ServiceNow plans to acquire identity security specialist Veza to expand its Security and Risk portfolio. Veza’s technology is designed to help companies centrally manage access rights across applications, data, cloud environments, and AI agents.
Last week, rumors already emerged about a potential acquisition of Veza by ServiceNow. ServiceNow has since officially announced this acquisition. The acquisition focuses on identity security, a recurring weak point in many data breaches. With Veza, ServiceNow aims to help organizations better understand who or what has access to critical systems, data, and AI artifacts.
Identities
Modern enterprises manage a mix of identities: employees, partners, systems, applications, devices, and increasingly, autonomous AI agents. At the same time, attackers are also leveraging AI to automate and refine attacks. This increases the pressure to more tightly control and regularly review access rights.
Veza built its platform around a proprietary Access Graph, a model that maps access relationships between human, machine, and AI identities. Based on this, the company provides a platform for visibility and risk management related to access. In addition, Veza supports features such as access reviews, access requests, and a central access hub, as part of an IGA (Identity Governance and Administration) approach.
read also
‘ServiceNow to acquire Veza for over $1 billion’
Through integration with ServiceNow workflows, knowledge graphs, and AI, Veza is expected to provide additional context in products such as Vulnerability Response, Incident Response, and Integrated Risk Management. Security teams will thus gain a better understanding of which identities are involved in a vulnerability, incident, or risk event.
AI-driven automation
Within ServiceNow, identity security will become a pillar of the broader Security Operations strategy. Veza’s technology is intended to strengthen exposure management, incident response, and risk management by providing deeper visibility into who has access to which resources.
read also
ServiceNow Pushes AI Tower Platform into Microsoft Ecosystem
An important goal is control over AI agents. Through the combination with AI Control Tower, ServiceNow can determine which data and actions AI agents within an organization are allowed to use. This should help keep autonomous actions aligned with policies and regulations.
The acquisition still requires approval from regulators and is subject to customary closing conditions.