ServiceNow Launches Autonomous Security & Risk Platform to Govern AI and Enterprise Assets

ServiceNow has officially launched its "Autonomous Security & Risk" platform, a new initiative designed to provide centralized governance for the rapidly expanding ecosystem of AI agents, digital identities, and connected enterprise assets. The platform aims to address the security challenges posed by the proliferation of non-human identities, which now significantly outnumber human users within many corporate environments Help Net Security.

The core of the platform relies on two strategic integrations to close visibility gaps. First, the company has integrated Veza’s Access Graph technology to manage both human and non-human identities. Because AI agents often operate using permissions originally designed for human users, they create significant security risks. Veza provides a continuous, real-time map of access relationships, allowing organizations to enforce the principle of least privilege, surface potential risks, and maintain the audit trails required by regulators Help Net Security.

Second, ServiceNow has partnered with Armis to provide comprehensive asset intelligence. The integration allows the platform to monitor IT, OT, IoT, and cloud-based assets without the need for intrusive agents. By analyzing network traffic, Armis enriches the ServiceNow Configuration Management Database (CMDB) with real-time data, including device classifications, firmware versions, and behavioral risk postures. This transforms the CMDB from a static inventory into a dynamic, live representation of the organization's actual attack surface Help Net Security.

The urgency for this platform stems from the fact that ServiceNow’s security and risk business recently surpassed $1 billion in annual contract value. As AI agents begin to execute decisions and access sensitive data at machine speed, traditional, fragmented security tools are struggling to keep pace. John Aisien, SVP and GM of Security & Risk at ServiceNow, noted that the platform is designed to allow CISOs to neutralize threats in real-time while simultaneously providing clear, data-driven risk reporting to stakeholders Help Net Security.

By combining identity governance with asset visibility, the platform aims to automate the detection and remediation of vulnerabilities. When the system identifies an asset that is misconfigured or behaving anomalously, it can trigger automated responses based on the context provided by the integrated tools. This approach is intended to bridge the gap between pre-breach prevention and post-breach incident management Help Net Security.

This launch reflects a broader industry trend toward platform-based security models as organizations grapple with the complexity of AI-driven workflows. As enterprises continue to deploy autonomous agents, the ability to govern non-human identities and maintain visibility across diverse, interconnected environments will likely remain a primary focus for security leaders looking to mitigate risk at scale Help Net Security.