Web exposure management platform startup Reflectiz Ltd. revealed today that it has raised $22 million in new funding to expand its current product offering.

The company plans to use the money to provide comprehensive continuous threat exposure management for websites, as well as support its growing partner and alliances network and go-to-market acceleration.

Founded in 2016, Reflectiz helps organizations secure their websites by shining a light on the often overlooked and unmanaged components of the web ecosystem. The company addresses the broader “digital front door” — all the client-side scripts, tags, third-party services and open-source components that live on and around web pages — rather than just focusing on server-side vulnerabilities.

Reflectiz uses an agentless, remote deployment model that runs without requiring code installs or invasive access to address website risks that stem from embedded third-party tools, external services or dynamic tags outside the traditional control of the information technology department. The model provides continuous monitoring of first-, second- and even fourth-party elements, mapping out “which, what, where” for every asset in a site’s digital supply chain.

Under the hood, Reflectiz uses artificial intelligence and automated code-analysis capabilities to rapidly de-obfuscate suspicious JavaScript, surface hidden data flows and prioritize the most actionable risks. For example, it can detect when a third-party tracking pixel suddenly changes behavior or when a script begins exfiltrating user data to unexpected domains. That can help security teams move beyond raw vulnerability lists to real exposure visibility and remediation prioritization.

The company also manages web supply chain and third-party risk to give enterprises visibility into vendor and tag ecosystems and monitors data flows. It also supports compliance tasks such as Payment Card Industry Data Security Standard 4.0 monitoring of on-page scripts.

Reflectiz’s customer base includes Fortune 500 brands and global enterprises across financial services, e-commerce, insurance and healthcare. Notable customers include Lion Pty Ltd., Village Roadshow Ltd., Leeds United Football Club Ltd., Payoneer Global Inc., BigCommerce Holdings Inc., B&H Photo Video Pro Audio Inc. and Center Parcs (UK) Ltd.

The Series B funding round was led by Fulcrum Equity Partners, with Capri Ventures, YYM Ventures, AFG Venture Group also participating.

“Enterprises invest millions to secure their own code, sharpening their SDLC process with their team, when the real risks are quietly entering through third parties and open sources beyond their control,” said Idan Cohen, co-founder and chief executive officer of Reflectiz. “Standard website security is outdated, and traditional vulnerability management is no longer enough. Reflectiz brings the complete picture of web exposure and we believe this is where the industry is inevitably moving.”

Prior to the new funding, Reflectiz had raised $6 million over two rounds, according to data from Tracxn.

Photo: Reflectiz