We think like the attacker, so you don't get caught by surprise

Mercurius is an offensive-security-led cybersecurity company protecting critical organizations across Latin America and the United States — combining red teaming, AI-driven security operations and threat intelligence to reduce risk that’s real, not theoretical.

The best way to secure a business is to attack it first — under control, before someone else does it for real.

Mercurius was founded in Chile and, Instead of another managed-security vendor competing on dashboards, we built a company around a single conviction — defense only holds when it has been tested by people who break systems for a living.

Today our teams operate locally across three countries, running red team engagements, adversary emulation and continuous exposure testing, then feeding what we find into AI-driven security operations and threat intelligence. The result is a security posture measured against real attacker behavior, not compliance checklists.

We work with organizations where a breach isn’t an inconvenience — it’s an existential event: financial institutions, critical infrastructure, legal, retail and technology leaders across the region.

Marcos Reis - CEO & Founder

25 years building cyber defense from inside banks — now building the operation that protects them from the outside.

He served as CISO at Itaú Chile, where he led the Cybersecurity and Fraud Prevention program and established the organization’s Security by Design baseline. He also served as Executive Director of Operational Risk at BTG Pactual.

Prior to that, he held IT Risk and Audit roles at Santander, ABN AMRO, and Bank of America. In 2023, he founded Mercurius and transformed it from an ethical hacking firm into an AI-native cybersecurity platform operating across three countries.

Purpose, direction and the standards we hold ourselves to

Latin America's most trusted offensive-security partner

To be the reference critical organizations across LATAM turn to when they need to know — not assume — how they’d hold up against a determined attacker.

Proof over promises

Adversarial rigor, radical transparency in what we find, and operational discipline. We report the uncomfortable truth, because that’s the only version worth paying for.

Turn cyber risk into a decision the board can act on

Give security and executive leaders a clear, tested view of their real exposure — so risk stops being abstract and becomes something they can measure, prioritize and reduce.

Local teams in three regions, one operating standard.

Mercurius serves critical organizations across Latin America and North America, with expert teams operating locally in the United States, Chile and Brasil.

Global Presence Map
United States
Brasil
Chile

Best-in-class platforms, integrated into one intelligence-driven operation

We're building the offensive-security team your company needs

Red teamers, threat hunters and security engineers who’d rather break things responsibly than tick boxes.

Mercurius Leadership Team

Marcos Reis

Kaue Simões

Ulisses Alem

Victor Marabeli

Victor Santos

Best-in-class platforms, integrated into one intelligence-driven operation.

We don’t resell tools — we operate a curated stack, with the offensive context to make it deliver.

Radiant Security

Mercurius is Radiant Security’s official partner in Brazil, running AI-driven triage and response that cuts analyst workload and shrinks time-to-containment.

Cactus EASM

Continuous external attack surface management — surfacing exposed assets and shadow IT before an attacker maps them first.

AWS & Huawei Cloud

Mercurius solutions are listed on both AWS and Huawei Cloud marketplaces — procurement through your existing cloud commitments and credits.

Find out how you'd hold up before an attacker does

Talk to our team about a scoped offensive engagement, AI SOC or threat intelligence for your organization.