How ServiceNow Plans to Redefine Cyber Risk with Armis Deal

When ServiceNow revealed its intention to acquire Armis for US$7.75bn in cash, it signaled one of the most notable cybersecurity mergers in recent memory – driven by a shared commitment to scaling automated cyber risk management.
Armis, a recognised leader in cyber exposure and cyber-physical system protection, is set to join ServiceNow’s expanding Security and Risk portfolio once the deal closes in the second half of 2026.
Described by Armis Co-Founder and CEO Yevgeny Dibrov as a “strategic step forward,” the acquisition will extend ServiceNow’s reach across IT, OT, IoT and healthcare environments.
“From the beginning, Armis has been built to help organizations see, protect, and manage every asset they depend on across IT, OT, IoT, medical devices, cloud and code in an environment where the attack surface continues to expand,” Yevgeny says.
“Joining ServiceNow strengthens our ability to deliver on that mission at even greater scale.”
A unified platform for cyber exposure
Together, the two companies will merge Armis’ agentless asset intelligence with ServiceNow’s AI-driven security workflows, creating what ServiceNow describes as “a unified, end-to-end security exposure and operations stack” capable of seeing, deciding, and acting across the entire technology landscape.
Amit Zavery, ServiceNow’s President, COO and Chief Product Officer, says the move will accelerate the company’s roadmap toward autonomous, proactive cybersecurity.
“ServiceNow is building the security platform of tomorrow,” Amit adds. “In the agentic AI era, intelligent trust and governance that span any cloud, any asset, any AI system and any device are non-negotiable if companies want to scale AI for the long-term.
“Together with Armis, we will deliver an industry-defining strategic cybersecurity shield for real-time, end-to-end proactive protection across all technology estates.”
Once completed, the acquisition is projected to more than triple ServiceNow’s market opportunity in security and risk solutions.
Having already surpassed the US$1bn annual contract value milestone in 2025, ServiceNow’s Security and Risk business underscores the accelerating enterprise demand for integrated, AI-native protection.
The rising complexity of threats
As organisations accelerate their adoption of AI and automation, digital attack surfaces continue to expand at pace.
According to Gartner’s Forecast: Information Security, Worldwide, 2023–2029 report, global spending on information security is projected to grow 12.5% in 2026, reaching US$240bn – underscoring the rising demand for solutions that can manage real-time exposure and prioritise risk effectively.
Yevgeny continues: “AI is transforming the threat landscape faster than most organisations can adapt. Every connected asset has become a potential point of vulnerability.
“We built Armis to protect the most critical environments and give both public and private sector organisations the real-time intelligence they need to stay ahead – so they can see their entire environment clearly, understand risk in context and take action before an incident occurs.”
He adds that the integration will provide “a stronger foundation for helping customers continuously reduce risk across their environments”.
In practice, the unified platform will enhance vulnerability remediation and automated response, enabling enterprises to move from identifying their exposure to mitigating it in real time.
What to expect from the partnership
The ServiceNow–Armis collaboration is set to deliver a unified, AI-native security platform designed to shift enterprise protection from reactive to proactive.
Among its anticipated advantages are deeper visibility across IT, OT, IoT and medical environments, empowering teams to identify and prioritise risks with greater speed and precision.
By combining Armis’ real-time asset intelligence with ServiceNow’s automated workflows, organisations can achieve continuous, data-driven exposure management and streamlined remediation.
Ultimately, the partnership aims to provide cohesive cyber-physical security, closer alignment between threat detection and response, and enhanced resilience across digital and physical ecosystems – all essential to safeguarding critical infrastructure amid the rise of AI-driven threats.




