The deal is ServiceNow’s second major security acquisition in two months — and its most direct bet yet that the future of cybersecurity is autonomous, not just automated.
ServiceNow has completed its acquisition of Armis, a cyber asset management company, in a deal the enterprise software giant says will more than triple its addressable market for security and risk solutions and extend its platform into the physical and operational layers of the modern enterprise.
The close follows ServiceNow’s acquisition of Veza in March 2026. Veza brought AI-native identity intelligence to the ServiceNow platform, giving organizations visibility into who and what has access to every connected digital resource. Armis adds a different but complementary capability: real-time discovery and monitoring of every connected device — across operational technology, the internet of things, medical equipment, industrial infrastructure, and cloud environments — regardless of whether those devices can run conventional security software.
Together, the two acquisitions address what ServiceNow describes as a structural failure in enterprise security: the gap between tools that detect risk and tools that can act on it. Armis tracks nearly seven billion devices in real time. Veza maps the permissions held by every human, machine and AI agent identity across an organization’s systems. Both feed into ServiceNow’s Context Engine, which is designed to automatically prioritize risk, trigger remediation via automated workflows, and maintain a full audit trail of every action taken.
“Most security platforms stop at the alert. ServiceNow closes the loop,” said Amit Zavery, president, chief operating officer and chief product officer at ServiceNow. “Armis gives us real-time, contextual awareness into the cyber risk of every connected asset, including devices and systems that conventional tools were never built to see.”
Also Read: Who Pays When Payment Fraud Slips Through?
The strategic logic is sharpened by a structural shift in the threat landscape. Machine identities now outnumber human identities in enterprise environments by more than 80 to one, and nearly half carry sensitive or privileged access rights that most organizations cannot fully monitor — creating conditions for the kind of lateral movement attacks that have become increasingly common. Stolen credentials remain the leading entry point for attackers. As enterprises accelerate their deployment of AI agents, the number of non-human identities operating across their systems is growing faster than most security teams can track.
Yevgeny Dibrov, co-founder and chief executive of Armis, said the combination with ServiceNow and Veza would allow the company to address its founding mission — protecting complex enterprise environments across manufacturing, healthcare and critical infrastructure — at significantly greater scale. “Joining ServiceNow, with Veza already on the platform, enables us to address this mission tenfold,” he said.
For existing Armis customers, the company’s core product, Armis Centrix, continues to operate as a standalone solution while deeper integration with the ServiceNow platform is developed. Armis was named a Leader in the 2026 Gartner Magic Quadrant for CPS Protection Platforms for the second consecutive year, as well as in two Forrester Wave assessments in 2025. The company is trusted by nine of the Fortune 10 and more than 35% of the Fortune 100, many of whom are already ServiceNow customers.
Also Read: The Security Playbook Everyone Follows Until Tuesday — and Abandons by Thursday
ServiceNow also announced the establishment of an AI Center for Cyber Defense, a research and development hub focused on building what the company describes as the next generation of autonomous security infrastructure — designed to anticipate and neutralize AI-driven attacks rather than respond to them after the fact.
The security and risk business is already one of ServiceNow’s fastest-growing segments. The division crossed $1 billion in annual contract value in the third quarter of 2025, and the company closed its largest quarter ever for operational technology security in the fourth quarter — organic growth that, the company says, established the commercial foundation Armis now extends.
