Reflectiz launches agentic pentesting for websites, claiming up to 10x coverage vs conventional pentests

Reflectiz, a web exposure management vendor, has announced a multi-agent AI penetration testing platform for websites inside a new 'Offensive Hub'. Four specialized agents crawl, fingerprint, attack, and independently validate web applications; the vendor…

Reflectiz announced (per report timestamps of 2026-09-08) an agentic penetration testing capability for websites, housed in a new Offensive Hub alongside its existing Security Hub and Privacy Hub, with findings automatically cross-referenced across hubs. The platform chains four specialized AI agents: a user-like crawler, a stack fingerprinter, an attack runner/chainer, and an independent validator that reproduces every finding before reporting to cut false positives. Coverage is claimed to span the OWASP Top 10, with per-flow depth controls for critical assets. The vendor attributes an up-to-10x coverage advantage over conventional pentesting to its pre-existing live model of each site, which GBHackers says is built on a decade of site-scanning context. Findings ship with reproduction steps and coverage maps and integrate via REST API, CI/CD triggers, and Slack; an Atlas AI remediation agent explains risks and walks teams through fixes, and GBHackers adds a planned September 15 webinar demo. All three reports derive from the vendor announcement (Cyber Security News flags its item as a syndicated CyberNewswire press release), and the performance claims lack third-party validation. There are no substantive disagreements between the sources; the only differences are the unique details noted above.