ServiceNow Unveils Autonomous Security & Risk: A Game Changer for Enterprise Governance

ServiceNow reported a significant milestone last year, with its security and risk segment surpassing $1 billion in annual contract value (ACV). This growth underscores the escalating demand for integrated solutions as organizations grapple with the complexities introduced by AI technologies. As AI continues to proliferate, the number of identities, permissions, and connected assets has grown exponentially, creating a pressing need for effective governance mechanisms.

“Today’s CISOs have to operate at two speeds: neutralizing threats in real time while reporting risk to the board with conviction,” said John Aisien, Senior Vice President and General Manager of Central Product Management, Security & Risk at ServiceNow. “Autonomous Security & Risk replaces that fragmented stack with a single graph that maps every identity, every permission, and every connected asset, enabling prevention, detection, and response at machine speed.”

One of the core challenges faced by enterprises is the governance of identities—particularly non-human identities, which now outnumber human ones. Every AI agent operates under an identity that interacts with various systems, but existing permission frameworks are often designed for human users, making them inadequate for the speed and complexity of AI operations.

Through its integration with Veza, ServiceNow has developed an Access Graph that provides a real-time map of access relationships across enterprise environments. This tool will help organizations understand who has access to what, and under what conditions, thereby surfacing risks and reinforcing the principle of least privilege.

Incorporating Armis into the ServiceNow platform significantly bolsters asset visibility. Armis delivers real-time, contextual awareness of all connected cyber assets—including those previously invisible to conventional security tools. By monitoring network traffic without disrupting operations, Armis enriches asset records with crucial information such as device type, classification, and risk posture.

This enhanced visibility is pivotal in allowing ServiceNow to respond at machine speed when vulnerabilities or misconfigurations are detected. By feeding real-time asset intelligence directly into security incident response workflows, organizations can act decisively to mitigate threats before they escalate.

The launch of Autonomous Security & Risk marks a significant advancement in the governance of AI within enterprises. The platform integrates asset intelligence, identity governance, risk management, and workflow automation into a seamless system, ensuring that AI agents operate within a framework of robust oversight and accountability.

As part of ServiceNow’s commitment to integrating AI into its operations, two new AI specialists have been introduced to autonomously handle vulnerability resolution and security operations. These innovations are expected to allow organizations to address unresolved vulnerability backlogs and investigate phishing incidents alongside human teams, thereby increasing operational efficiency.

Organizations utilizing the ServiceNow AI Platform are already witnessing transformative results. A global energy company reported saving 1.2 million hours by automating security operations, while a major U.S. financial institution eliminated 96% of dormant non-human identities, moving from policy to practice in enforcing least privilege.

Fortinet has voiced strong support for ServiceNow's capabilities, with John Whittle, Chief Operating Officer, stating, "As the attack surface expands, real-time visibility and control over every asset is non-negotiable. ServiceNow’s acquisition of Armis enables a powerful three-way partnership with Fortinet, advancing cybersecurity into an AI-driven, autonomous system that helps organizations continuously understand assets and respond to threats in real time.”

With the launch of Autonomous Security & Risk, ServiceNow is positioning itself at the forefront of enterprise AI governance. By addressing the fundamental challenges of identity management and asset visibility, the company is empowering organizations to navigate the complexities of modern cybersecurity landscapes. As enterprises move towards a future increasingly dominated by AI, ServiceNow’s integrated platform offers a compelling solution to ensure that security and risk management evolve in tandem with technological advancements.