetration testing platform for web sites.
A number of specialised AI brokers uncover, assault, and validate vulnerabilities throughout complicated net environments, and since they begin from an present mannequin of every web site, they cowl as much as ten instances greater than typical pentesting instruments.
A pentest was an occasion. An engagement, a report, carried out. The report described a second. The web site saved going: login, checkout, funds, dozens of third-party scripts, all probed by attackers day by day.
“Web sites change each week and get pentested a few times a yr. That hole is the place publicity builds up,” mentioned Idan Cohen, CEO and co-founder of Reflectiz. “Groups want testing that retains up with releases at a value they’ll maintain, and trusted protection of what was examined.”
Whereas others begin each check blind, Reflectiz already is aware of the web site.
Reflectiz has spent a decade scanning hundreds of manufacturing web sites and holds a reside mannequin of every one: pages, scripts, third events, domains, delicate inputs, and behaviors.
The pentesting brokers add the attacker’s perspective to that very same mannequin.
A discovering doesn’t arrive as a line merchandise. It arrives with the script concerned, the information it might probably attain, and whether or not actual customers are uncovered proper now, permitting groups to skip the investigation and go straight to the repair.
“The laborious a part of net pentesting was by no means the payload. It was understanding what the appliance truly does,” mentioned Ysrael Gurt, CTO and co-founder of Reflectiz.
“Our engine has been studying reside web sites for years, so our brokers begin with a map of the location that different instruments by no means construct.”
A crew of specialised brokers, not one other scanner
The agentic pentesting runs as a coordinated crew of AI brokers, every with an outlined function:
- One agent crawls the location the best way an actual consumer does, via logins, one-time codes, and 2FA, mapping what is definitely there.
- A second fingerprints the stack and works out which assaults apply the place.
- A 3rd runs these assaults and chains what it finds.
- The fourth issues most: an impartial validator reproduces each discovering earlier than it reaches the report. False positives are eliminated by design.
The end result: findings with copy steps and proof, plus a protection map of what was examined and cleared.
Testing spans the total OWASP High 10, and groups set depth per move, from quick predefined checks to expert-level assault chains on essential property.
Finishing the 360° map of net threat
The agentic pentesting, a part of the brand new Offensive Hub, joins Safety Hub and Privateness Hub on the Reflectiz platform, finishing a 360° map of net threat: what runs on the web site, what information it touches, and the way it may be attacked.
- One publicity image. Findings from all three hubs cross-reference robotically, no dashboards reconciled by hand.
- Guided fixes. Atlas, the Reflectiz AI remediation agent, explains every threat and walks the crew via the repair.
- Current workflows. Outcomes route into present operations via a REST API, CI/CD triggers, and Slack alerts.
See it reside
Reflectiz founders Idan Cohen and Ysrael Gurt will exhibit the agentic pentesting in a reside webinar on September 15 at 11 AM ET / 6 PM CET.
Registration: https://www.reflectiz.com/lp/founders-case-study-webinar/
Product data: Reflectiz Offensive Hub | Walkthrough Video

About Reflectiz
Reflectiz is the continual net publicity administration firm. Its agentless, outside-in platform displays, checks, and secures your complete net layer, from third-party scripts and net privateness threat to agentic penetration testing of the reside web site.
Reflectiz helps enterprises in retail, finance, journey, insurance coverage, healthcare, and gaming meet PCI DSS, DORA, NIS2, and international privateness necessities with out touching a line of code. Study extra at https://www.reflectiz.com.
Advertising and marketing Supervisor
Oran Frenkel
Reflectiz









