ServiceNow is reportedly in advanced negotiations to acquire five-year-old identity security startup Veza for more than $1B, according to people familiar with the matter.
Veza, which helps companies map and manage data access across human and machine identities (including AI agents), offers customers visibility and control over who (or what) can access sensitive corporate or customer data, and what actions they’re permitted to take.
The proposed acquisition would deepen ServiceNow’s push into security and AI-powered enterprise services, extending the company’s platform capabilities beyond workflow automation and AI-driven tools.
Plus, earlier this year, ServiceNow acquired AI-assistant firm Moveworks, and adding Veza could embed identity governance and access control natively within ServiceNow’s ecosystem.
Why This Deal Makes Sense Now
Veza, which in April 2025 raised a $108M Series D funding round valuing the company at about $808M, has drawn investor interest amid rising concern over data security as enterprises deploy AI agents and scale cloud infrastructure.
Industry analysts argue that as enterprises increasingly allow AI agents and automation tools to interact with critical workflows and data, having a robust identity and an access-governance layer becomes vital.
While ServiceNow has the automation layer (via Moveworks), trust and governance – especially around who can access what – remains a key missing piece.
Indeed, according to a recent vendor assessment by analyst firm Omdia, Veza operates at the intersection of identity security posture management (ISPM), identity governance/administration (IGA), and non-human identity (NHI) security, positioning it as a strong candidate to lead enterprises’ shift toward “identity-first security”.
What This Could Mean for ServiceNow Customers and the Wider Market
The deal remains unconfirmed – neither ServiceNow nor Veza has publicly acknowledged the acquisition. But if the acquisition completes, ServiceNow could offer more comprehensive coverage, combining workflow automation, AI-agent capabilities, and robust identity/access governance in a unified platform.
For enterprises using AI-driven processes, this could mean tighter control over access permissions, improved compliance, and automated enforcement of “least privilege” across both human and non-human actors.
For the broader industry, the acquisition would mark further consolidation around “identity-first security”, reflecting growing demand for modern solutions to manage the risks associated with cloud, SaaS, and AI-augmented workflows.
Final Thoughts
Some may view the potential deal as a natural next step in ServiceNow’s evolution – where automation and AI must be matched by governance and security controls. Others may warn that integrating identity and access governance into a broader enterprise platform can be challenging, especially when dealing with complex, multi-cloud, or hybrid architectures.
However, with increasing regulatory and compliance pressures – particularly around data protection, privacy, and AI-driven access – many believe the strategic value of Veza’s identity-first security capabilities will prove to be of great value to the ServiceNow ecosystem.