ServiceNow debuts six autonomous security products built on Armis and Veza

ServiceNow debuts six autonomous security products built on Armis and Veza ServiceNow Inc. today unveiled six security products and a group of artificial intelligence agents it says can carry vulnerability and incident work through to closure without an analyst driving each step. The launch is ServiceNow’s biggest security push since it closed two large acquisitions. Its $7.75 billion purchase of connected device security company Armis Inc. closed on April 20. Identity security firm Veza Inc. closed on March 2. ServiceNow did not disclose that price, though it reportedly came in at $1.3 billion. ServiceNow pulled both into a portfolio it branded Autonomous Security & Risk in May, and today’s products extend it. ServiceNow calls the underlying shift “Shift Zero,” a move away from reactive tooling toward controls embedded at every layer, with a stated goal of zero exposure at any given moment. Fragmentation is the problem the company points to. Security teams at a typical enterprise juggle more than 70 tools, ServiceNow said. Endpoints, cloud environments and identities each get watched separately, and the findings rarely get looked at together. Agentic Exposure Management is the entry point. Vulnerability findings from any source land in a single stream. ServiceNow then layers on threat intelligence and a prioritized remediation list. A second release, the Vulnerability Resolution AI Specialist, does triage at enterprise scale. The specialist can also push low-risk patches on its own. Three releases cover detection. Application Security now runs threat modeling on AI-generated code and model dependencies, which ServiceNow says catches supply chain problems ahead of deployment. A dynamic application security testing product checks live applications and application programming interfaces for flaws that only show up at runtime. External attack surface management looks at infrastructure from the outside, the way an attacker would. Cyber-physical coverage comes largely from Armis. Agentic AI for Cyber Physical Security finds devices across operational technology and medical networks without installing agents on them. It sets behavioral baselines, checks compliance continuously and models attack paths so teams can see how an adversary would move. Remediation workflows run in brownfield environments without custom engineering, the company said. Veza shows up in identity. AI Agent Access Security unifies access control for AI agents regardless of platform or model provider. The other identity release, Non-Human Identity Remediation, goes past risk scoring into action. It rotates keys, deprovisions accounts and revokes permissions across IT, operational technology, internet of things and medical networks. Response and compliance make up the last two. ServiceNow’s Tier 2 SOC AI Specialist, aimed at second-tier security operations center work, can build a multi-phase response plan for a complex incident and then execute it. Enrichment, correlation and containment run without a human. Anything high-risk goes to an analyst. Compliance is handled by a set of continuous monitoring agents. They check segregation of duties, access rights and configuration state in real time, both inside ServiceNow and in outside systems. Reports are available on demand. Covered frameworks include System and Organization Controls 2, the International Organization for Standardization’s ISO 27001 standard, the Payment Card Industry Data Security Standard and the Health Insurance Portability and Accountability Act. The sixth product, Cryptographic Asset Compliance, hunts down legacy cryptographic algorithms across on-premises and cloud environments. It also guides the migration to quantum-resistant standards. “Machine identities double every 18 months. Fragmented security tools can’t match the curve AI is creating,” said Yevgeny Dibrov, senior vice president and general manager of cybersecurity and risk at ServiceNow, who co-founded Armis and was its chief executive. “Organizations need autonomous security and governance that matches the scale, velocity, and unpredictability of the threats coming.” Eight of the products are available now, including Agentic Exposure Management, Application Security and both identity releases. Dynamic application security testing, external attack surface management and the cyber-physical package are also shipping. Four more arrive in December. Those are the Tier 2 SOC AI Specialist, the Vulnerability Resolution AI Specialist, continuous control monitoring and Cryptographic Asset Compliance. Security has been one of the faster-moving parts of the business. ServiceNow’s security and risk unit crossed $1 billion in annual contract value last year, and Chairman and Chief Executive Bill McDermott called the company “the fastest-growing major enterprise software and cybersecurity company” in its second-quarter earnings release in July, when AI annual contract value also passed $1 billion for the first time. Photo: ServiceNow A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network. Are you AWS customer? Support SiliconANGLE Financially by buying your AWS services from our Marketplace portal page and links. About SiliconANGLE Media SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.