Shapefin

ServiceNow Completes Armis Acquisition, Enhancing AI-Powered Cyber Exposure and Identity Management

Share It:

Santa Clara, Calif. – ServiceNow (NYSE: NOW) has finalized its acquisition of Armis, a company specializing in cyber exposure management and security. This acquisition expands ServiceNow’s security platform to include the physical and operational layers of enterprise environments, integrating cyber asset intelligence and business context necessary for deploying agentic AI with trust and control.

Armis provides a comprehensive, AI-powered solution that offers real-time visibility, protection, and management of cyber risk across connected assets, including OT, IoT, medical devices, physical AI, code, and cloud infrastructure. The transaction follows ServiceNow’s March 2026 acquisition of Veza, which introduced AI-native identity intelligence to the ServiceNow AI Platform, providing continuous visibility into access paths for digital and connected resources. The combined capabilities of Armis and Veza are designed to enhance pre-breach and post-breach security as organizations adopt agentic AI at scale. Armis ensures real-time visibility and protection across cyber assets, while Veza maps permissions and access for human, machine, and AI agent identities.

Security teams often encounter challenges with fragmented point solutions, where risk management tools cannot execute remediation, and remediation tools lack a holistic view. This creates a gap between detection and response, which intensifies security risks, particularly in the agentic AI era. Stolen credentials are a primary entry point for attackers, and the proliferation of machine identities, which outnumber human identities by over 80 to one and frequently possess sensitive access rights, further expands the attack surface. The adoption of agentic AI introduces additional attack vectors through autonomous agents, unmanaged OT devices, and other connected systems in sectors like manufacturing, healthcare, and critical infrastructure.

ServiceNow’s approach is architectural, leveraging Armis for continuous, real-time visibility and security across approximately 7 billion connected cyber assets via non-invasive discovery. Veza’s Access Graph provides cross-system visibility into permissions for all human, machine, and AI agent identities. Both graphs feed into ServiceNow’s Context Engine, which grounds AI actions in business reality by mapping assets and identities to relevant services, processes, teams, and policies. This integration automates risk prioritization and remediation, with every action being auditable and policy-bound. The platform aims to not only detect enterprise risk but also prioritize, automate responses, and govern actions with a comprehensive audit trail.

Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow, stated, “Most security platforms stop at the alert. ServiceNow closes the loop. Armis gives us real-time, contextual awareness into the cyber risk of every connected asset, including the devices and systems that conventional tools were never built to see. Combined with Veza’s identity intelligence, that signal flows into ServiceNow’s Context Engine and AI Control Tower, turning exposure into automated remediation with governance and a full audit trail built in at every step.” Yevgeny Dibrov, co-founder and CEO of Armis, added, “We built Armis to solve the toughest cybersecurity challenges of organizations globally, protecting all their assets across IT, OT, IoT, medical devices, code, and cloud that are at the heart of manufacturing, healthcare, and critical infrastructure. Joining ServiceNow, with Veza already on the platform, enables us to address this mission tenfold to keep the world’s largest and most complex enterprise environments safe and secure.”

For existing Armis customers, Armis Centrix™ now operates with the support of ServiceNow’s product, engineering, and global go-to-market organization. It is integrated with the ServiceNow AI Platform and remains available as a standalone solution, with deeper integration planned. Customers of both ServiceNow and Armis can immediately begin utilizing their combined capabilities. Partners of both companies can also capitalize on increased customer demand for deploying agentic AI securely and with control.

ServiceNow is also establishing an AI Center for Cyber Defense, a global hub focused on developing advanced AI security stacks and facilitating the transition from reactive to autonomous cyber defense. This center will bridge AI research with practical cybersecurity solutions, serving as a resource for security leaders adopting AI-native security postures and developing expertise to proactively counter AI-driven attacks.

Armis has maintained its position as a Leader in the industry since the acquisition announcement. It was recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms for the second consecutive year, and also in The Forrester Wave™: IoT Security Solutions, Q3 2025, and The Forrester Wave™: Unified Vulnerability Management Solutions, Q3 2025. Armis Centrix™ was also named “Best Solution” for Cyber Exposure Management in The Global InfoSec Awards at the RSAC™ 2026 Conference. ServiceNow and Armis already have multiple integrations connecting Armis’ asset intelligence to ServiceNow workflow actions. Armis is trusted by nine of the Fortune 10, over 35% of the Fortune 100, and public sector organizations globally, many of whom are existing ServiceNow customers.

Rex Thexton, chief technology officer, Accenture Cybersecurity, commented, “Stronger cyber resilience starts with visibility across the entire network. At Accenture, we help clients align this critical security foundation with real business outcomes. By leveraging solutions like ServiceNow and Armis, organizations can accelerate automated asset protection so they can scale securely, build the visibility needed to be resilient, and stay ahead of cyber threats.” John Whittle, chief operating officer, Fortinet, added, “As the attack surface expands, real-time visibility and control over every asset is non-negotiable. ServiceNow’s acquisition of Armis enables a powerful three-way partnership with Fortinet, advancing cybersecurity into an AI-driven, autonomous system that helps organizations continuously understand assets, prioritize threats, and execute response in real time. With Fortinet’s industry-leading AI-driven innovation at scale, combined with our long-standing relationships and deep integrations across both platforms, we can drive ServiceNow security workflows with precision — delivering faster, closed-loop protection and more consistent, accurate response for our customers.”

The integration of Armis employees brings expertise in cyber-physical security and risk to the ServiceNow AI Platform, accelerating its roadmap for autonomous, proactive cybersecurity. ServiceNow achieved its largest quarter ever for OT in Q4 2025, and its security and risk business surpassed $1 billion in annual contract value in Q3 2025. The addition of Armis, alongside Veza, is expected to more than triple ServiceNow’s addressable market for security and risk solutions.

ServiceNow completed the acquisition of Armis for approximately $7.75 billion in cash, funded through a combination of cash on hand and debt. Tidal Partners served as ServiceNow’s lead financial advisor, with J.

P. Morgan Securities LLC and Barclays also acting as financial advisors.

Latest Posts