ServiceNow completes acquisition of Armis

ServiceNow, the AI control tower for business reinvention, have completed its acquisition of Armis. Armis, a leading cyber exposure management and security company, delivers a comprehensive AI-powered solution that sees, protects, and manages cyber risk across every connected asset — from OT, IoT, medical devices, physical AI to code and cloud — in real time. The acquisition extends ServiceNow's security platform into the physical and operational layers of the enterprise, adding the cyber asset intelligence foundation and business context that enterprises need to deploy agentic AI with trust and control at scale.
The close follows ServiceNow's completion of the Veza acquisition in March 2026. Veza brought AI-native identity intelligence to the ServiceNow AI Platform, giving enterprises continuous visibility into who and what has access to every digital, connected resource. With the Armis acquisition, ServiceNow's identity intelligence and cyber exposure management capabilities distinctively power critical pre-breach and post-breach security outcomes as enterprises deploy agentic AI at scale. Together, Armis delivers real-time visibility and protection across every connected cyber asset, while Veza maps every permission and access path across human, machine, and AI agent identities.
Closing the gap between visibility and cyber risk
Security teams operating across fragmented, point solution stacks have long faced a structural challenge. Historically, the tools that manage risk cannot execute on remediation actions, and the tools that remediate cyber risk cannot see the full picture. The result is a widening gap between detection and response, a gap that exponentially increases the risk of security incidents in the agentic AI era.
Stolen credentials remain the dominant entry point for attackers¹ and this problem is accelerating. Machine identities now outnumber human identities by more than 80 to one, and nearly half carry sensitive or privileged access rights that most organisations cannot fully see or control, leading to lateral movement attacks.² As enterprises accelerate agentic AI, their attack surface has expanded further to encompass autonomous agents, unmanaged OT devices, and other connected systems across manufacturing, healthcare, and critical infrastructure that conventional security tools were never built to handle.
ServiceNow's advantage is architectural. Armis provides continuous, real-time visibility, management, and security across every connected cyber asset through non-invasive discovery, tracking nearly 7 billion devices in real time, including OT, IoT, medical devices and physical AI, code, and cloud. Veza's Access Graph provides cross-system visibility into every permission held by every human, machine, and AI agent identity.
Both graphs power ServiceNow's Context Engine — the organisational intelligence that grounds every AI action in business reality, mapping assets and identities to the services, processes, teams, and policies that depend on them. Risk prioritisation becomes automatic. Remediation becomes autonomous. Every action is auditable and bounded by policy. The result is a platform that doesn't just sense risk across the enterprise — it decides what matters most, acts through automated workflows, and governs every step with a full audit trail.
"Most security platforms stop at the alert. ServiceNow closes the loop," said Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow. "Armis gives us real-time, contextual awareness into the cyber risk of every connected asset, including the devices and systems that conventional tools were never built to see. Combined with Veza's identity intelligence, that signal flows into ServiceNow's Context Engine and AI Control Tower, turning exposure into automated remediation with governance and a full audit trail built in at every step."
"We built Armis to solve the toughest cybersecurity challenges of organisations globally, pro...