At Black Hat in Las Vegas, ServiceNow announced six unified security solutions and a new category of AI Specialists designed to detect, contain, and remediate threats faster than human teams can assemble context. The announcement spans exposure management through to post-quantum cryptography migration.
The backdrop is a pressure point that has been building for two years: as enterprises deploy agentic AI, machine identities and AI agents multiply faster than conventional security tooling can govern them. ServiceNow says the average enterprise now runs more than 70 discrete security tools, fragmenting visibility across endpoints, cloud environments, and identities. The six products announced today are designed to collapse that into a single governed platform.
The areas covered are unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, agentic incident response, and cyber risk and compliance. A Vulnerability Resolution AI Specialist handles triage and executes low-risk patches autonomously. The cyber-physical module provides agentless discovery across OT, medical device, and IoT networks, environments that legacy security tools have typically disrupted or ignored. A Non-Human Identity Remediation capability handles automated key rotation, deprovisioning, and permission revocation for service accounts and AI agents alongside human identities.
ServiceNow frames the direction as Shift Zero: prevention embedded at every layer, with every asset, identity, and AI agent governed and auditable in real time.
"Machine identities double every 18 months. Fragmented security tools can't match the curve AI is creating," said Yevgeny Dibrov, SVP and GM of cybersecurity and risk at ServiceNow. "Organizations need autonomous security and governance that matches the scale, velocity, and unpredictability of the threats coming: where all assets, identities, AI agents, critical infrastructure, cloud environments and code are protected, and can adapt as fast as the ecosystem moves to detect and remediate threats in real-time."
The broader product suite draws on Armis (continuous device visibility across billions of assets) and Veza (access graph mapping effective permissions across human, machine, and AI identities), both now integrated into ServiceNow's platform.
"For organizations operating complex industrial environments, effective cybersecurity starts with understanding risk and maintaining visibility across the enterprise," said Brandon Glaze, Sr. Director, Cybersecurity (OT/ICS) at Baker Hughes. "We've appreciated the collaboration and innovation from the ServiceNow (Armis) team as we continue working together to improve cyber resilience and support secure, reliable operations."
Several capabilities are available now. The Tier 2 SOC AI Specialist, Vulnerability Resolution AI Specialist, Agentic AI for Continuous Control Monitoring, and Cryptographic Asset Compliance are targeted for December 2026.
To stay across the latest in cloud, AI and enterprise tech analysis from Compare the Cloud, subscribe to our weekly newsletter at https://www.comparethecloud.net/newsletter
