Mia-Platform and UNGUESS Partner to Turn Attack Surface Data into Actionable, Owned Security Insights

Milan, 5 November 2026 – Mia-Platform, the company behind the AI-Native Developer Platform Foundation, and UNGUESS, the European offensive cybersecurity company, are proud to announce a strategic partnership. The partnership brings UNGUESS Security's external attack surface data into Mia-Platform's Context Catalog.

The partnership aims to help organizations in regulated sectors like financial services, insurance, healthcare and critical infrastructure close the gap between finding vulnerabilities and fixing them. UNGUESS Security's continuous offensive recon shows what an attacker can see from the outside. Mia-Platform's Context Catalog maps that to the organization's software assets, services and teams. Together they give security and engineering teams one shared, AI-built view of their exposure.

Our researchers have always started from one question: what can an attacker see from the outside? For a CISO, that is only half the picture. They also need to know who owns each exposed asset and whether the risk is real. By bringing UNGUESS Security's attack-surface data into Mia-Platform's Context Catalog, we give security and engineering teams one shared AI-built view, where every exposed host has an owner, every vulnerability has a path to remediation and tools to automate asset management. Together, we expect to help organisations in regulated sectors automatically shrink their attack surface, not just measure it, and turn continuous testing into evidence for NIS2 and DORA.

Luca Manara, President & Executive Chairman at UNGUESS

Enterprise attack surfaces are growing quickly with cloud-native architectures, APIs and AI-powered applications. Security teams often find exposed assets with no clear owner, and engineering teams get findings without the context to act on them. Regulations such as NIS2 and DORA add pressure to prove that risks are found, owned and fixed on an ongoing basis. Organizations are moving toward a single source of truth that links security findings to the software catalog, ownership and remediation workflows.

Security can't be handled as a separate silo anymore. It has to be part of how enterprises build and run their software. With UNGUESS, we bring the attacker's view straight into the Context Catalog, next to services, APIs, teams and ownership. Engineering and security teams can then act on the same context, and AI agents can help automate remediation at scale. For organizations in regulated industries, that means moving from reactive security to continuous, provable resilience.

Francesco Soncini Sessa, President and Head of Strategic Alliances at Mia-Platform

The partnership gives enterprises one connected approach to managing their attack surface. UNGUESS Security's continuous offensive testing shows them what an attacker can see. Mia-Platform's Context Catalog adds the ownership, context and automation they need to act on it. Together, the two companies help organizations in regulated sectors reduce their exposure, speed up remediation, and produce continuous evidence of their security posture for NIS2 and DORA. Software engineering and cybersecurity work as one discipline instead of two.

About UNGUESS

UNGUESS Security is a European offensive cybersecurity company that combines human expertise and AI-powered technologies to help organizations identify, validate, and address vulnerabilities before attackers can exploit them. Through its proprietary platform and a network of over 200 vetted European ethical hackers, UNGUESS Security delivers continuous penetration testing, bug bounty programs, external attack surface management, and AI/LLM security testing. By combining automated threat detection, AI-driven analysis, and human validation, UNGUESS Security enables organizations to gain real-time visibility into their security posture, prioritize critical risks, and strengthen their resilience against evolving cyber threats.

Discover more: security.unguess.io

About Mia-Platform

Mia-Platform is the AI-native developer platform for enterprises that need AI to actually work in production. The Context Catalog keeps AI grounded in your organization's data, rules, policies, and compliance, mapping your entire software ecosystem. The AI Foundry creates governed and reusable AI Playbooks for governed AI adoption over enterprise development.

press@mia-platform.eu