ServiceNow (NYSE: NOW) has announced its intent to acquire Veza, a company specializing in identity security. This acquisition aims to expand the capabilities of ServiceNow’s Security and Risk portfolios by integrating identity security, an area critical to preventing breaches and controlling access within enterprise environments.
With this integration, organizations will gain enhanced abilities to understand and manage who and what can access their critical data, applications, systems, and AI artifacts. As businesses increasingly leverage autonomous capabilities powered by agentic AI, the combination of Veza and ServiceNow seeks to establish end-to-end identity security rooted in the principle of least privilege, thereby reducing enterprise risk.
Modern enterprises confront the challenge of managing a diverse array of identities, including employees, partners, systems, applications, devices, and autonomous AI agents. The rise of agentic AI in orchestrating sophisticated attacks necessitates robust identity and access controls and governance to ensure permissions align with evolving roles, regulatory requirements, and technological advancements.
Veza’s approach is powered by its patented Access Graph, an AI-native technology that maps and analyzes access relationships across human, machine, and AI identities. This platform provides comprehensive access visibility and risk control, embedding governance into identity and access management layers. This enables security teams to manage complexity and securely deploy AI across their operations.
Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow, stated, “In the era of agentic AI, every identity—human, AI agent, or machine—is a force for enterprise impact. It’s only when you have continuous visibility into each identity’s permissions that you can trust it. By combining Veza’s industry-first Access Graph with ServiceNow’s AI Control Tower and agentic workflows, we can give customers a true single pane of glass, with control of every identity in their organization.”
Tarun Thakur, CEO of Veza, added, “Veza was built to make identity security transparent, scalable, and effective for every organization. With ServiceNow, we will help customers embrace AI with greater confidence. Together, we can turn identity governance and identity security into a strategic advantage by giving organizations clear, integrated control over every type of identity—whether it belongs to a person, a machine, or an AI agent.”
Veza’s Access Graph provides an AI-native identity security approach, offering a single dashboard to identify and rectify overly broad permissions across human and machine identities, including AI agents. Its scalable platform supports next-generation Identity Governance and Administration (IGA) capabilities such as access reviews, access requests, and an access hub, alongside permission updates and end-to-end visibility.
John Stecher, chief technology officer at Blackstone, commented on the potential integration, saying, “ServiceNow powers our horizontal business workflows, while Veza enforces least privilege and adds identity access intelligence at scale. Together, they’ll enable more secure and scalable workflows for enterprise businesses with smarter access management, ongoing access reviews, and seamless deprovisioning.”
The integration will also enhance the ServiceNow AI Control Tower by governing what AI agents can access and do across enterprises. Veza is expected to add critical identity context to existing ServiceNow Security and Risk products, including Vulnerability Response, Incident Response, and Integrated Risk Management, offering a clearer view of entities associated with exposures, incidents, or risk events.
Veza, founded in 2020, serves nearly 150 global enterprise customers in sectors such as banking, hospitality, and fast-moving consumer goods (FMCG). The company employs 230 individuals globally. After the transaction closes, Veza’s identity visibility, intelligence, and governance capabilities will be incorporated into ServiceNow’s security portfolio. The acquisition is subject to customary regulatory approvals and closing conditions.
