Cloud software company ServiceNow recently announced an agreement to acquire identity security startup Veza. Identity governance now sits at the heart of cybersecurity strategy, leading companies to make deals like this that combine the capabilities of identity visibility and intelligence with existing functions. The convergence of cloud, SaaS, and AI technology has accelerated the urgency of this shift, as non-human identities and sprawling, complex environments have rapidly created massive security gaps.
What Veza Brings to the Table
Veza offers a range of identity security functions, including its Access Graph, a platform for visibility and risk control through analysis of access relationships and permissions. “By combining Veza’s industry-first Access Graph with ServiceNow’s AI Control Tower and agentic workflows, we can give customers a true single pane of glass, with control of every identity in their organization,” says Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow.
The company’s capabilities cover humans, machine identities, AI agents, service accounts, and SaaS permissions, accounting for many of the identity challenges facing modern organizations. Static tools like IAM, IGA, and PAM often struggle with these factors in dynamic, multi-cloud identity environments.
The Industry Context: Identity Is the New Perimeter
This acquisition is driven by a wider industry shift toward identity governance with the explosive growth of machine identities and ephemeral access. AI systems creating and acting through identities have created new identity challenges that traditional measures are not equipped to address.
These challenges have been accompanied by increased regulatory expectations around identity controls and continuous auditability, putting pressure on organizations to ensure effective identity governance. Identity failures drive the majority of breach pathways, making identity a major factor in securing enterprises against attacks.
Why ServiceNow Wants an AI-Native Identity Platform
ServiceNow stands to benefit from the acquisition as it will fill a strategic gap in the company’s security and risk portfolio. Identity acts as the connective tissue across workflows, compliance, automation, and incident response, making it a critical factor in any kind of security. “In the era of agentic AI, every identity – human, AI agent, or machine – is a force for enterprise impact. It’s only when you have continuous visibility into each identity’s permissions that you can trust it,” according to Zavery.
The Veza acquisition can lead to potential synergy with ServiceNow’s existing capabilities, including the Now Platform, SecOps, Risk, and the AI Control Tower. Veza enhances visibility, least-privilege enforcement, and real-time access verification by fortifying governance across human and non-human identities.
The Rise of AI-Driven Identity Governance
Traditional access reviews and manual attestation are breaking down in the face of growing non-human entities in sprawling, complex environments. Autonomous access analysis and rapid remediation are necessary tools for addressing the modern challenges of identity governance.
There is a growing need to govern AI agents and model-driven actions the same way that human identities are governed in order to ensure security across all identities. Using AI-empowered tools and solutions is often the best move for managing AI-enhanced environments in a secure and efficient manner. The next phase of this security shift might see AI enforce the principle of least privilege in real time.
Market Implications
The deal between ServiceNow and Veza is indicative of industry and market trends toward consolidation around identity-centric cyber architectures. It arises from increased pressure in recent years on IAM/IGA vendors to modernize for distributed, AI-accelerated environments. An acquisition like this could lead to potential competitive ripple effects across cloud-security, identity-security, and GRC markets.
Challenges and Open Questions
While this deal has the potential to bring many benefits to ServiceNow and its customers, there are also questions and challenges related to the acquisition and integration of Veza’s functionality. The complexity of the integration may come with challenges, and ServiceNow will have to take steps to ensure the Access Graph performs at enterprise scale across hybrid estates. The company will also require cultural and operational shifts in order for identity-first programs to succeed.
Identity Becomes the Foundation for AI-Era Security
This acquisition illustrates the strategic truth that identity is no longer just part of the security stack, but an essential facet of every part of the stack. Organizations that treat identity as core infrastructure will be better prepared for AI-driven risks and automation at scale. ServiceNow’s move to acquire Veza is part of a broader realignment that will shape cybersecurity over the next decade as AI and cloud technology continue to dominate the landscape.
