ServiceNow has confirmed it is to buy identity security firm Veza.
Reports emerged last week that ServiceNow was in advanced negotiations to acquire the five-year-old identity security startup for more than $1B. Silicon Valley-based Veza serves around 150 global enterprise customers, including Wynn Resorts, Expedia, and investment firm Blackstone.
The acquisition will bolster ServiceNow’s identity security capabilities, helping organizations to understand and control who and what has access to their critical data, applications, systems, and AI artifacts.
This, argues ServiceNow, will become increasingly important as businesses take advantage of autonomous capabilities made possible through agentic AI. It points out that enterprises are struggling with an expanding mix of digital identities – from employees and contractors to applications, devices, and now autonomous AI agents. As such, security leaders are under pressure to keep access tightly governed.
End-to-End Visibility
A recent vendor assessment by analyst firm Omdia noted that Veza operates at the intersection of identity security posture management (ISPM), identity governance/administration (IGA), and non-human identity (NHI) security, positioning it as a strong candidate to lead enterprises’ shift toward “identity-first security”.
Veza’s AI-native identity security platform is built on a patented Access Graph that maps and analyzes relationships across human, machine, and AI identities. Put simply, the system provides end-to-end visibility into who has access to what. The platform offers IGA, including access reviews, access requests, permission updates, and an access hub – capabilities the company says surpass legacy solutions.
“In the era of agentic AI, every identity – human, AI agent, or machine – is a force for enterprise impact. It’s only when you have continuous visibility into each identity’s permissions that you can trust it,” said Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow, in a statement.
“By combining Veza’s industry-first Access Graph with ServiceNow’s AI Control Tower and agentic workflows, we can give customers a true single pane of glass, with control of every identity in their organization. Together, we’ll empower CISOs and security teams to make safer access decisions that protect their businesses, and to defend their high-value data assets from AI-powered attacks.”
Tarun Thakur, CEO of Veza, added that together the firms will “turn identity governance and identity security into a strategic advantage by giving organizations clear, integrated control over every type of identity – whether it belongs to a person, a machine, or an AI agent.”
Monitor and Enforce AI Access Across the Ecosystem
“ServiceNow powers our horizontal business workflows, while Veza enforces least privilege and adds identity access intelligence at scale,” said John Stecher, chief technology officer at customer Blackstone.
“Together, they’ll enable more secure and scalable workflows for enterprise businesses with smarter access management, ongoing access reviews, and seamless deprovisioning. The combined platform will provide a context-rich identity governance framework that will be key in the age of agentic AI.”
Veza also adds identity context across ServiceNow’s security and risk portfolio, including Vulnerability Response, Incident Response, and Integrated Risk Management. This, said the vendor, gives customers greater clarity into who or what is tied to a given exposure or incident.
ServiceNow contends that with expanded visibility and centralized controls, organizations can monitor and enforce AI access across their entire ecosystem. Veza also extends ServiceNow’s existing AI platform capabilities, such as the Machine Identity Console, offering clearer permissions insight and simplified management as businesses scale their use of AI.
After this transaction closes, Veza will be incorporated into ServiceNow’s security portfolio.
Final Thoughts
As AI reshapes the enterprise landscape, the acquisition positions ServiceNow to deliver unified, AI-ready identity security at a time when its customers need it most.