--- title: Reflectiz Reviews meta\_title: 'Reflectiz Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 32 reviews by the users' company size, role or industry to find out how Reflectiz works for a business like yours. aggregate\_rating: rating\_value: 4.7 review\_count: 32 scale: '5' date\_modified: '2026-08-09' parent\_category: name: Web Security url: https://www.g2.com/categories/web-security --- # Reflectiz Reviews & Product Details Visit Website Reflectiz is the AI-powered web exposure company trusted by hundreds of global organizations, including DAZN, Cox Communications, Village Roadshow, and Leeds United, to continuously monitor everything that executes on their live websites. Rather than scanning code or configuration, Reflectiz watches real browser execution, the actual scripts, pixels, and third and fourth-party tools running in front of your users, and applies AI to flag malicious behavior, unauthorized data flows, and compliance gaps the moment they appear. Reflectiz is built around four hubs that all run on this same engine. Security Hub continuously monitors every script and library executing on your site, catching Magecart-style skimming, supply chain attacks, and AI-generated threats that firewalls and perimeter tools were never built to see. Privacy Hub verifies that user data is only collected and shared the way your consent banner promises, supporting GDPR, CCPA, HIPAA, and PIPEDA. Offensive Hub runs continuous, agentic penetration testing, using AI agents to map applications and validate exploitable risks at up to 10x the capacity of manual pentesting. PCI Module automates PCI DSS 4.0.1 Requirements 6.4.3 and 11.6.1 with audit-ready evidence. Together, the four hubs give Security, Privacy, Compliance, and Digital teams one 360-degree view of web risk instead of four disconnected tools and reports. Reflectiz operates entirely remotely through its proprietary sandbox browser, with zero code changes, zero agents, and no access to sensitive data, typically going live within one business day. Its Exposure Rating draws on an intelligence database built from monitoring millions of websites, and the platform has been recognized with a 2026 Fortress Cyber Security Award, a 2025 Top InfoSec Innovator award, and G2 High Performer status. Customers frequently cite fast, hands-off onboarding and responsive support alongside a growing library of published case studies across e-commerce, financial services, and entertainment. * * * Product Website Reflectiz Seller [Reflectiz](https://www.g2.com/sellers/reflectiz) Discussions [Reflectiz Community](https://www.g2.com/products/reflectiz/discuss) Languages Supported German, English, French, Italian, Spanish Solution Type Best-of-Breed Overview by Daniel Sharabi (Marketing Director @Reflectiz) Show More ## Pricing Pricing provided by Reflectiz. ### Free Trial Free Trial Per Year [ View More Pricing Information ](https://www.g2.com/products/reflectiz/pricing) ## Reflectiz Integrations (1) What do users say about integrations? Verified by Reflectiz [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Agentforce Sales (formerly Salesforce Sales Cloud) ](https://www.g2.com/products/agentforce-sales-formerly-salesforce-sales-cloud/reviews) Show More ![David K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "David K.") DK David K. Application Support Manager Mid-Market (51-1000 emp.) 7/12/2026 "Reflectiz Streamlines PCI Compliance and Strengthens Ongoing Website Script Monitoring" 5/5 What do you like best about Reflectiz? Reflectiz has become an important part of our ecommerce security and monitoring suite. We use it to monitor the scripts running across our website, understand what information is being collected, and pinpoint where data is being shared with second-, third-, and fourth-party services. It also provides the documented evidence we need to support PCI compliance. One of the biggest benefits has been the reduced effort required for PCI audits. What used to take several weeks can now be handled far more efficiently by giving auditors a folder with the weekly reports, supporting details, and documented justification for each script. Reflectiz has also helped us build a regular review process, rather than treating compliance as a once-a-year exercise. On several occasions, its scans have alerted us to issues we might not otherwise have identified. Elinor and Luke have been a breeze to work with as well. They’re responsive, helpful, and make the overall experience with Reflectiz straightforward and positive. Overall, Reflectiz is an excellent tool for improving visibility, supporting PCI compliance, reducing audit preparation time, and strengthening ongoing website security monitoring. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? There’s a significant learning curve, with lots of rabbit holes to go down, so it’s worth setting time aside to really learn how to make the most of Reflectiz. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? It monitors the scripts running in our customers’ browsers and alerts us whenever there are changes or new scripts. It also uses AI to help us write a justification for each script when we need one. This saves us significant time when preparing for PCI auditing. It also highlights what information is being collected and where that information may be shared outside of our control. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic RG Raja Sekhara Reddy G. Subject Matter Expert Enterprise (\> 1000 emp.) 3/17/2026 "Seamless PCI Compliance and Strong Script Visibility with Reflectiz" 5/5 What do you like best about Reflectiz? We highly appreciate that Reflectiz helps us meet PCI compliance requirements effortlessly, as it does not require embedding any code into our pages—making the entire process seamless and passive. The prompt alerts for any changes occurring on our pages provide us with great confidence that only the expected scripts are being loaded, enhancing our security posture significantly. The Risk Factors dashboard is particularly valuable, offering clear indicators that allow us to drill down for deeper insights and take informed actions quickly. Additionally, it is very reassuring to have visibility into the external sites our pages communicate with, which adds an important layer of transparency and control. Overall, Reflectiz delivers excellent value and has proven to be a worthwhile investment for our organization. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? Script approvals needs to be optimized bit more. Generally speaking about the same script file which has different query parameters. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? Reflectiz plays a crucial role in identifying and monitoring third-party scripts running throughout our web applications, helping us maintain compliance with PCI-DSS requirements. Its ongoing visibility and real-time risk alerts have noticeably decreased the manual workload for our security and application teams. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Alessandro G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Alessandro G.") AG Alessandro G. Director of Platform, Security & ITSM Enterprise (\> 1000 emp.) 3/6/2026 "Simplicity and Visibility Make Reflectiz Stand Out" 4.5/5 What do you like best about Reflectiz? What I appreciate most about Reflectiz is the simplicity and actionable visibility it brings to managing JavaScript security across our many websites. The user interface is straightforward, making it easy to monitor and approve scripts, which was previously unmanageable with other tools. The onboarding was smooth, and the tool provided immediate value by giving us awareness and governance over third-party scripts—something we never had before. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? The main challenge we faced was not with Reflectiz itself, but with the process of identifying the owners of specific JavaScript within our organization. While Reflectiz gives us the visibility, the responsibility to map ownership remains on us, which can be complex in a large company. Additionally, I would like deeper benchmarking features to compare our exposure more transparently against specific sector peers, though I understand the privacy limitations. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? Our main focus has been PCI, so that’s where we use it most, but we expect to expand into other areas soon. Simplicity combined with effortless visibility.’ That’s important to us. In a company with hundreds of engineers, simplicity is essential for managing complex environments. Reflectiz delivers that. Our security shouldn’t be limited just to the scope of PCI. We want visibility across our entire ecosystem. Benchmarking with similar companies is also interesting. The exposure rating tool is useful. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: AI Assisted Review ![Verified User in Sports](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Sports") AS Verified User in Sports Mid-Market (51-1000 emp.) 4/16/2026 "Hidden Risks, Clear Insights: Reflectiz at Leeds United" 5/5 What do you like best about Reflectiz? I really appreciate how Reflectiz gave us visibility we never had before. Without needing to be a developer, I can clearly see every third-party risk and security issue on our website. The real-time monitoring, easy deployment, and the ability to hold vendors accountable have been game changers for us. It integrates smoothly with our security stack and genuinely saves us time and resources by highlighting exactly where to focus. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? We did have to whitelist some IP addresses during setup due to multiple vendors being involved with our website, which took a day or two to resolve. But beyond that minor hurdle, I haven't encountered any significant drawbacks. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? We were struggling to monitor third-party risk across our hosted websites. After we ran into an issue with our retail vendor, we onboarded Reflectiz to improve visibility and help minimise that risk. It also proved more cost-effective than having to monitor everything constantly whenever a site changed. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: AI Assisted Review DR DEEPAK KUMAR R. Head of Information Security Mid-Market (51-1000 emp.) 3/31/2026 "Frictionless PCI Compliance with Reflectiz" 4.5/5 What do you like best about Reflectiz? Reflectiz made our PCI DSS 4.0.1 compliance seamless, especially with requirements 6.4.3 and 11.6.1. The onboarding was incredibly fast—less than 24 hours from providing details to having a working dashboard. Very less efforts required from our side, which saved us significant time and effort. The platform's automation, script inventory, third- and fourth-party mapping, and exportable reports made the audit process smooth. Support was very responsive and emphatetic, and the tool required minimal back-and-forth for setup. Smart approval automation is useful, and the weekly monitoring cadence is easy to maintain. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? The only real limitation is budget: expanding Reflectiz monitoring to all and/or non critical assets is challenging due to costs. While Reflectiz provides strong value, justifying ROI or budget spend is difficult without a clear, demonstrated risk. Additionally, I haven't compared it directly with other vendors, so can't speak to relative advantages beyond our use case. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? Helping to meet the security requirements which allows us to have the inventory of java scripts which are executed in the consumer browser and ensure the scripts are monitored for tampering and helps to meet PCI DSS compliance requirements 6.4.3 and 11.6.1. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: AI Assisted Review AL Alex L. Senior Security Engineer Mid-Market (51-1000 emp.) 3/12/2026 "Insightful PCI DSS Compliance and Site Monitoring" 5/5 What do you like best about Reflectiz? I like the PCI DSS addon for providing a detailed overview of where we stand and the overall insights Reflectiz gives to truly understand what's going on with the website. It's good to have everything in one place where it's automated. I also appreciate Reflectiz's insights into every application and domain, and how it interacts with our first-party apps. The initial setup was relatively easy. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? Perhaps the ability to run a scan ad-hoc or integration with SIEM solutions would be nice to haves. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? I use Reflectiz to monitor third-party scripts accessing sensitive fields and domains. The PCI DSS addon gives us a detailed overview and insights to understand our website better. It automates processes, providing insights into applications and domain interactions. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic HB Heidi B. Small-Business (50 or fewer emp.) 3/31/2026 "Effortless Compliance and Peace of Mind with Reflectiz" 5/5 What do you like best about Reflectiz? I definitely like the ease of use of Reflectiz. It's very much a hands-off technology, which is great for companies with small teams as it works really well. Reflectiz does not leave holes in the PCI DSS requirements, providing a sense of confidence that we are meeting those requirements and ensuring customer safety. It's very easy to set up too. We just provided emails and got started, then it’s a matter of monitoring and maintaining. Additionally, we can print reports to show as evidence during PCI audits. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? I really don't have anything to add here. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? Reflectiz helps us monitor scripts running on pages and identify vulnerabilities. It simplifies PCI DSS compliance for companies with small technical teams. The ease of use and confidence in securing customer safety are great, plus setup was hands-off, involving just emails. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Retail](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Retail") AR Verified User in Retail Enterprise (\> 1000 emp.) 6/3/2026 "Detailed PCI DSS Compliance Tracking That Builds Confidence" 4.5/5 What do you like best about Reflectiz? The solution works really well for tracking PCI DSS 4+ compliance and maintaining general script hygiene across our web applications. This is the only use case we currently have, and we haven’t explored the product’s other functions or features yet. That said, it provides a lot of detail, which helps us feel confident we’re making the right decisions. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? The pay-to-unlock-more-scans option feels more like a commercial decision than a real product feature. I think the app should allow more frequent scanning out of the box, without needing an extra unlock. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? PCI DSS compliance and general script tracking for web applications. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic TG Tim G. Head of Security Mid-Market (51-1000 emp.) 3/16/2026 "Reflectiz has top-tier support and a smooth, issue-free experience." 5/5 What do you like best about Reflectiz? The support from the staff at Reflectiz is top-tier. You would be hard-pressed to find better, and I've been in IT for nearly 30 years and I've dealt with many, many vendors. We're a smaller customer of theirs, but it has never felt like it. Implementation was near zero-touch from our side, which is amazing. Also, we found a small bug in the Reflectiz web platform a while back and they had it fixed within days. Really, really impressive. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? I honestly don't have anything bad to say. We're in the platform every week and we've had no issues. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? We leveraged Reflectiz for their PCI 6.4.3 and 11.6.1 capabilities and have been able to keep track of all of the scripts, domains and headers on our merchant sites with ease. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Vasil I.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Vasil I.") VI Vasil I. IT - InfoSec Risk & Compliance Analyst Enterprise (\> 1000 emp.) 3/6/2026 "Reflectiz: Reliable Client-Side Protection for PCI DSS Compliance" 5/5 What do you like best about Reflectiz? Reflectiz has been instrumental in maintaining our payment page script inventory and meeting PCI DSS requirements. Its intuitive interface makes navigation effortless, and its temper detection reliably surfaces new. Unapproved scripts with clear,actionable alerts-significantly reducing risk and operational overhead. I highly recommend Reflectiz and their team their responsiveness, efficiency, and deep technical knowledge make them a reliable partner for any security or compliance initiative. Review collected by and hosted on G2.com. What do you dislike about Reflectiz? Very satisfied. The product is strong; I'd appreciate more granular alert tuning and slightly faster onboarding documentation for new users. Review collected by and hosted on G2.com. What problems is Reflectiz solving and how is that benefiting you? Unmanaged client-side scripts - Reflectiz discovers and catalogs every script running on payment and sensitive pages. Unauthorized changes and e-skimming - It detects tempering and unexpected header or script modifications quickly. Audit evidence and compliance burden - Automates reporting and provides artifacts needed for PCI DSS v4.0 assessments. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ## Questions about Reflectiz? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Reflectiz ](https://www.g2.com/products/reflectiz/discussions/new) GU Guest User • Last activity about 1 year ago What is Reflectiz used for? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-reflectiz-used-for) [ View all Discussions ](https://www.g2.com/products/reflectiz/discuss) ## Pricing Options Pricing provided by Reflectiz. ### Free Trial Free Trial Per Year ### Standard Contact Us Per Year ### Pro Contact Us Per Year [ View More Pricing Information ](https://www.g2.com/products/reflectiz/pricing) ##### ##### Reflectiz Features Administration Dashboard & Reporting Alerting [ View More Features ](https://www.g2.com/products/reflectiz/features) ## Top-Rated Alternatives [ ![Cloudflare Application Security and Performance](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cloudflare Application Security and Performance") Cloudflare Application Security and Performance 4.5/5(697) ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) [ ![JumpCloud](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "JumpCloud") JumpCloud 4.5/5(4,063) ](https://www.g2.com/products/jumpcloud/reviews) [ ![Vanta](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Vanta") Vanta 4.6/5(2,701) ](https://www.g2.com/products/vanta/reviews) [ View All Alternatives ](https://www.g2.com/products/reflectiz/competitors/alternatives) ##### Categories on G2 [Security Compliance](https://www.g2.com/categories/security-compliance)[Penetration Testing](https://www.g2.com/categories/penetration-testing-tools)[Website Security](https://www.g2.com/categories/website-security) [Security Compliance](https://www.g2.com/categories/security-compliance)[Penetration Testing](https://www.g2.com/categories/penetration-testing-tools)[Website Security](https://www.g2.com/categories/website-security)[Website Privacy Auditing Tools](https://www.g2.com/categories/website-privacy-auditing-tools)[Client-Side Protection](https://www.g2.com/categories/client-side-protection) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which AI business operations tool delivers the fastest ROI?](https://www.g2.com/discussions/which-ai-business-operations-tool-delivers-the-fastest-roi)[Top tools for running multi-channel marketing campaigns](https://www.g2.com/discussions/what-are-the-top-tools-for-running-effective-multi-channel-marketing-campaigns)[Blackbaud Enrollment Management System vs Sawyer: which admissions and enrollment management platform works best for mid-size educational institutions?](https://www.g2.com/discussions/blackbaud-enrollment-management-system-vs-sawyer-which-admissions-and-enrollment-management-platform-works-best-for-mid-size-educational-institutions) [What are the most trusted gym management platforms by gym managers and fitness studio owners based on user reviews?](https://www.g2.com/discussions/what-are-the-most-trusted-gym-management-platforms-by-gym-managers-and-fitness-studio-owners-based-on-user-reviews)[What is the most cost-effective local SEO platform for agencies?](https://www.g2.com/discussions/what-s-the-most-cost-effective-local-seo-platform-for-agencies)[Pros and Cons Details](https://www.g2.com/products/reflectiz/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)