Boston, MA, USA – September 8, 2026 – Reflectiz, a leader in continuous web exposure management, has launched a revolutionary multi-agent penetration testing platform designed specifically for websites. This new solution leverages specialized AI agents to discover, attack, and validate vulnerabilities across complex web environments, offering up to ten times greater coverage than conventional penetration testing tools.
Traditional pentesting has long been a periodic event—an engagement that produces a static report while websites evolve daily with new logins, checkouts, payments, and third-party scripts. Reflectiz’s agentic pentesting closes this gap by providing continuous, intelligent testing that adapts to a site’s changing landscape.
“Websites change every week but get pentested only once or twice a year. That gap creates exposure,” said Idan Cohen, CEO and co-founder of Reflectiz. “Teams need testing that keeps pace with releases at a sustainable cost, with trusted coverage of what was actually tested.”
Unlike conventional scanners that start every test blind, Reflectiz’s platform begins with a pre-existing model of each website. Built from a decade of scanning thousands of production sites, this model includes pages, scripts, third-party integrations, domains, sensitive inputs, and behaviors—the same context that attackers exploit.
The platform operates as a coordinated team of four specialized AI agents:
- Crawler Agent: Navigates the site authentically, through logins, one-time codes, and two-factor authentication, mapping real-world user flows.
- Fingerprinter Agent: Identifies the technology stack and determines which attacks are applicable.
- Attacker Agent: Executes and chains vulnerabilities to simulate real-world exploits.
- Validator Agent: Independently reproduces every finding before it’s reported, eliminating false positives.
Each finding comes with reproduction steps, evidence, and a coverage map of what was tested and cleared. Testing spans the full OWASP Top 10, and teams can set depth per flow—from fast predefined checks to expert-level attack chains on critical assets.
“The hard part of web pentesting was never the payload; it was understanding what the application actually does,” explained Ysrael Gurt, CTO and co-founder of Reflectiz. “Our engine has been reading live websites for years, so our agents start with a map that other tools never build.”
The agentic pentesting platform is part of Reflectiz’s new Offensive Hub, which joins the Security Hub and Privacy Hub to provide a complete 360-degree map of web risk: what runs on the site, what data it touches, and how it can be attacked. Findings from all three hubs cross-reference automatically, and the AI-powered remediation agent, Atlas, guides teams through fixes. The system integrates with existing workflows via REST API, CI/CD triggers, and Slack alerts.
Reflectiz founders Idan Cohen and Ysrael Gurt will demonstrate the platform in a live webinar on September 15, 2026, at 11 AM ET / 6 PM CET. Registration is available at https://www.reflectiz.com/lp/founders-case-study-webinar/.
For more information, visit Reflectiz.com.
Leave a Reply