ServiceNow acquires Veza to tackle identity governance challenges in enterprise AI deployments

ServiceNow Targets Identity Governance Gap with Veza Acquisition

ServiceNow announced it has signed an agreement to acquire Veza, a fast-growing identity management platform specializing in identity security for both human and AI agent identities 1

1

. While the terms were not disclosed, news reports suggest ServiceNow paid more than $1 billion for the Los Gatos, California-based company, which was last valued at $808 million in April 1

1

. This marks ServiceNow's sixth acquisition in 2025, representing a notable shift for a company that has historically favored organic growth 3

3

.

Amit Zavery, ServiceNow's president, chief product officer, and chief operating officer, explained that chief information security officers have been increasingly demanding ways to control and track data access by people and AI agents 1

1

. The acquisition will boost ServiceNow's cybersecurity offerings, which currently generate more than $1 billion in annual sales for the SaaS giant 1

1

.

Access Graph Technology Addresses Critical Bottleneck

Veza's Access Graph technology maps access relationships and permissions across billions of nodes, from identity to specific permissions on individual resources 4

4

. Zavery said ServiceNow was particularly impressed with this patented system that tracks relationships and access privileges across human, AI agent, devices, and data pools in real time 1

1

. The technology addresses what has become a critical bottleneck preventing enterprise AI deployments from moving beyond pilot stages: without granular visibility into who and what can access systems and data, deploying agentic AI becomes an unacceptable security risk that most CISOs won't approve 3

3

.

AI Agent Security Product Tackles Emerging Risks

Veza recently launched AI Agent Security, a purpose-built product designed to help organizations mitigate security risks and govern AI agents at enterprise scale 2

2

. The service addresses what Veza describes as a "new class of security risks," including prompt injection attacks where outsiders manipulate agents into revealing confidential data or executing unauthorized actions 2

2

. AI Agent Security eliminates blindspots by discovering and classifying agent identities across the enterprise and enforces the principle of least privilege by laying out the full blast radius of agents and highlighting what sensitive data they can access 2

2

.

The service integrates with major AI ecosystems including Microsoft Copilot Studio, Salesforce Agentforce, AWS Bedrock, and Google Vertex AI 2

2

. Veza CEO and co-founder Tarun Thakur stated, "It's the Wild West with agentic AI right now. CISOs and chief information officers are racing to deploy AI, but few have visibility or control over what these agents can actually do" 2

2

.

Complex Access Control for AI Agents

AI agents pose particular challenges for access control because the same agent might need different network privileges depending on which employee it's working for and what task it's handling 1

1

. Zavery provided an example: an AI agent querying an HR database might be allowed access to sensitive salary data when working on behalf of a senior manager but only limited access to basic employee benefit data when working for a junior employee 1

1

. Veza's platform allows companies to write these kinds of complex access rules and establish robust governance with complete agents-to-human identity mapping 2

2

.

Integration with AI Control Tower

ServiceNow will combine Veza's Access Graph platform with its AI Control Tower, an AI governance and management dashboard launched earlier this year that has been among the company's fastest-growing offerings 1

1

4

4

. The company will also add Veza's vulnerability response, incident response, and integrated risk management capabilities to its security and risk products 4

4

. The shift in ServiceNow's messaging from "AI platform for business transformation" to "AI control tower for business reinvention" signals where the company sees itself heading—emphasizing control over enablement 3

3

.

Founded in 2020, Veza serves nearly 150 global enterprises including Blackstone, Wynn Resorts, Expedia, Crowdstrike, Workday, and Zoom 1

1

4

4

. The service ensures continuous compliance with support for Open Worldwide Application Security Project recommendations and provides instant answers for auditors and enterprises to meet regulatory requirements 2

2

. The acquisition addresses how organizations can give AI agents enough access to be useful without creating massive security exposures while proving to regulators they have control over AI systems accessing sensitive data 3

3

. With scalability and workflows at the center of agentic AI risks, this deal positions ServiceNow to help customers embrace AI with greater confidence as they move from pilots to production.