ServiceNow Eyes Acquisition of Identity Security Firm Veza to Harden AI Governance

ServiceNow is reportedly in advanced talks to acquire identity-security startup Veza for more than $1 billion.

If completed, the deal would strengthen ServiceNow’s arsenal as it expands its AI-powered enterprise offerings — potentially giving customers unified control over AI agents and the data those agents access.

Veza’s core technology maps permissions across enterprise systems, allowing firms to precisely understand which users, applications, and even AI agents have access to which data.

This move builds on ServiceNow’s earlier 2025 acquisition of AI-assistant provider Moveworks for $2.85 billion, which added intelligence and automation to the platform.

By bringing in Veza, ServiceNow aims to fold identity security and access governance directly into its AI-driven workflow stack — addressing a growing concern among enterprises about data access and compliance as automation scales.

Security experts highlight that traditional identity and access-management tools, built for human accounts, struggle to cover machine identities — such as API keys and autonomous agents — which can significantly outnumber human users in modern systems. Veza’s Authorization Graph technology, which already manages billions of permissions across major customers, is designed to close that gap.

For ServiceNow’s existing and future clients, integration would mean that AI agents — such as those deployed for IT, HR, or security operations — could natively observe access policies enforced by Veza, reducing the need for custom integrations.

Final terms, including price and timing, have yet to be confirmed. If the acquisition proceeds, it could reshape expectations around how enterprises combine automation, AI, and identity security in a unified, compliant platform.