SafeHill Acquires Arcane Security to Expand AI-Driven Offensive Security Capabilities

Offense, when it’s done right, doesn’t look reckless. It looks calculated, patient, and a little uncomfortable for anyone pretending their systems are airtight. That is the lane SafeHill just stepped deeper into with the acquisition of Arcane Security, a Phoenix built offensive security shop that has been living in the trenches of red teaming, penetration testing, and threat simulations. Not theory. Not slide decks. Real contact with real systems.

Mike Pena (CEO) didn’t buy a logo. Mike Pena bought proximity to how attackers actually think, then wired it straight into a platform designed for continuous exposure, not occasional panic. You can feel the intent here. SafeHill SecureIQ was already blending AI with human ethical hackers. Now it gets sharper teeth, especially where modern software lives and breaks at the code and application layer.

Arcane Security built its reputation on white glove execution. Small team, high signal, no fluff. The kind of crew that does not need a crowd to make noise. 2–10 people who know where to look and how to press. In a market full of dashboards pretending to be defense, that kind of offensive clarity hits different.

The timing is not subtle. Software is being shipped faster than teams can reason about it, especially with AI accelerating development cycles. More code, more surface area, more blind spots. SafeHill is leaning into that chaos and saying fine, we will map it, test it, and break it before someone else does. Continuous threat exposure stops being a talking point when you pair automation with people who have actually broken things before.

Nicholas Gonzalez (CRO) brings the revenue lens, Hector Monsegur (Chief Research Officer) brings two decades of offensive instinct, Ibrahim Karajic (VP Infrastructure) and Andy Sok (VP Product) keep the infrastructure and product tight. That mix matters because this is not just about finding vulnerabilities. It is about operationalizing them into something enterprises can act on without slowing down the business.

No funding headline here, no vanity valuation to clap about. Just a quiet, deliberate move that tells you where this market is going. Less theater, more signal. Less periodic testing, more continuous pressure.

If you are building fast, you either learn to see your own weaknesses in real time or someone else will introduce you to them on their schedule. SafeHill just made sure they are a lot closer to the front of that conversation.