ServiceNow has revealed plans to acquire Veza, a pioneer in identity security, aiming to enhance its Security and Risk solutions by strengthening focus on Identity Security—a critical component in addressing cybersecurity breaches.
This strategic acquisition promises to offer organizations more comprehensive control over access to vital data, applications, systems, and AI elements, thereby advancing identity security based on the principle of least privilege to mitigate enterprise risks.
Layering Identity and Access Management
The complexity of modern enterprises necessitates a robust approach to managing a wide range of identities encompassing employees, partners, systems, applications, devices, and AI agents. As cyber threats become increasingly sophisticated, underpinned by agentic AI, businesses require dynamic identity and access control measures to maintain secure and compliant operations in line with evolving technological landscapes.
Veza addresses these needs with its AI-native solution powered by the patented Access Graph, mapping and analyzing access across various identities to provide in-depth visibility and control, ensuring effective governance rooted in every level of identity management.
The Significance of Agentic AI
Veza's Access Graph with ServiceNow’s AI Control Tower will enable a unified interface for managing organizational identity
Amit Zavery, President, Chief Operating Officer, and Chief Product Officer at ServiceNow, emphasized the transformative impact of identity awareness in agentic AI-driven environments, stating: "In the era of agentic AI, every identity — human, AI agent, or machine — is a force for enterprise impact. It’s only when you have continuous visibility into each identity’s permissions that you can trust it."
He added that combining Veza's Access Graph with ServiceNow’s AI Control Tower will enable a unified interface for managing organizational identity, empowering security teams to make informed, secure access decisions.
Enhancing Identity Governance and Security
Veza's CEO, Tarun Thakur, highlighted the company’s commitment to transparent, scalable, and effective identity security: "Veza was built to make identity security transparent, scalable, and effective for every organization. With ServiceNow, we will help customers embrace AI with greater confidence."
The partnership aims to convert identity governance and security into a strategic asset, offering integrated control over the spectrum of identities, from individuals to machines and AI agents.
Advancing Identity Security Capabilities
Veza’s innovative Access Graph delivers an AI-driven approach to identity security, equipping organizations
Veza’s innovative Access Graph delivers an AI-driven approach to identity security, equipping organizations with a centralized dashboard to quickly address excessive access permissions across human and machine entities, including AI agents.
The platform supports next-generation Identity Governance and Administration (IGA) functions, such as access reviews and permission management, offering capabilities that traditional solutions fail to provide.
Integrating with ServiceNow Security and Risk Solutions
By aligning Veza's capabilities with ServiceNow’s established workflow, knowledge graph, and AI strengths, the collaboration extends ServiceNow's AI Control Tower functionality.
Veza enhances ServiceNow's Security Operations by introducing critical identity context to products like Vulnerability Response and Incident Response, thereby strengthening exposure management and risk mitigation frameworks.
Reducing Cyber Risks Through Integrated Identity Security
Veza enriches ServiceNow's identity security offerings, granting deep cross-platform insight into access governance across various applications. This shared foundation is crucial for ensuring that autonomous AI actions align with enterprise policies, creating a trusted environment for AI operations.
Veza's capabilities further enhance ServiceNow's AI platform features, such as the Machine Identity Console, facilitating improved visibility and management as enterprises adopt AI at scale.
Expanding ServiceNow’s Security Portfolio
Founded in 2020 and serving nearly 150 global enterprises in sectors like banking, hospitality, and consumer goods, Veza’s extensive identity visibility, intelligence, and governance features will integrate into ServiceNow’s security portfolio upon completing the acquisition, subject to regulatory approvals and customary closing conditions.
ServiceNow, the AI control tower for business reinvention, announced its intent to acquire Veza, a pioneer in identity security. The acquisition will extend the capabilities of ServiceNow’s Security and Risk portfolios into one of cybersecurity’s most important areas that is at the forefront of every breach now – Identity Security.
This will enable organizations to understand and control who and what has access to their critical data, applications, systems, and AI artifacts. As businesses take advantage of autonomous capabilities made possible through agentic AI, Veza and ServiceNow will enable end-to-end identity security rooted in the principle of least privilege that significantly reduces enterprise risk.
Layer of identity and access management
Modern enterprises must manage a diverse array of identities, including employees, partners, systems, applications, devices, and increasingly, autonomous AI agents. As threat actors adopt agentic AI to orchestrate ever more sophisticated attacks, enterprises need strong identity and access controls and governance to ensure permissions remain tightly aligned with evolving roles, regulatory requirements, and advancing technologies.
Veza’s modern, unified, AI-native approach is powered by its patented Access Graph, which maps and analyzes access relationships across human, machine, and AI identities, providing an end-to-end access visibility and risk control platform for all types of identity. This foundation embeds governance into every layer of identity and access management, giving security teams granular visibility and control to manage complexity with confidence and to put AI to work securely across every corner of their business.
Era of agentic AI
“In the era of agentic AI, every identity — human, AI agent, or machine — is a force for enterprise impact. It’s only when you have continuous visibility into each identity’s permissions that you can trust it,” said Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow.
“By combining Veza’s industry-first Access Graph with ServiceNow’s AI Control Tower and agentic workflows, we can give customers a true single pane of glass, with control of every identity in their organization. Together, we’ll empower CISOs and security teams to make safer access decisions that protect their businesses, and to defend their high-value data assets from AI-powered attacks.”
Identity governance and identity security
“Veza was built to make identity security transparent, scalable, and effective for every organization,” said Tarun Thakur, CEO of Veza.
“With ServiceNow, we will help customers embrace AI with greater confidence. Together, we can turn identity governance and identity security into a strategic advantage by giving organizations clear, integrated control over every type of identity — whether it belongs to a person, a machine, or an AI agent.”
Strengthening identity security across the enterprise
Veza’s Access Graph brings an AI-native approach to identity security, giving organizations a single dashboard to quickly spot and remedy overly broad permissions across both human and machine identities, including AI agents. Its scalable platform supports full next-generation IGA capabilities, including access reviews, access requests, and an access hub, along with permission updates and end-to-end visibility that legacy solutions can’t match.
“ServiceNow powers our horizontal business workflows, while Veza enforces least privilege and adds identity access intelligence at scale,” said John Stecher, Chief Technology Officer at Blackstone. “Together, they'll enable more secure and scalable workflows for enterprise businesses with smarter access management, ongoing access reviews, and seamless deprovisioning. The combined platform will provide a context-rich identity governance framework that will be key in the age of agentic AI.”
ServiceNow Security and Risk products
By integrating with ServiceNow’s strength in workflows, knowledge graphs, and AI, Veza also enhances the ServiceNow AI Control Tower by governing what AI agents can access and do across enterprises. Veza also adds critical identity context to existing ServiceNow Security and Risk products, including Vulnerability Response, Incident Response, and Integrated Risk Management, giving customers a clearer view of who and what is associated with an exposure, incident, or risk event.
As identity security becomes a core pillar of ServiceNow’s Security Operations, Veza strengthens exposure management, incident response, and integrated risk management capabilities.
Minimizing customers’ exposure and cyber risk with integrated identity security
Veza will strengthen ServiceNow’s identity security services with deep cross-platform visibility into who and what has access, enabling consistent and auditable access governance across connected applications. That shared foundation is critical for agentic AI, helping ensure autonomous actions stay aligned with enterprise policies.
This gives ServiceNow the trusted identity layer agents need to act safely at scale, which is essential to winning in an agentic AI world. With richer identity visibility, enterprises can centrally govern, monitor, and enforce AI access and actions across their entire ecosystem. Veza also complements existing identity features on the ServiceNow AI Platform, like Machine Identity Console, by offering better visibility and simpler management as businesses scale with AI.
Veza’s identity visibility, intelligence & governance capabilities
Founded in 2020, Veza serves nearly 150 global enterprise customers in banking, hospitality, and fast-moving consumer goods (FMCG), with 230 employees globally.
After this transaction closes, Veza’s identity visibility, intelligence & governance capabilities will be incorporated into ServiceNow’s security portfolio. The transaction is subject to customary regulatory approvals and closing conditions.
