ServiceNow has completed its acquisition of Armis, a leading cyber exposure management and security company, delivering a comprehensive AI-powered solution that sees, protects, and manages cyber risk across every connected asset — from OT, IoT, medical devices, physical AI to code and cloud — in real time. The acquisition extends ServiceNow’s security platform into the physical and operational layers of the enterprise, adding the cyber asset intelligence foundation and business context that enterprises need to deploy agentic AI with trust and control at scale.
The close follows ServiceNow’s completion of the Veza acquisition in March 2026. Veza brought AI-native identity intelligence to the ServiceNow AI Platform, giving enterprises continuous visibility into who and what has access to every digital, connected resource. With the Armis acquisition, ServiceNow’s identity intelligence and cyber exposure management capabilities distinctively power critical pre-breach and post-breach security outcomes as enterprises deploy agentic AI at scale. Together, Armis delivers real-time visibility and protection across every connected cyber asset, while Veza maps every permission and access path across human, machine, and AI agent identities.
Closing the gap between visibility and cyber risk
Security teams operating across fragmented, point solution stacks have long faced a structural challenge. Historically, the tools that manage risk cannot execute on remediation actions, and the tools that remediate cyber risk cannot see the full picture. The result is a widening gap between detection and response, a gap that exponentially increases the risk of security incidents in the agentic AI era.
Stolen credentials remain the dominant entry point for attackers and this problem is accelerating. Machine identities now outnumber human identities by more than 80 to one, and nearly half carry sensitive or privileged access rights that most organizations cannot fully see or control, leading to lateral movement attacks.² As enterprises accelerate agentic AI, their attack surface has expanded further to encompass autonomous agents, unmanaged OT devices, and other connected systems across manufacturing, healthcare, and critical infrastructure that conventional security tools were never built to handle.
ServiceNow’s advantage is architectural. Armis provides continuous, real-time visibility, management, and security across every connected cyber asset through non-invasive discovery, tracking nearly 7 billion devices in real time, including OT, IoT, medical devices and physical AI, code, and cloud. Veza’s Access Graph provides cross-system visibility into every permission held by every human, machine, and AI agent identity. Both graphs power ServiceNow’s Context Engine — the organizational intelligence that grounds every AI action in business reality, mapping assets and identities to the services, processes, teams, and policies that depend on them. Risk prioritization becomes automatic. Remediation becomes autonomous. Every action is auditable and bounded by policy. The result is a platform that doesn’t just sense risk across the enterprise — it decides what matters most, acts through automated workflows, and governs every step with a full audit trail.
“Most security platforms stop at the alert. ServiceNow closes the loop,” said Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow. “Armis gives us real-time, contextual awareness into the cyber risk of every connected asset, including the devices and systems that conventional tools were never built to see. Combined with Veza’s identity intelligence, that signal flows into ServiceNow’s Context Engine and AI Control Tower, turning exposure into automated remediation with governance and a full audit trail built in at every step.”
“We built Armis to solve the toughest cybersecurity challenges of organizations globally, protecting all their assets across IT, OT, IoT, medical devices, code, and cloud that are at the heart of manufacturing, healthcare, and critical infrastructure,” said Yevgeny Dibrov, co-founder and CEO, Armis. “Joining ServiceNow, with Veza already on the platform, enables us to address this mission tenfold to keep the world’s largest and most complex enterprise environments safe and secure.”
What this means for customers and partners
For current Armis customers, Armis Centrix now operates with the full support of ServiceNow’s product, engineering, and global go-to-market organization. It is integrated with the ServiceNow AI Platform today and remains available as a standalone solution, with deeper integration expected over time.
Customers of both ServiceNow and Armis can immediately begin leveraging their combined capabilities, with broader availability coming soon. Partners of ServiceNow and Armis can immediately accelerate revenue by tapping into growing customer demand from organizations looking to deploy agentic AI with trust and control at scale.
ServiceNow establishes global hub to pioneer autonomous cyber defense
ServiceNow is establishing an AI Center for Cyber Defense — a global hub dedicated to building the next generation AI security stack and pioneering the transition from reactive security to autonomous, agentic cyber defense. The center will bridge the gap between AI research and practical cybersecurity solutions, serve as a definitive resource for enterprise security leaders transitioning from legacy frameworks to AI-native security postures, and develop the expertise needed to anticipate and neutralize AI-driven attacks before they occur.
With Armis employees joining ServiceNow, the combined organization brings deep expertise in cyber-physical security and risk to the ServiceNow AI Platform, accelerating its roadmap for autonomous, proactive cybersecurity. ServiceNow closed its largest quarter ever for OT in Q4 2025 and its security and risk business crossed $1 billion in annual contract value in Q3 — organic growth that established the foundation Armis now extends.
Armis, together with Veza, is expected to more than triple ServiceNow’s addressable market for security and risk solutions.
