Reflectiz

How Three Enterprises Passed 🏅 Their PCI Audit With Zero Observations

This month's newsletter breaks down how security leaders at Village Roadshow, Apexx Global, and https://hubs.ly/Q04kGQh_0 achieved PCI DSS 4.0.1 compliance without code changes. Plus verified customer insights on G2.

If you live and breathe cybersecurity, this is for you 👇
https://hubs.ly/Q04kGws50

"Would I recommend Reflectiz? In a heartbeat."🎖️

Read the full story 👉 https://hubs.ly/Q04kqXk60

Proud to share a new customer success story with Tate Galleries, one of the UK's most iconic cultural institutions with 6 million annual visitors across 4 galleries.

When PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 came in, Tate's security team needed visibility into the scripts running on their e-commerce website activity.

From URL submission to dashboard visibility: under 10 minutes⌛ No developer involvement. Smart approval AI automation cut hours of manual script review.

The result: audit confidence, operational efficiency, and a team that now validates outcomes rather than chasing scripts.

47 npm packages compromised 🐍 Thousands of downloads affected. And every scan passed.

Read the full breakdown 👉 https://hubs.ly/Q04kq6t80

The CanisterWorm attack turned Trivy, a widely used open-source security scanner, into a vector for distributing the very vulnerabilities it was designed to detect😖

This isn't just another supply chain attack.

The malware spreads automatically, stealing npm credentials and publishing malicious updates to trusted packages without human intervention.

A package can pass all scans, but once deployed, it executes in users' browsers with access to sensitive data and session activity. By the time your SBOM flags an issue, that code has already been running in customer sessions for hours.

The article breaks down how the attack works and where the real visibility gap lives.

Three days with hundreds💯 of conversations.

The insight we heard most 👉 "We didn't realize how much we were missing on the client-side."

Every security leader we spoke with is dealing with the same challenge: Client side security in the AI era. The current tool stack can't deal with the evolving third-party risk and supply chain attacks

Web security is about continuous ♻️ visibility into what you can't control.

We still have one more day but it's a chance to say thank you to everyone who stopped by our booth, grabbed some of the many freebies, and shared what you're actually dealing with.

Follow us 👍 and let's keep talking about web security in the AI era.

See you next year

5 New G2 badges in the Summer 2026 report ⭐ ⭐ ⭐ ⭐ ⭐

The results are here and this are the 5 new badges we won this season:

Momentum Leader 🏅 in Website Security.
High Performer 🏃 across Web Security, Security Compliance, and Governance, Risk & Compliance.
Plus new entries 🏆 in EMEA and Relationship Index categories.

Thank you to our customers for the reviews and trust that made this possible.

See what users are saying 👉 https://hubs.ly/Q04jSNL10

Meet Mr. CISO🤓

Mr. CISO is having a rough day.

He needs to deal with a new "revolutionary AI platform."
He has 43 alerts🚨 on the system.
He has to explain everything to the board.
And when everything is burning🔥 around him, he forgot to drink his coffee.

But Mr. CISO is a hero💪 And you can read his full story at the Reflectiz booth at InfoSec.

Come grab a booklet before it's all gone.