Reflectiz

Reflectiz operates as a web exposure management company, providing a cybersecurity platform that operates on a Software-as-a-Service (SaaS) model. Founded in Tel Aviv, Israel, in 2016 by Idan Cohen and Ysrael Gurt, the company addresses client-side security to protect websites from vulnerabilities introduced by third-party applications. The founders' journey originated from their shared experience at Bugsec, an Israeli offensive security company. Cohen, the CEO, is a former Cyber IDF officer and was the CTO at Bugsec, while Gurt, the CTO, is an ethical hacker recognized in Google's Hall of Fame and by Forbes' "30 under 30" for his cybersecurity skills. Their collective background in offensive security and penetration testing directly informed the creation of a solution for the client-side security issues they frequently encountered.

The company's platform is designed to identify and mitigate security and privacy risks originating from first, third, and even fourth-party applications integrated into a client's website. It serves a diverse client base, including sectors like finance, banking, insurance, e-commerce, travel, and healthcare. The core of Reflectiz's offering is its agentless, zero-touch solution, which means it requires no code installation on the client's website, thus having no impact on site performance. The platform works by remotely scanning and monitoring websites to create a comprehensive inventory of all digital assets and their behaviors. Through dynamic behavioral analysis, it uncovers hidden components and risks, providing clients with an Exposure Risk Rating and actionable insights to remediate threats and ensure compliance with regulations such as PCI-DSS, GDPR, and HIPAA.

Reflectiz has secured total funding of approximately $6 million over several rounds, including a significant Series A round of over $5 million in December 2020, led by Capri Ventures. This funding has been aimed at scaling sales and marketing operations, particularly in the U.S. market, and expanding its development and operations teams. The company has gained industry recognition, winning awards such as "Best Cybersecurity Startup" and "CTO of the Year" at the 2024 Cyber Excellence Awards. By providing a centralized dashboard for governing web assets, the company helps security teams manage supply chain risks, prevent data breaches from threats like Magecart, and maintain control over their web ecosystem.

Keywords: web exposure management, client-side security, third-party risk, cybersecurity SaaS, application security, threat detection, compliance management, website vulnerability scanning, data breach prevention, supply chain security, Magecart protection, PCI-DSS compliance, agentless security, digital asset inventory, behavioral analysis, financial services security, e-commerce security, healthcare data security, Idan Cohen, Ysrael Gurt