Leidos, RegScale embed continuous ATO risk management across federal systems

Leidos and RegScale embed continuous risk management into federal systems

Leidos is announcing a partnership with RegScale to integrate its UpHold Armor platform with RegScale’s Continuous Controls Monitoring (CCM) product, aiming to automate cybersecurity risk management and compliance across the Department of Defense, the U.S. Air Force and other federal agencies. The integrated offering embeds automated risk management into both modern and legacy systems, continuously tracking security controls and automatically collecting the evidence required for authorization to operate (ATO) under federal standards such as NIST SP 800-53 and FedRAMP.

The joint solution shifts agencies away from episodic, staff-intensive audits toward continuous readiness by providing ongoing compliance posture and automated evidence collection. Leidos and RegScale say this approach reduces operational risk, staff burden, time and cost associated with audits, and supports faster approvals for system deployment. Leidos Digital Modernization President Steve Hull describes the work as enabling mission-focused security, while RegScale co-founder and CEO Travis Howerton emphasizes turning ATO into a continuous capability so agencies can move at the speed of innovation.

The integration is designed to minimize the need for additional cybersecurity personnel and to avoid increasing operational complexity by embedding compliance into everyday processes. Initial deployments are supporting the U.S. Air Force and other War Department and federal organizations that are modernizing security operations, seeking improved visibility, reduced cyber risk and protection for aging systems. Leidos and RegScale present the offering as practical and cost-saving for agencies balancing mission demands with constrained budgets, enabling more secure mission delivery for taxpayers.

NorthStar modernization drive underpins move

The collaboration aligns with Leidos’ NorthStar 2030 strategic focus on digital modernization, reinforcing the company’s push into mission-led cybersecurity and systems modernization. Headquartered in Reston, Virginia, Leidos is positioning the program as part of a broader effort to bring automated, continuous security controls to large-scale federal programs; the company reports about 47,000 employees and roughly $16.7 billion in fiscal 2024 revenue.

RegScale’s role and initial rollout

RegScale is positioning its CCM platform as the automation layer that turns compliance artifacts into continuously updated operational data, and the partners are rolling out initial support for Air Force and DoD customers while promoting lower-cost, faster ATO cycles to other federal agencies. The companies unveil the offering via PR Newswire and frame it as a practical path for agencies to accelerate secure deployments without adding significant headcount.