ServiceNow, the AI control tower for business transformation, announced Autonomous Security & Risk at its annual customer and partner event, Knowledge 2026 , to manage all AI agents, identities, and connected assets . Armis provides continuous asset intelligence across code, IT, OT, IoT, and connected assets. Veza provides granular visibility, intelligence, and governance for human and non-human identities. This combination creates one of the most comprehensive security, risk, and compliance platforms for enterprise AI.<\/p>
Last year, ServiceNow’s security and risk business surpassed $1 billion in annual contract value (ACV), becoming one of the fastest-growing demand sources on the ServiceNow AI Platform. The pressure is mounting as AI dramatically increases the number of decisions that require identity, authority, connected assets, and control. AI agents gain access, make decisions, and operate at machine speed. The number of non-human identities behind them already far exceeds the number of human identities. Most companies cannot answer the questions of who authorized that access, why it exists, and whether it is still valid. Fragmented security tools cannot bridge this gap, but a platform approach can.<\/p>
\u4f01\u696d\u5185\u3067\u52d5\u4f5c\u3059\u308b\u3059\u3079\u3066\u306eAI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306f\u3001\u30a2\u30a4\u30c7\u30f3\u30c6\u30a3\u30c6\u30a3\u3092\u901a\u3058\u3066\u6a5f\u80fd\u3057\u307e\u3059\u3002AI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306f\u30b7\u30b9\u30c6\u30e0\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u30c7\u30fc\u30bf\u3092\u8aad\u307f\u53d6\u308a\u3001\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u5b9f\u884c\u3057\u307e\u3059\u304c\u3001\u305d\u306e\u6a29\u9650\u306fAI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u81ea\u4f53\u306e\u30b9\u30d4\u30fc\u30c9\u3001\u30b9\u30b1\u30fc\u30eb\u3001\u81ea\u5f8b\u6027\u3067\u306f\u306a\u304f\u3001\u4eba\u9593\u306e\u884c\u70ba\u8005\u306e\u305f\u3081\u306b\u8a2d\u8a08\u3055\u308c\u305f\u3082\u306e\u3067\u3059\u3002\u30a2\u30a4\u30c7\u30f3\u30c6\u30a3\u30c6\u30a3\u306e\u53ef\u8996\u6027\u3001\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u3001\u30ac\u30d0\u30ca\u30f3\u30b9\u306e\u30ae\u30e3\u30c3\u30d7\u3092\u57cb\u3081\u308b\u3053\u3068\u306f\u975e\u5e38\u306b\u91cd\u8981\u3067\u3059\u3002.<\/p>
Veza ‘s Access Graph continuously and in real time maps all access relationships across the enterprise environment, including what has access, what can be done with that access, and how that changes as context shifts, systems evolve, and agents proliferate. With Veza integrated into the ServiceNow AI Platform, this capability governs both human and non-human identities within a single operational framework. It surfaces risks, enforces least privilege at the point of action, triggers downstream remediation, and builds the traceable organizational memory required by auditors and regulators. ServiceNow Veza works with ServiceNow’s existing vulnerability, exposure, and incident management capabilities to mitigate exposures before and after a breach. In other words, it manages “who has what” access and continuously identifies and remediates vulnerabilities related to privileges.<\/p>
Asset visibility is a fundamental requirement of enterprise security, yet it has consistently been a source of failure. Today’s enterprise environments encompass precompiled code, IT infrastructure, operational technologies (OT), connected devices, cloud workloads, medical devices, and now even AI agents, all interacting across boundaries that cannot be fully captured by a single tool.<\/p>
ServiceNow\u3068\u7d71\u5408\u3055\u308c\u305fArmis\u306f\u3001\u5f93\u6765\u306e\u30c4\u30fc\u30eb\u3067\u306f\u898b\u3048\u306a\u304b\u3063\u305f\u30c7\u30d0\u30a4\u30b9\u3084\u30b7\u30b9\u30c6\u30e0\u3082\u542b\u3081\u3001\u63a5\u7d9a\u3055\u308c\u305f\u3059\u3079\u3066\u306e\u30b5\u30a4\u30d0\u30fc\u8cc7\u7523\u3092\u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u3067\u6587\u8108\u306b\u5408\u308f\u305b\u3066\u628a\u63e1\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002Armis\u306f\u3001\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3084\u904b\u7528\u306e\u4e2d\u65ad\u306a\u3057\u306b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30fb\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u76e3\u8996\u3057\u3001\u30c7\u30d0\u30a4\u30b9\u306e\u7a2e\u985e\u3001\u5206\u985e\u3001\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3001\u52d5\u4f5c\u30c7\u30fc\u30bf\u3001\u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u306e\u30ea\u30b9\u30af\u614b\u52e2\u3067\u3059\u3079\u3066\u306e\u8cc7\u7523\u30ec\u30b3\u30fc\u30c9\u3092\u5f37\u5316\u3057\u307e\u3059\u3002\u3053\u306e\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u306f\u3001ServiceNow CMDB\u306b\u76f4\u63a5\u6d41\u308c\u8fbc\u307f\u3001\u9759\u7684\u306a\u30a4\u30f3\u30d9\u30f3\u30c8\u30ea\u3092\u5b9f\u969b\u306e\u653b\u6483\u30b5\u30fc\u30d5\u30a7\u30b9\u306e\u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u306e\u5168\u4f53\u7684\u306a\u30d3\u30e5\u30fc\u306b\u5909\u63db\u3057\u307e\u3059\u3002\u30a2\u30bb\u30c3\u30c8\u306b\u8106\u5f31\u6027\u3001\u8a2d\u5b9a\u30df\u30b9\u3001\u7570\u5e38\u306a\u52d5\u4f5c\u304c\u691c\u51fa\u3055\u308c\u308b\u3068\u3001ServiceNow\u306f\u5171\u901a\u306e\u74b0\u5883\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u306b\u5f93\u3063\u3066\u30de\u30b7\u30f3\u30b9\u30d4\u30fc\u30c9\u3067\u5bfe\u5fdc\u3057\u307e\u3059\u3002.<\/p>
Veza and Armis are working together to enhance ServiceNow’s advantage as a platform for understanding what exists in an environment and “who and what” is allowed to interact with that environment. This real-time asset intelligence will be fed directly into ServiceNow’s security incident response workflow, making the same context used to assess risk before a breach immediately available for containing that risk after a breach.<\/p>
When AI functions within an enterprise, it must be based on the business realities behind every decision, including permission management, continuous monitoring, and an audit trail that can withstand scrutiny. That’s what Autonomous Security & Risk offers. Asset intelligence, identity governance, risk management, and workflow automation work together as a single system, all powered by AI. Two new AI specialists announced today as part of ServiceNow’s Autonomous Workforce expansion handle vulnerability resolution and security operations end-to-end, autonomously addressing the unresolved vulnerability backlog and investigating phishing incidents alongside human teams.<\/p>
The ServiceNow AI Control Tower manages agents, ensuring inventory registration from the moment an agent appears, continuous risk scoring, and real-time enforcement of least privilege. Assessments are performed while agents are running. If something deviates, the AI Control Tower can catch it before it escalates. The interoperability of the Agent-to-Agent Protocol (A2A) and Model Context Protocol (MCP) means that any agent on any platform operates within a controlled framework that links decision-making to context and accountability to action. This same controlled framework extends to ServiceNow’s partner ecosystem, so that third-party security tools that enterprises already use inform a continuously updating overall picture of their posture. ServiceNow’s in-house security operations team operates Autonomous Security & Risk and uses AI agents to process incidents 7 times faster than traditional workflows, document all actions, and make all decisions traceable.<\/p>
ServiceNow AI Platform\u3067\u306f\u3001\u3059\u3067\u306b\u591a\u304f\u306e\u4f01\u696d\u304c\u6210\u679c\u3092\u4e0a\u3052\u3066\u3044\u307e\u3059\u300270\u30ab\u56fd\u4ee5\u4e0a\u3067\u4e8b\u696d\u3092\u5c55\u958b\u3059\u308b\u30b0\u30ed\u30fc\u30d0\u30eb\u30fb\u30a8\u30cd\u30eb\u30ae\u30fc\u4f01\u696d\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30aa\u30da\u30ec\u30fc\u30b7\u30e7\u30f3\u3092\u81ea\u52d5\u5316\u3059\u308b\u3053\u3068\u3067\u3001120\u4e07\u6642\u9593\u3092\u7bc0\u7d04\u3057\u3001\u8105\u5a01\u306e\u5c01\u3058\u8fbc\u3081\u306b\u304b\u304b\u308b\u6642\u9593\u309297%\u77ed\u7e2e\u3057\u307e\u3057\u305f\u3002\u7c73\u56fd\u306e\u5927\u624b\u91d1\u878d\u30b5\u30fc\u30d3\u30b9\u4f01\u696d\u306f\u3001\u4eba\u9593\u4ee5\u5916\u306e\u4f11\u7720\u72b6\u614b\u306eID\u309296%\u524a\u6e1b\u3057\u3001\u6700\u5c0f\u6a29\u9650\u306e\u539f\u5247\u3092\u30dd\u30ea\u30b7\u30fc\u306e\u76ee\u6a19\u304b\u3089\u78ba\u5b9f\u306b\u5b9f\u65bd\u3055\u308c\u308b\u73fe\u5b9f\u306b\u5909\u3048\u307e\u3057\u305f\u3002\u30d5\u30a9\u30fc\u30c1\u30e5\u30f3100\u306b\u30e9\u30f3\u30af\u30a4\u30f3\u3059\u308b\u822a\u7a7a\u5b87\u5b99\u30e1\u30fc\u30ab\u30fc\u304c\u3001\u624b\u4f5c\u696d\u306b\u3088\u308b\u76e3\u67fb\u6e96\u5099\u3092\u30bb\u30eb\u30d5\u30ad\u30e3\u30d7\u30c1\u30e3\u30c8\u30ec\u30a4\u30eb\u306b\u7f6e\u304d\u63db\u3048\u3001\u7ba1\u7406\u8a3c\u660e\u306e\u5b8c\u4e86\u306b\u304b\u304b\u308b\u6642\u9593\u309275%\u77ed\u7e2e\u3057\u3001\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30ae\u30e3\u30c3\u30d7\u3092\u89e3\u6d88\u3059\u308b\u306e\u306b\u304b\u304b\u308b\u6642\u9593\u309285%\u77ed\u7e2e\u3057\u307e\u3057\u305f\u3002.<\/p>
\u5b8c\u5168\u306a\u53ef\u8996\u6027\u3001\u7ba1\u7406\u3055\u308c\u305f\u30a2\u30a4\u30c7\u30f3\u30c6\u30a3\u30c6\u30a3\u3001\u7d71\u5408\u3055\u308c\u305f\u30ea\u30b9\u30af\u3001\u81ea\u5f8b\u7684\u306a\u5bfe\u5fdc\u3068\u3044\u3063\u305f\u57fa\u76e4\u3092\u78ba\u7acb\u3057\u305f\u4f01\u696d\u306f\u3001AI\u304c\u52a0\u901f\u3059\u308b\u4e2d\u3067\u6c7a\u5b9a\u7684\u306a\u512a\u4f4d\u6027\u3092\u6301\u3064\u3053\u3068\u306b\u306a\u308b\u3067\u3057\u3087\u3046\u3002. ServiceNow<\/a> provides security and risk leaders with a single view of how exposure, incident, and identity decisions are reflected in the enterprise’s risk posture in real time, and provides the audit trails that regulators need.<\/p>