ServiceNow completes USD $7.75 billion Armis acquisition

ServiceNow has completed its acquisition of cyber exposure management company Armis in a deal valued at about USD $7.75 billion in cash.

The acquisition expands ServiceNow's reach in security and risk management by adding Armis' technology for discovering and monitoring connected assets across IT, operational technology, internet of things devices, medical equipment, code and cloud environments.

It follows ServiceNow's March acquisition of identity intelligence specialist Veza, giving the company two recent additions aimed at broadening its security offering as customers manage growing numbers of devices, systems and machine identities.

ServiceNow's security and risk business passed USD $1 billion in annual contract value last year. With Armis and Veza, the company expects to more than triple its addressable market for security and risk products.

Deal logic

ServiceNow is targeting a longstanding problem in cyber security operations: many tools identify risks but do not fix them, while remediation systems often lack a full view of the assets and identities involved.

Armis brings real-time asset visibility, while Veza adds insight into permissions and access across human, machine and AI identities. ServiceNow is positioning that combination as a way to connect visibility, prioritisation and remediation within its workflow platform.

According to the company, Armis tracks nearly 7 billion devices in real time using non-invasive discovery methods. Those assets include industrial systems, connected devices, medical technology and other systems that often sit outside the reach of traditional IT security tools.

The acquisition also signals where ServiceNow sees demand heading. As organisations deploy more autonomous software agents and connect more operational systems, cyber teams are contending with a broader attack surface and a more fragmented set of tools.

Stolen credentials remain a major route into corporate systems, and machine identities now outnumber human identities by more than 80 to one, according to ServiceNow.

Executive view

Amit Zavery, President, Chief Operating Officer, and Chief Product Officer at ServiceNow, outlined the company's view of the combined offering.

"Most security platforms stop at the alert. ServiceNow closes the loop," Zavery said. "Armis gives us real-time, contextual awareness into the cyber risk of every connected asset, including the devices and systems that conventional tools were never built to see. Combined with Veza's identity intelligence, that signal flows into ServiceNow's Context Engine and AI Control Tower, turning exposure into automated remediation with governance and a full audit trail built in at every step."

Yevgeny Dibrov, Armis co-founder and chief executive, said the business was built to secure a wide range of connected assets used in sectors including manufacturing, healthcare and critical infrastructure.

"We built Armis to solve the toughest cybersecurity challenges of organizations globally, protecting all their assets across IT, OT, IoT, medical devices, code, and cloud that are at the heart of manufacturing, healthcare, and critical infrastructure," Dibrov said. "Joining ServiceNow, with Veza already on the platform, enables us to address this mission tenfold to keep the world's largest and most complex enterprise environments safe and secure."

Customer base

Armis now operates with ServiceNow's product, engineering and sales support, while its Armis Centrix product remains available as a standalone offering. The product is already integrated with ServiceNow's AI platform, with deeper integration planned over time.

The companies had several integrations in place before the transaction closed. That means ServiceNow is extending existing links between Armis asset data and ServiceNow workflow actions rather than starting from scratch.

Armis has built a sizeable customer footprint in large enterprises. It is used by nine of the Fortune 10 and more than 35% of the Fortune 100, according to ServiceNow, as well as by public sector bodies and government agencies.

That overlap matters because many of those customers already use ServiceNow products, which could make cross-selling easier as the company folds Armis into its broader platform.

Partner Response

Industry partners framed the deal as part of a wider shift toward more automated security operations.

"Stronger cyber resilience starts with visibility across the entire network," said Rex Thexton, Chief Technology Officer, Accenture Cybersecurity. "At Accenture, we help clients align this critical security foundation with real business outcomes. By leveraging solutions like ServiceNow and Armis, organizations can accelerate automated asset protection so they can scale securely, build the visibility needed to be resilient, and stay ahead of cyber threats."

Fortinet also pointed to its existing relationships with both businesses.

"As the attack surface expands, real-time visibility and control over every asset is non-negotiable," said John Whittle, Chief Operating Officer, Fortinet. "ServiceNow's acquisition of Armis enables a powerful three-way partnership with Fortinet, advancing cybersecurity into an AI-driven, autonomous system that helps organizations continuously understand assets, prioritize threats, and execute response in real time. With Fortinet's industry-leading AI-driven innovation at scale, combined with our long-standing relationships and deep integrations across both platforms, we can drive ServiceNow security workflows with precision - delivering faster, closed-loop protection and more consistent, accurate response for our customers."

Armis employees are joining ServiceNow as it builds out its cyber security business, one of its faster-growing segments, which now stands on a USD $1 billion annual contract value base, according to the company.