Sounds like both COULD... but that would require a whole lot of development into an HTTP or other method, one that would have to allow for many different types of other controllers. It would also end up being very dependent on what those companies do. If they change their APIs or whatever then the whole thing falls apart and Securifi would look bad at first. I know from my own workplace that many people will blame the device/code where they first find the problem even if you have evidence that it was the OS/3rd party software/customer misconfiguration, etc...
No idea if Securifi is working on something that could do this. If they did, awesome. I have stuff I would add also. But... it is not something I am banking on because it is just too susceptible to change. At least with ZigBee and Z-Wave you have general standards that the companies are supposed to support (and even then some of them mess with it).