ServiceNow has agreed to acquire cyber exposure management specialist Armis in a $7.75bn cash deal, strengthening its security capabilities across IT, operational technology (OT), medical devices and other connected environments worldwide.
The acquisition is intended to expand ServiceNow’s security workflow portfolio and accelerate the development of AI-native, proactive cybersecurity across the entire attack surface. By combining Armis’ real-time asset visibility with ServiceNow’s automated remediation and response workflows, the transaction aims to deliver a unified, end-to-end security exposure and operations platform.
ServiceNow positions itself as an AI control tower for business reinvention, offering workflow-driven platforms that enable organisations to manage IT, security, risk and operations at scale. Its Security and Risk business surpassed $1bn in annual contract value in the third quarter of 2025, highlighting the company’s growing presence in enterprise security and governance.
Armis specialises in cyber exposure management, helping organisations identify, prioritise and remediate risk across IT, OT, IoT, medical and industrial devices. Its agentless platform provides real-time asset discovery and classification, including unmanaged and hard-to-see devices often missed by traditional security tools. This capability has made Armis a key provider for organisations operating complex cyber-physical environments such as healthcare, manufacturing and critical infrastructure.
The deal comes amid rising global cybersecurity spending and heightened concern over AI-driven threats. Worldwide end-user spending on information security is forecast to increase by 12.5% in 2026 to $240bn, driven by escalating threat activity and the rapid adoption of AI and generative AI. As AI broadens organisational attack surfaces, ServiceNow has highlighted the importance of real-time visibility and prioritised remediation to maintain trust and operational resilience.
By integrating Armis’ technology with ServiceNow’s configuration management database and AI Platform, the combined offering is expected to deliver continuous insight into cyber exposure and automate responses across enterprise environments. Exposure intelligence will be routed to the relevant teams, triggering remediation workflows focused on measurable risk reduction rather than fragmented insights across multiple tools.
ServiceNow and Armis already have an established partnership, with multiple integrations linking Armis’ data and insights into ServiceNow workflows. The acquisition builds on this relationship and aligns with ServiceNow’s broader investments in security, risk management and AI governance, as organisations increasingly seek end-to-end exposure management for connected and AI-enabled environments.
Founded in 2015, Armis brings strong commercial momentum to the transaction, having surpassed $340m in annual recurring revenue with year-on-year ARR growth exceeding 50%. Its platform is used by Global 2000 organisations, including more than 35% of the Fortune 100 and seven of the Fortune 10, as well as public-sector bodies and government agencies worldwide. The company was recently named a Leader in the 2025 Gartner® Magic Quadrant™ for CPS Protection Platforms and recognised as an Inc. Best in Business honouree for Innovation.
