SafeHill Raises $2.6 Million In Pre-Seed Funding

Listen to this article

SafeHill, a Chicago-based cybersecurity startup, emerged from stealth with a $2.6 million pre-seed funding round, marking its first major capital raise and positioning it to scale an AI-hybrid threat exposure management platform. The round was led by Mucker Capital and Chingona Ventures, with participation from Techstars and others, reflecting strong early investor confidence in its blend of AI automation and human-validated ethical hacking.

Formerly Tacticly, SafeHill specializes in proactive cybersecurity, offering SecureIQ—a platform that combines AI-driven vulnerability scanning with expert human validation to prioritize real risks. Key features include continuous asset discovery, attack path mapping, and compliance alignment with standards like NIST and PCI-DSS. Early customers span healthcare and entertainment sectors.

Market and Strategic Implications

The CTEM market is booming due to escalating cyber risks, providing SafeHill a timely entry point. Its hybrid model differentiates it from pure AI tools, potentially appealing to risk-averse enterprises. However, Hector Monsegur‘s involvement—while adding credibility in threat intelligence—invites scrutiny over past controversies, which the company counters by emphasizing redemption and expertise. Overall, this funding signals momentum, but sustained growth will hinge on proving reliability in a crowded field.

SafeHill’s emergence from stealth with a $2.6 million pre-seed round underscores a pivotal moment for the Chicago-based cybersecurity firm, blending cutting-edge AI with the gritty, real-world insights of ethical hacking. Formerly operating under the name Tacticly, SafeHill positions itself at the intersection of automated threat detection and human oversight, addressing a critical gap in how organizations manage evolving cyber exposures. This analysis delves into the funding’s structure, the company’s foundational elements, its technological offerings, the broader market dynamics, competitive positioning, and the nuanced role of its controversial co-founder, Hector Monsegur. By examining these facets, we can assess SafeHill’s potential trajectory in a sector where innovation must balance speed, accuracy, and trust.

Historical Context and Company Formation

SafeHill was co-founded in 2024 by a team of cybersecurity veterans, including CEO Mike Pena, Chief Revenue Officer Nicholas Gonzalez, Chief Research Officer Hector Monsegur, VP of Infrastructure Ibrahim Karajic, and VP of Product Andy Sok. Headquartered in Chicago, the startup initially developed in stealth mode, honing its focus on continuous threat exposure management (CTEM)—a framework popularized by Gartner that emphasizes ongoing risk assessment over periodic audits. The rebranding from Tacticly to SafeHill reflects a strategic pivot toward a more consumer-facing identity, emphasizing “human insight meets AI precision” in its messaging.

The company’s genesis stems from founders’ experiences in traditional penetration testing, where point-in-time assessments often left blind spots in fast-moving threat landscapes. Pena, in a statement accompanying the funding announcement, highlighted this pain point: “Cyber threats are evolving faster than ever, overwhelming security teams with alerts and noise. Our platform combines AI-driven continuous penetration testing with expert human validation to cut through the noise.” This ethos drives SafeHill’s mission to empower enterprises with proactive, scalable defenses, particularly for mid-sized organizations struggling with resource constraints.

Breakdown of the Pre-Seed Funding Round

This $2.6 million pre-seed round represents SafeHill’s inaugural institutional funding, bringing total capital to the same amount. The investment was co-led by Mucker Capital—a Los Angeles-based early-stage VC firm known for backing tech disruptors—and Chingona Ventures, a Chicago-focused fund supporting diverse founders. Additional participants include accelerator Techstars, local player Chicago Early Growth Ventures, The Source Groups, Virginia Union University, and angel investor Eddie Lou, a serial entrepreneur in fintech and security.

This syndicate blends national reach with regional support, signaling SafeHill’s appeal as a Midwest innovation story. Mucker Capital’s involvement, in particular, brings expertise in scaling SaaS platforms, while Chingona Ventures’ emphasis on underrepresented founders aligns with the team’s diverse composition. No equity details or post-money valuation were publicly disclosed, typical for pre-seed stages, but the round’s size—modest yet sufficient for a stealth launch—suggests a lean operation prioritizing product validation over aggressive expansion.

Funds are earmarked for three core areas: (1) expanding the engineering team to accelerate SecureIQ development; (2) bolstering AI-assisted ethical hacking tools for more precise vulnerability prioritization; and (3) forging deeper ties with enterprise security teams through pilots and integrations. This allocation reflects a pragmatic approach, aiming to bridge the gap between prototype and market-ready solution within 12-18 months.

Core Technology: The SecureIQ Platform

At the heart of SafeHill is SecureIQ, a next-generation TEM platform designed to deliver “always-on” security posture visibility. Unlike legacy tools that rely on sporadic scans, SecureIQ integrates continuous external attack surface monitoring (EASM), AI-hybrid pentesting, and real-time threat intelligence. Key components include:

• Continuous Asset Discovery and Pentesting: AI automates reconnaissance and vulnerability scanning, while human experts validate findings to reduce false positives—critical in an era where AI alone can generate up to 70% noise in alerts.
• Attack Path Analysis: Maps potential exploit chains, prioritizing risks based on business impact, exploitability, and compliance exposure (e.g., mapping to CMMC, HIPAA, or ISO 27001).
• Remediation and Compliance Tools: Scores vulnerabilities for quick triage and generates reports aligned with regulatory frameworks, easing audit burdens.
• Integrations and Scalability: Plans for API connections with tools like Obsidian Security and PICUS, enabling seamless workflows in existing stacks.

Early adopters, such as healthcare provider First Medical and event platform Bandsintown, praise its ability to unify disparate security data into a single dashboard. By embedding human validation “in the loop,” SecureIQ mitigates AI’s limitations, such as contextual blind spots, positioning it as a hybrid solution for teams seeking reliability without sacrificing speed.

Recommended: Solifi, A Secured Finance Technology Provider, Acquires DataScan

Market Landscape and Growth Projections

SafeHill enters the exposure management market at an inflection point, fueled by surging cyber incidents—over 2,200 daily attacks reported in 2024—and regulatory pressures like the U.S. SEC’s cybersecurity disclosure rules. The sector, encompassing CTEM and related vulnerability management, is experiencing explosive growth as organizations shift from reactive to proactive defenses.

Projections vary by analyst, but consensus points to double-digit CAGRs driven by AI adoption and cloud proliferation:

These figures highlight a $10+ billion opportunity by decade’s end, with North America commanding over 40% share due to stringent compliance needs. SafeHill’s focus on AI-human synergy taps into this, as surveys show 65% of CISOs prioritizing hybrid tools for accuracy. However, the market’s maturity means entrants must demonstrate ROI quickly, especially amid economic headwinds squeezing security budgets.

Competitive Positioning

SafeHill differentiates through its ethical hacking heritage, but it operates in a fiercely contested arena dominated by incumbents with deeper pockets. Key rivals include:

SafeHill’s edge lies in affordability for SMBs and its “ex-hacker” narrative, which lends authenticity to threat simulations. Yet, scaling against these giants will require rapid customer wins and potential acquisitions as a bolt-on for larger platforms.

The Hector Monsegur Factor: Redemption and Risk

No analysis of SafeHill is complete without addressing Hector Monsegur, the former LulzSec leader known as “Sabu.” In 2011, Monsegur orchestrated high-profile hacks against Sony, the FBI, and governments, only to turn FBI informant, aiding arrests and avoiding a lengthy sentence. Sentenced to time served in 2014, he has since pursued redemption through ethical roles, including consulting and now co-founding SafeHill.

Supporters view Monsegur’s arc as a compelling redemption story: a black-hat hacker transformed into a white-hat advocate, bringing insider knowledge to combat threats he once exploited. As Chief Research Officer, his expertise informs SecureIQ’s attack path discovery, with the company framing it as “real-world context” that generic AI lacks. Investors like Mucker appear undeterred, betting on his evolution.

Critics, however, highlight lingering controversies: Monsegur’s informant status alienated hacker communities, sparking debates on trust and ethics. A 2014 Guardian interview portrayed him as defiant, while Reddit threads question if his involvement endangers partners. Balanced perspectives, such as a 2018 Bloomberg profile, note his post-prison struggles with reintegration, suggesting SafeHill as a platform for positive impact. In a field where credibility is paramount, Monsegur’s presence is a double-edged sword—boosting innovation but potentially complicating sales to conservative enterprises. SafeHill mitigates this by centering Pena as the public face, allowing Monsegur to operate behind the scenes.

Future Outlook and Strategic Recommendations

With $2.6 million in the bank, SafeHill is poised for a 2026 product maturity push, targeting 50+ pilots and integrations with major SIEM tools. Success metrics include reducing mean-time-to-remediate vulnerabilities by 40% for clients, leveraging its hybrid model. Risks include market saturation and Monsegur-related PR flares, but opportunities abound in underserved verticals like healthcare.

Strategically, SafeHill should prioritize thought leadership—e.g., whitepapers on AI-human synergies—and diversity-focused partnerships via Chingona. If executed well, this funding could propel it toward a Series A by 2027, capturing 1-2% market share in a trillion-dollar cyber ecosystem. Ultimately, SafeHill exemplifies how past shadows can illuminate future defenses, provided trust is earned one validated threat at a time.

Please email us your feedback and news tips at hello(at)dailycompanynews.com