Key Takeaways
- ServiceNow completed its $7.75 billion acquisition of Armis, adding real‑time cyber‑asset intelligence to its AI‑driven platform.
- The deal builds on the earlier Veza acquisition, giving ServiceNow combined identity‑intelligence and exposure‑management capabilities that close the loop between detection and automated remediation.
- Armis provides continuous, non‑invasive visibility of nearly 7 billion connected assets—including OT, IoT, medical devices, physical AI, code and cloud—while Veza maps permissions across human, machine and AI‑agent identities.
- Together they feed ServiceNow’s Context Engine and AI Control Tower, enabling risk‑prioritization, autonomous workflow actions and full audit trails for agentic AI deployments.
- ServiceNow is launching an AI Center for Cyber Defense to pioneer autonomous, agentic security and to translate AI research into practical defenses.
- Armis remains a Leader in Gartner and Forrester reports and is trusted by nine of the Fortune 10 and over 35 % of the Fortune 100, reinforcing immediate cross‑sell opportunities.
- The acquisition is expected to more than triple ServiceNow’s addressable market for security and risk solutions.
Acquisition Overview
ServiceNow announced the completion of its acquisition of Armis, a leading cyber exposure management and security firm, for approximately $7.75 billion in cash. The transaction was financed through a mix of existing cash reserves and debt, with Tidal Partners acting as lead financial advisor and J.P. Morgan Securities and Barclays providing additional advisory services. The close follows ServiceNow’s earlier purchase of Veza in March 2026, which brought AI‑native identity intelligence to the platform. By integrating Armis, ServiceNow now possesses a comprehensive view of both digital and physical assets, extending its security platform into the operational technology (OT) layers of enterprises.
Strategic Rationale
The primary motivation behind the Armis deal is to bridge the longstanding gap between visibility and remediation in enterprise security. Traditional point‑solution stacks often detect threats but lack the ability to act on them, while remediation tools frequently operate without a complete picture of the environment. This disconnect widens the detection‑response gap, increasing risk—especially as agentic AI expands the attack surface to include autonomous agents, unmanaged OT devices, and other connected systems. Armis supplies continuous, real‑time discovery of nearly 7 billion devices across IT, OT, IoT, medical devices, physical AI, code and cloud, delivering the missing visibility layer that ServiceNow can now couple with automated workflow enforcement.
Addressing the Visibility‑Action Gap
ServiceNow’s architecture now combines Armis’ asset intelligence with Veza’s Access Graph, which maps every permission held by human, machine and AI‑agent identities. Both graphs feed the ServiceNow Context Engine—the organizational “brain” that grounds AI actions in business reality by linking assets and identities to the services, processes, teams and policies that depend on them. This integration enables automatic risk prioritization and autonomous remediation, with every action bound by policy and fully auditable. As Amit Zavery, President, COO and CPO of ServiceNow, noted, “Most security platforms stop at the alert. ServiceNow closes the loop,” turning exposure into governed, automated response.
Technological Synergy with Veza
The Veza acquisition earlier in 2026 supplied continuous visibility into who and what can access any digital or connected resource. When combined with Armis’ asset‑level insights, the resulting data set provides a holistic view of both identity and asset landscapes. This synergy allows ServiceNow’s AI Control Tower to correlate anomalous behavior with specific assets and privileged access paths, facilitating pre‑breach prevention and rapid post‑breach containment. Enterprises deploying agentic AI can now trust that the AI’s decisions are informed by accurate, real‑time context, reducing the likelihood of inadvertent privilege escalation or lateral movement by compromised machines.
Impact on Customers and Partners
Existing Armis customers will see Armis Centrix™ operate under ServiceNow’s full product, engineering and go‑to‑market support, while remaining available as a standalone solution with deeper integration planned over time. Customers of both ServiceNow and Armis can immediately begin leveraging the combined capabilities, with broader availability expected soon. Partners of the two firms can accelerate revenue by addressing rising demand for secure, scalable agentic AI deployments. Testimonials from Accenture and Fortinet highlight the value of aligning security foundations with business outcomes and the potential for a three‑way partnership that delivers faster, closed‑loop protection through precise workflow execution.
Establishing AI Center for Cyber Defense
To sustain its leadership in autonomous security, ServiceNow is launching an AI Center for Cyber Defense—a global hub dedicated to building the next‑generation AI security stack. The center will bridge academic AI research and practical cybersecurity solutions, serve as a definitive resource for enterprise leaders transitioning from legacy frameworks to AI‑native postures, and develop expertise to anticipate and neutralize AI‑driven attacks before they materialize. This initiative underscores ServiceNow’s commitment to moving beyond reactive alerts toward predictive, agentic defense mechanisms that can operate at scale across complex enterprises.
Industry Recognition and Market Reach
Even before the acquisition closed, Armis continued to earn accolades, reinforcing its credibility. It was named a Leader in the 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms for the second consecutive year, and also secured Leader positions in The Forrester Wave™: IoT Security Solutions (Q3 2025) and The Forrester Wave™: Unified Vulnerability Management Solutions (Q3 2025). Armis Centrix™ was honored as “Best Solution” for Cyber Exposure Management at the RSAC™ 2026 Global InfoSec Awards. Armis is trusted by nine of the Fortune 10 and more than 35 % of the Fortune 100, as well as numerous public‑sector organizations worldwide. Many of these entities are already ServiceNow customers, highlighting the complementary nature of the two platforms and the existing market appetite for their combined capabilities.
Financial Details and Forward‑Looking Statements
The $7.75 billion cash purchase price positions the Armis acquisition as one of ServiceNow’s largest strategic investments to date. The press release includes customary forward‑looking statements concerning future product capabilities, expected benefits, and integration timelines. It cautions that actual results may differ due to risks such as delays in assimilating acquired technology, challenges retaining employees or customers of the acquired firms, or unforeseen liabilities from legacy businesses. ServiceNow notes it does not intend to update these statements and directs readers to its SEC filings for further detail on factors that could affect financial and operational outcomes.
Conclusion
ServiceNow’s acquisition of Armis, built upon the earlier Veza purchase, creates a powerful, AI‑driven security fabric that connects deep asset visibility with intelligent identity intelligence. By feeding these insights into the Context Engine and AI Control Tower, the company enables enterprises to detect, prioritize, and remediate cyber risk autonomously—complete with audit trails and policy governance. The move not only closes the critical visibility‑action gap but also establishes a foundation for autonomous, agentic cyber defense through the new AI Center for Cyber Defense. With strong industry recognition, a broad customer base, and a significantly expanded addressable market, ServiceNow is well positioned to help organizations scale agentic AI initiatives with trust, control, and resilience.