ServiceNow Unveils Six Autonomous Security Products Built on $9B Armis and Veza Acquisitions

ServiceNow debuts six autonomous security products built on Armis and Veza

ServiceNow Inc. today unveiled six security products and a group of artificial intelligence agents it says can carry vulnerability and incident work through to closure without an analyst driving each step. The launch is ServiceNow's biggest security push since it closed two large acquisitions. Its $7.75 billion purchase of connected device security company Armis Inc. closed on April 20. Identity security firm Veza Inc. closed on March 2. ServiceNow did not disclose that price, though it reportedly came in at $1.3 billion. ServiceNow pulled both into a portfolio it branded Autonomous Security & Risk in May, and today's products extend it. ServiceNow calls the underlying shift "Shift Zero," a move away from reactive tooling toward controls embedded at every layer, with a stated goal of zero exposure at any given moment. Fragmentation is the problem the company points to. Security teams at a typical enterprise juggle more than 70 tools, ServiceNow said. Endpoints, cloud environments and identities each get watched separately, and the findings rarely get looked at together. Agentic Exposure Management is the entry point. Vulnerability findings from any source land in a single stream. ServiceNow then layers on threat intelligence and a prioritized remediation list. A second release, the Vulnerability Resolution AI Specialist, does triage at enterprise scale. The specialist can also push low-risk patches on its own. Three releases cover detection. Application Security now runs threat modeling on AI-generated code and model dependencies, which ServiceNow says catches supply chain problems ahead of deployment. A dynamic application security testing product checks live applications and application programming interfaces for flaws that only show up at runtime. External attack surface management looks at infrastructure from the outside, the way an attacker would. Cyber-physical coverage comes largely from Armis. Agentic AI for Cyber Physical Security finds devices across operational technology and medical networks without installing agents on them. It sets behavioral baselines, checks compliance continuously and models attack paths so teams can see how an adversary would move. Remediation workflows run in brownfield environments without custom engineering, the company said. Veza shows up in identity. AI Agent Access Security unifies access control for AI agents regardless of platform or model provider. The other identity release, Non-Human Identity Remediation, goes past risk scoring into action. It rotates keys, deprovisions accounts and revokes permissions across IT, operational technology, internet of things and medical networks. Response and compliance make up the last two. ServiceNow's Tier 2 SOC AI Specialist, aimed at second-tier security operations center work, can build a multi-phase response plan for a complex incident and then execute it. Enrichment, correlation and containment run without a human. Anything high-risk goes to an analyst. Compliance is handled by a set of continuous monitoring agents. They check segregation of duties, access rights and configuration state in real time, both inside ServiceNow and in outside systems. Reports are available on demand. Covered frameworks include System and Organization Controls 2, the International Organization for Standardization's ISO 27001 standard, the Payment Card Industry Data Security Standard and the Health Insurance Portability and Accountability Act. The sixth product, Cryptographic Asset Compliance, hunts down legacy cryptographic algorithms across on-premises and cloud environments. It also guides the migration to quantum-resistant standards. "Machine identities double every 18 months. Fragmented security tools can't match the curve AI is creating," said Yevgeny Dibrov, senior vice president and general manager of cybersecurity and risk at ServiceNow, who co-founded Armis and was its chief executive. "Organizations need autonomous security and governance that matches the scale, velocity, and unpredictability of the threats coming." Eight of the products are available now, including Agentic Exposure Management, Application Security and both identity releases. Dynamic application security testing, external attack surface management and the cyber-physical package are also shipping. Four more arrive in December. Those are the Tier 2 SOC AI Specialist, the Vulnerability Resolution AI Specialist, continuous control monitoring and Cryptographic Asset Compliance. Security has been one of the faster-moving parts of the business. ServiceNow's security and risk unit crossed $1 billion in annual contract value last year, and Chairman and Chief Executive Bill McDermott called the company "the fastest-growing major enterprise software and cybersecurity company" in its second-quarter earnings release in July, when AI annual contract value also passed $1 billion for the first time.

ServiceNow delivers Autonomous Security, the industry's most complete security offering

ServiceNow unveils six unified security solutions with AI Specialists to enable prevention-first, AI-native cyber defense that operates at machine speed ServiceNow today announced an acceleration of its Autonomous Security vision with six unified solutions that help deliver prevention-first, AI-native cyber defense across unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, and agentic incident response, and cyber risk and compliance. With new AI Specialists that complete security workflows autonomously, including the Vulnerability Resolution AI Specialist, these capabilities enable enterprises to prevent, contain, and remediate risk at machine speed, before threats become breaches. As enterprises adopt agentic AI, security teams face an emerging challenge: every new agent, identity, and line of code multiplies exposure faster than any human team, or any patchwork of disconnected tools, can respond to. Closing that gap requires governed autonomy at the same machine speed. The average enterprise runs more than 70 security tools, fragmenting insights across the extended attack surface, including endpoints, networks, cloud environments, and identities. Today, ServiceNow becomes one of the most complete and fastest-growing security companies built for the AI era by consolidating this complexity into one unified system where assets, identities, and agents are visible, contextualized, secured, governed and auditable in a single motion. This is achievable through Shift Zero: the move from fragmented, reactive security to prevention embedded at every layer, where every system, identity, and agent is governed and secured in real-time as threats move at AI speed. In Shift Zero, the goal is zero exposure at all times with an enterprise able to answer, with proof, what every system is doing, why, and who is accountable, while AI moves as fast as the business needs it to. "As AI exposures compound exponentially, security teams operate on a human clock," said Yevgeny Dibrov, SVP and GM, cybersecurity and risk, ServiceNow. "Machine identities double every 18 months. Fragmented security tools can't match the curve AI is creating. Organizations need autonomous security and governance that matches the scale, velocity, and unpredictability of the threats coming: where all assets, identities, AI agents, critical infrastructure, cloud environments and code are protected, and can adapt as fast as the ecosystem moves to detect and remediate threats in real-time. Security becomes an accelerant, not the brake." Shift Zero: Prevention embedded at every layer Autonomous Security moves companies from reactive, fragmented security to prevention-first, autonomously governed security that operates faster than AI creates risk. The Autonomous Security offerings stand on six solutions that integrate into ServiceNow's AI Control Tower. Unified Exposure Management: Exposures pile up in silos, with security teams seeing vulnerabilities but not the assets that matter or which ones could be easily exploited. ServiceNow consolidates findings from any source and enriches data with business context and exploitation intelligence, enabling autonomous remediation at scale. * Agentic Exposure Management consolidates vulnerability findings from every source into a single stream enriched by Early Warning threat intelligence and Fix Intelligence prioritized remediation. * Vulnerability Resolution AI Specialist orchestrates triage and remediation at enterprise scale, executes low-risk patches, and turns exposure backlogs into closure pipelines. Continuous Vulnerability Detection: The attack surface spans code, cloud, and infrastructure, but traditional tools only see one layer at a time. ServiceNow closes these gaps, enabling security teams to govern code, cloud, and infrastructure risks from a unified platform. * Application Security extends threat modeling to AI-generated code and model dependencies with a new version that surfaces supply chain vulnerabilities before deployment. * Dynamic Application Security Testing (DAST) validates runtime vulnerabilities in live applications and APIs. * External Attack Surface Management (EASM) surfaces infrastructure exposure that attackers can exploit, showing a footprint the way threat actors see it. Cyber-Physical Security: OT, medical devices, and IoT systems can be blind spots because legacy tools disrupt production and lack the behavioral understanding needed to catch risky activity. ServiceNow brings continuous visibility and compliance monitoring to operational environments without disruption. * Agentic AI for Cyber Physical Security delivers agentless discovery across OT and medical networks, establishes behavioral baselines, validates compliance continuously in real time, and models attack paths, so security teams understand adversary movement. Automated remediation workflows execute across brownfield environments without custom engineering. Identity & Access Security: Non-human identities, service accounts, cloud identities, and AI agents are everywhere and almost entirely ungoverned. ServiceNow enables security teams to see, control, and govern every identity across the enterprise under consistent least-privilege principles. * AI Agent Access Security unifies access control for AI agents across any platform or model provider, closing the threat vector of ungoverned agents with escalated permissions. * Non-Human Identity Remediation moves beyond risk scoring into active action: automated key rotation, deprovisioning, and permission revocation at scale across IT, OT, IoT, and medical networks; enables AI agents and service accounts to operate under identical identity governance as human users. Agentic Incident Response: Incident response teams can lose hours stitching together threat intelligence, asset ownership, and identity data when they should be stopping threats. ServiceNow automates triage and investigation, freeing analysts to focus on sophisticated threats. * Agentic Incident Response enables ServiceNow's Tier 2 SOC AI Specialist to autonomously build and execute multi-phase response plans for complex incidents, performing actions like enrichment, correlation, containment and blocking while escalating only high-risk decisions to human analysts. Cyber Risk and Compliance: Compliance remains a pre-audit scramble. Evidence collection is manual, controls are monitored quarterly, and organizations are stuck playing catch-up. ServiceNow transforms compliance from a seasonal event into a continuous operational signal. * Agentic AI for Continuous Control Monitoring transforms control evidence into a continuous operational signal. Automated agents evaluate segregation of duties, access rights, and configuration state across ServiceNow and external systems in real time, surfacing violations the moment they occur. Compliance-ready reports exist on demand across regulatory frameworks including SOC 2, ISO 27001, PCI-DSS, and HIPAA. * Cryptographic Asset Compliance enables rapid migration from legacy cryptographic algorithms to quantum-resistant standards before the quantum threat window closes. ServiceNow delivers comprehensive discovery, AI-powered risk profiling, and guided migration workflows across on-premises and cloud environments, with full integration to ServiceNow Integrated Risk Management and Governance, Risk, and Compliance (IRM/GRC) products for regulatory compliance evidence at enterprise scale. What customers are saying about ServiceNow's security leadership "For organizations operating complex industrial environments, effective cybersecurity starts with understanding risk and maintaining visibility across the enterprise," said Brandon Glaze, Sr. Director, Cybersecurity (OT/ICS) at Baker Hughes. "We've appreciated the collaboration and innovation from the ServiceNow (Armis) team as we continue working together to improve cyber resilience and support secure, reliable operations." ServiceNow is building the world's most complete end-to-end security offering. Today's announcements are powered by ServiceNow's proven track record in security and risk and the depth of Armis and Veza now inside ServiceNow. Armis provides continuous, non-invasive visibility across every connected asset, tracking billions of devices in real time. Veza's Access Graph maps effective permissions across human, machine, and AI identities. Together, they feed ServiceNow's AI Control Tower, Context Engine, and orchestration layer with the unified business and operational intelligence that enables autonomous remediation with full governance and auditability.

Servicenow Unveils Six Unified Security Solutions with Ai Specialists to Enable Prevention-First Ai-Native Cyber Defense

ServiceNow announced an acceleration of its Autonomous Security vision with six unified solutions that help deliver prevention-first, AI-native cyber defense across unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, agentic incident response, and cyber risk and compliance. With new AI Specialists that complete security workflows autonomously, including the Vulnerability Resolution AI Specialist, these capabilities enable enterprises to prevent, contain, and remediate risk at machine speed, before threats become breaches. ServiceNow becomes one of the most complete and fastest-growing security companies built for the AI era by consolidating this complexity into one unified system where assets, identities, and agents are visible, contextualized, secured, governed and auditable in a single motion. This is achievable through Shift Zero: the move from fragmented, reactive security to prevention embedded at every layer, where every system, identity, and agent is governed and secured in real-time as threats move at AI speed. In Shift Zero, the goal is zero exposure at all times with an enterprise able to answer, with proof, what every system is doing, why, and who is accountable, while AI moves as fast as the business needs it to. Autonomous Security moves companies from reactive, fragmented security to prevention-first, autonomously governed security that operates faster than AI creates risk. The Autonomous Security offerings stand on six solutions that integrate into ServiceNow?s AI Control Tower. Unified Exposure Management: Exposures pile up in silos, with security teams seeing vulnerabilities but not the assets that matter or which ones could be easily exploited. ServiceNow consolidates findings from any source and enriches data with business context and exploitation intelligence, enabling autonomous remediation at scale. Agentic Exposure Management consolidates vulnerability findings from every source into a single stream enriched by Early Warning threat intelligence and Fix Intelligence prioritized remediation. Vulnerability Resolution AI Specialist orchestrates triage and remediation at enterprise scale, executes low-risk patches, and turns exposure backlogs into closure pipelines. Continuous Vulnerability Detection: The attack surface spans code, cloud, and infrastructure, but traditional tools only see one layer at a time. ServiceNow closes these gaps, enabling security teams to govern code, cloud, and infrastructure risks from a unified platform. Application Security extends threat modeling to AI-generated code and model dependencies with a new version that surfaces supply chain vulnerabilities before deployment. Dynamic Application Security Testing (DAST) validates runtime vulnerabilities in live applications and APIs. External Attack Surface Management (EASM) surfaces infrastructure exposure that attackers can exploit, showing a footprint the way threat actors see it. Cyber-Physical Security: OT, medical devices, and IoT systems can be blind spots because legacy tools disrupt production and lack the behavioral understanding needed to catch risky activity. ServiceNow brings continuous visibility and compliance monitoring to operational environments without disruption. Agentic AI for Cyber Physical Security delivers agentless discovery across OT and medical networks, establishes behavioral baselines, validates compliance continuously in real time, and models attack paths, so security teams understand adversary movement. Automated remediation workflows execute across brownfield environments without custom engineering. Identity & Access Security: Non-human identities, service accounts, cloud identities, and AI agents are everywhere and almost entirely ungoverned. ServiceNow enables security teams to see, control, and govern every identity across the enterprise under consistent least-privilege principles. AI Agent Access Security unifies access control for AI agents across any platform or model provider, closing the threat vector of ungoverned agents with escalated permissions. Non-Human Identity Remediation moves beyond risk scoring into active action: automated key rotation, deprovisioning, and permission revocation at scale across IT, OT, IoT, and medical networks; enables AI agents and service accounts to operate under identical identity governance as human users. Agentic Incident Response: Incident response teams can lose hours stitching together threat intelligence, asset ownership, and identity data when they should be stopping threats. ServiceNow automates triage and investigation, freeing analysts to focus on sophisticated threats. Agentic Incident Response enables ServiceNow's Tier 2 SOC AI Specialist to autonomously build and execute multi-phase response plans for complex incidents, performing actions like enrichment, correlation, containment and blocking while escalating only high-risk decisions to human analysts. Cyber Risk and Compliance: Compliance remains a pre-audit scramble. Evidence collection is manual, controls are monitored quarterly, and organizations are stuck playing catch-up. ServiceNow transforms compliance from a seasonal event into a continuous operational signal. Agentic AI for Continuous Control Monitoring transforms control evidence into a continuous operational signal. Automated agents evaluate segregation of duties, access rights, and configuration state across ServiceNow and external systems in real time, surfacing violations the moment they occur. Compliance-ready reports exist on demand across regulatory frameworks including SOC 2, ISO 27001, PCI-DSS, and HIPAA. Cryptographic Asset Compliance enables rapid migration from legacy cryptographic algorithms to quantum-resistant standards before the quantum threat window closes. ServiceNow delivers comprehensive discovery, AI-powered risk profiling, and guided migration workflows across on-premises and cloud environments, with full integration to ServiceNow Integrated Risk Management and Governance, Risk, and Compliance (IRM/GRC) products for regulatory compliance evidence at enterprise scale.