Sicura Launches AI-Native Security Control Management

July 16, 2026 — Sicura, a leader in security control management, today announced the launch of AI-native capabilities that accelerate the deployment of secure IT infrastructure.

The following capabilities are immediately available in the Sicura platform:

‍The Sicura MCP Server makes the Sicura platform accessible to commonly-used LLMs, including ChatGPT, Claude, Gemini. With conversational AI assistants, users can easily understand, query, collect, and generate compliance evidence from a chat. By generating machine-readable evidence and integrating with OSCAL-compatible tools, this tool automates the creation of common compliance documentation, including Site Security Plans (SSPs) or (Plans of Actions and Milestons) POAMs.

‍Sicura AI for Governance and Enforcement (SAGE) is an AI-native scanning tool that creates customized security profiles, rapidly scans systems, instantly delivers accurate results, and generates machine-readable evidence. SAGE maps security standards to an organization’s technology and regulatory needs. The tool generates scan-ready security profiles from any human-written policy, including compliance frameworks where machine-readable benchmarks are not available.

“AI-native capabilities open up access to a common language for compliance, reducing the friction between security and engineering that I saw inside the National Security Agency, and throughout the federal community,” said Kendall Moore Co-Founder and CTO of Sicura. “The launch of the Sicura MCP Server and SAGE AI marks a significant step toward our goal to make it easier for any team to build hardened infrastructure where security is mission-critical. The people who protect and serve our nation deserve cutting-edge capabilities and time to solve real problems for our citizenry, not endless bureaucracy.”

AI-native capabilities provide significant usability and scale enhancements to the Sicura platform’s comprehensive product suite. SAGE AI and Sicura MCP Server will join and integrate with the platform’s automated remediation capabilities and flexible deployment package across hybrid environments. Rooted in NSA frameworks, Sicura provides a single platform to find compliance drift, fix it, and keep it fixed. Together, these tools reduce time, labor, and cost by automating compliance, from the first scan to ongoing enforcement.

Sicura is trusted by teams including Army DEVCOM and the U.S. Department of State to deliver continuous compliance that adapts to shifts in threats, technology, regulation, and user behavior in real-time.

The Sicura team will be providing demonstrations of these capabilities at the following upcoming events including:

• The 8th Annual Carahsoft Summit on FedRamp, July 23, Washington D.C.
• The 4th Annual Carahsoft DevSecOps Conference, July 28, Reston, VA
• The Billington Cybersecurity Summit, Sept. 8-10, Washington, DC.

To book a demo of the new AI-native capabilities, email hello@sicura.us.

‍ABOUT SICURA

Sicura is a Security Control Management platform for mission-critical IT infrastructure. Rooted in NSA-developed frameworks, Sicura accelerates deployment through tailored security policies, automated remediation, and seamless integration with DevSecOps workflows. Trusted by federal agencies like Army DEVCOM and the Department of State, Sicura delivers continuous hardening across hybrid environments. To learn more, visit http://sicura.us.

‍