ServiceNow has completed its $7.75 billion cash acquisition of Armis, closing a deal that materially expands the company’s position in enterprise security and sharpens its pitch to customers building AI-heavy operating models. The transaction, funded with cash and debt, follows ServiceNow’s March 2026 purchase of identity specialist Veza and signals a clear M&A thesis. Own the data layer that explains enterprise risk, then monetize it through workflow automation.
Armis brings real-time visibility into connected assets across IT, OT, IoT, medical devices, code, and cloud. Veza adds identity intelligence, mapping who and what has access across systems. Combined inside ServiceNow, those capabilities give the company a broader graph of assets, permissions, and business context. That matters because security budgets are shifting toward platforms that can connect detection, prioritization, and remediation rather than feed more alerts into fragmented tool stacks.
The strategic logic is straightforward. ServiceNow already sits in the operational center of many large enterprises through IT service management, workflow orchestration, and governance. By adding Armis, it moves closer to becoming a control plane for cyber response, especially in environments where operational technology and physical assets are now part of the attack surface. Think factories, hospitals, utilities, and critical infrastructure. Those sectors have become priority targets as AI adoption expands machine identities and autonomous processes.
The timing also reflects a broader consolidation trend in cybersecurity. Buyers increasingly want fewer vendors, tighter integrations, and clearer accountability. Point products still matter, but platform vendors are capturing more of the budget by promising closed-loop execution. ServiceNow is betting that security leaders will prefer a system that can identify an exposed device, understand its business importance, trace access paths, and trigger remediation through existing enterprise workflows.
There is execution risk. Integrating Armis and Veza into a coherent product architecture while preserving standalone value will test product discipline and sales alignment. But the direction is unmistakable. ServiceNow is using acquisitions to move up the security stack, from workflow backbone to decision engine. Management says Armis and Veza together will more than triple its addressable market for security and risk. If that holds, the company is building more than a security product line. It is building a larger claim on enterprise operating spend.
Source: Company press release and Acquire.fyi's proprietary data
