ServiceNow to acquire Armis in $7.75bn deal
ServiceNow has agreed to acquire Armis in a $7.75bn all-cash deal, significantly expanding its reach across cybersecurity, operational technology (OT), and cyber-physical systems. The move underlines ServiceNow’s ambition to become a central control layer for security operations spanning IT, OT, IoT, and medical devices.
The deal signals tighter integration between cyber exposure management and operational workflows. It also highlights how AI-driven security platforms are increasingly targeting non-traditional IT assets that are central to European industry.
Expanding the attack surface view
Armis brings real-time, agentless discovery and classification of managed and unmanaged assets, including industrial control systems, medical devices, and IoT endpoints that often fall outside classic IT security tools. Combined with ServiceNow’s workflow and configuration management capabilities, the companies aim to deliver what they describe as a unified, end-to-end security exposure and operations stack.
The acquisition is expected to accelerate ServiceNow’s roadmap toward autonomous, proactive cybersecurity, using AI to prioritize risks and trigger remediation workflows automatically. ServiceNow says the deal will more than triple its market opportunity for security and risk solutions, building on a Security and Risk business that crossed $1bn in annual contract value in Q3 2025.
“ServiceNow is building the security platform of tomorrow,” said Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow. “In the agentic AI era, intelligent trust and governance that span any cloud, any asset, any AI system, and any device are non-negotiable if companies want to scale AI for the long-term.”
Cyber-physical security meets AI workflows
The combination is particularly relevant for sectors where cyber and physical systems intersect. Manufacturing plants, hospitals, utilities, and transport operators face growing exposure as AI adoption and connectivity expand their attack surfaces. Moreover, Armis’ cyber exposure management capabilities will feed into ServiceNow’s AI Platform and CMDB, mapping technical risk directly to business and operational impact.
“We built Armis to protect the most critical environments and give both public and private sector organizations the real-time intelligence they need to stay ahead,” said Yevgeny Dibrov, co-founder and CEO of Armis. “Together with ServiceNow, customers will have a powerful new way to reduce their exposure and strengthen security at scale.”
Industry observers see the deal as part of a broader trend toward consolidation between IT service management, security operations, and OT visibility. “The combination of ServiceNow and Armis provides a dynamic picture of an enterprise’s connected technology assets and an AI and agentic powered blueprint to secure and enable trusted AI,” said Larry Feinsmith, head of Global Tech Strategy, Innovation & Partnerships at JPMorgan Chase.
Deal timeline and outlook
ServiceNow expects the transaction to close in the second half of 2026, subject to regulatory approvals. The acquisition will be funded through cash on hand and debt, with Armis’ roughly 950 employees joining ServiceNow once the deal completes.
If you enjoyed this article, you will like the following ones: don't miss them by subscribing to :
