This press release features multimedia. View the full release here: https:\/\/www.businesswire.com\/news\/home\/20260505177363\/en\/<\/a><\/p>\n \nSecurity and risk crossed $1 billion in annual contract value (ACV) for ServiceNow last year, making it one of the fastest-growing sources of demand on the ServiceNow AI Platform. The pressure is compounding as AI exponentially multiplies identities, permissions, connected assets, and decisions that require governance. AI agents acquire access, execute decisions, and operate at machine speed \u2013 and the non-human identities behind them already vastly outnumber human ones. Who approved that access, why it exists, and whether it remains valid are questions most enterprises cannot answer. Disconnected security tools cannot close this gap; a platform approach can.<\/p>\n \n\u201cToday\u2019s CISOs have to operate at two speeds: neutralizing threats in real time while reporting risk to the board with conviction,\u201d said John Aisien, senior vice president and general manager, Central Product Management, Security & Risk, ServiceNow.<\/b> \u201cAutonomous Security & Risk replaces that fragmented stack with a single graph that maps every identity, every permission, and every connected asset, so prevention, detection, and response happen at machine speed.\u201d<\/p>\n Every AI agent is an identity, with most ungoverned<\/b><\/p>\n \nEvery AI agent that acts inside an enterprise does so through an identity. It accesses systems, reads data, and executes workflows under a set of permissions that were almost certainly designed for human actors, rather than the speed, scale, or autonomy of AI agents. Closing the identity visibility, intelligence, and governance gap is critical.<\/p>\n Veza<\/a>‘s Access Graph provides a continuous, real-time map of every access relationship across an enterprise environment, including what has access, what it can do with that access, and how these change as context shifts, systems evolve, and agents multiply. With Veza now integrated into the ServiceNow AI Platform, this capability governs both human and non-human identities within a single operational framework: surfacing risk, enforcing least privilege at the point of action, triggering downstream remediation, and building the traceable institutional memory that auditors and regulators require. ServiceNow Veza works in concert with ServiceNow\u2019s existing vulnerability, exposure, and incident management capabilities to close pre-breach & post-breach exposure: governing who and what has access and continuously identifying and remediating permission-related vulnerabilities.<\/p>\n You cannot secure what you cannot see<\/b><\/p>\n \nAsset visibility has always been a foundational requirement of enterprise security, along with a persistent failure point. The environments enterprises operate in today span pre-compiled code, IT infrastructure, operational technology, connected devices, cloud workloads, medical equipment, and now AI agents, interacting across boundaries that no single tool was ever meant to fully see.<\/p>\n \nOnce integrated into ServiceNow, Armis<\/a> will deliver real-time, contextual awareness of every connected cyber asset, including the devices and systems conventional tools had no visibility into. Armis will monitor network traffic without agents, without disrupting operations, and enrich every asset record with device type, classification, firmware version, behavioral data, and real-time risk posture. This intelligence flows directly into the ServiceNow CMDB, turning a hitherto static inventory into a live picture of the actual attack surface. When an asset is found to be vulnerable, misconfigured, or behaving anomalously, ServiceNow responds at machine speed, in accordance with prevalent environmental context.<\/p>\n \nTogether, Veza and Armis boost ServiceNow\u2019s standing as a platform that knows what exists in the environment and who or what is permitted to interact with it. This real-time asset intelligence feeds directly into ServiceNow\u2019s security incident response workflows, so the same context used to assess risk before a breach is immediately available to contain it after.<\/p>\n The blueprint for trusted AI<\/b><\/p>\n \nWhen AI acts inside an enterprise, it must do so with the full business reality behind every decision, including governed permissions, continuous oversight, and an audit trail that holds under scrutiny. That is what Autonomous Security & Risk delivers. Asset intelligence, identity governance, risk management, and workflow automation operating as a single system, with AI running across all of it. Two new AI specialists, announced today<\/a> as part of ServiceNow\u2019s autonomous workforce expansion, handle vulnerability resolution and security operations end to end, autonomously addressing unresolved vulnerability backlogs and investigating phishing incidents alongside human teams.<\/p>\n \nThe ServiceNow AI Control Tower<\/a> governs agents, ensuring they are inventoried from the moment they appear, risk-scored continuously, and least privilege enforced in real time. Evaluations score agents as they run. If something drifts, the AI Control Tower is able to catch it before it compounds. A2A and MCP interoperability means any agent, on any platform, operates within a governed framework that connects decisions to context and accountability to action. That same governed framework extends across ServiceNow\u2019s partner ecosystem, so the third-party security tools enterprises already rely on feed into a continuously updated picture of enterprise posture. ServiceNow’s own security operations team runs Autonomous Risk & Security, handling incidents seven times faster than prior workflows using AI agents, with every action documented and every decision traceable.<\/p>\n \nOrganizations are already seeing results on the ServiceNow AI Platform<\/a>. A global energy company operating across 70+ countries saved 1.2 million hours by automating security operations and cut the time it takes to contain threats by 97%. A major U.S. financial services institution eliminated 96% of dormant non-human identities, turning least privilege from a policy goal into an enforced reality. A Fortune 100 aerospace manufacturer reduced the time to complete control attestations by 75% and close compliance gaps by 85%, replacing manual audit prep with evidence that captures itself.<\/p>\n \nEnterprises that establish this foundation of complete visibility, governed identities, integrated risk, and autonomous response will be decisively ahead as AI accelerates further. ServiceNow gives security and risk leaders a single view of how exposure, incidents, and identity decisions translate to enterprise risk posture in real time, with the audit trail regulators require.<\/p>\n What customers and partners say about Autonomous Security & Risk<\/b><\/p>\n Fortinet<\/b><\/p>\n \n\u201cAs the attack surface expands, real-time visibility and control over every asset is non-negotiable. ServiceNow\u2019s acquisition of Armis enables a powerful three-way partnership with Fortinet, advancing cybersecurity into an AI-driven, autonomous system that helps organizations continuously understand assets, prioritize threats, and execute response in real time,\u201d said John Whittle, chief operating officer at Fortinet. <\/b>\u201cWith Fortinet\u2019s industry-leading AI-driven innovation at scale, combined with our long-standing relationships and deep integrations across both platforms, we can drive ServiceNow security workflows with precision\u2014delivering faster, closed-loop protection and more consistent, accurate response for our customers.\u201d<\/p>\n About ServiceNow<\/b><\/p>\n \nServiceNow (NYSE: NOW) is the AI control tower for business reinvention. The ServiceNow AI Platform integrates with any cloud, any model, and any data source to orchestrate how work flows across the enterprise. By unifying legacy systems, departmental tools, cloud applications, and AI agents, ServiceNow provides a single pane of glass that connects intelligence to execution across every corner of business. With more than 100 billion workflows running on the platform each year, ServiceNow helps organizations turn fragmented operations into coordinated, autonomous workflows that deliver measurable results. Learn how ServiceNow puts AI to work for people at www.servicenow.com<\/a>.<\/p>\n Forward-looking statements<\/b><\/p>\n \nThis press release contains \u201cforward-looking statements\u201d about the expectations, beliefs, plans, and intentions relating to ServiceNow\u2019s AI platform innovations. Such statements include statements regarding future product capabilities and offerings and expected benefits to ServiceNow. Forward-looking statements are subject to known and unknown risks and uncertainties and are based on potentially inaccurate assumptions that could cause actual results to differ materially from those expected or implied by the forward-looking statements. If any such risks or uncertainties materialize or if any of the assumptions prove incorrect, ServiceNow\u2019s results could differ materially from the results expressed or implied by the forward-looking statements made. ServiceNow undertakes no obligation, and does not intend, to update the forward-looking statements. Factors that may cause actual results to differ materially from those in any forward-looking statements include: (i) delays and unexpected difficulties and expenses in executing the product capabilities and offerings, (ii) changes in the regulatory landscape related to AI and (iii) uncertainty as to whether sales will justify the investments in the product capabilities and offerings. Further information on factors that could affect ServiceNow\u2019s financial and other results is included in the filings ServiceNow makes with the Securities and Exchange Commission from time to time.<\/p>\n \n\u00a9 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and\/or registered trademarks of ServiceNow, Inc. in the United States and\/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.<\/p>\n View source version on businesswire.com: <\/span>https:\/\/www.businesswire.com\/news\/home\/20260505177363\/en\/<\/a><\/span><\/p>\n Media Contact KEYWORDS:<\/b> Nevada United States North America<\/p>\n INDUSTRY KEYWORDS:<\/b> Software Internet Public Relations\/Investor Relations Artificial Intelligence Data Management Communications Technology Mobile\/Wireless<\/p>\n![\"\"](\"https:\/\/mms.businesswire.com\/media\/20260505177363\/en\/2794783\/4\/Enterprise_Trust_and_Security_2_Autonomous_Security_%26_Risk_no_Cap.jpg\")
<\/div>\n<\/p>\n
\n<\/b>
Courtney Johnson
\n
925.405.2446
\n
press@servicenow.com<\/a><\/p>\n
![\"Photo\"](\"https:\/\/mms.businesswire.com\/media\/20260505177363\/en\/2794783\/3\/Enterprise_Trust_and_Security_2_Autonomous_Security_%26_Risk_no_Cap.jpg\")
<\/td>\n<\/tr>\n![\"Logo\"](\"https:\/\/mms.businesswire.com\/media\/20260505177363\/en\/1330354\/3\/ServiceNow_logo_RGB_BL_Green.jpg\"){kind=logo}
<\/td>\n<\/tr>\n