California-based cloud computing firm ServiceNow has acquired cyber-security expert Armis for $7.75bn in cash.

Armis specialises in cyber exposure management and cyber-physical security, manages cyber risk across the full attack surface in IT, operational technology (OT), medical devices and other environments for companies, governments and critical infrastructure worldwide.

The acquisition will expand ServiceNow’s security workflow offerings and advance AI-native, proactive cyber-security and vulnerability response across connected devices. Together, the two firms aim to create a unified, end-to-end security exposure and operations stack that can see, decide and act across the entire technology footprint by connecting real-time asset discovery, threat intelligence and risk prioritisation with automated remediation and response workflows.

Security continues to be the number one priority for CEOs as organisations navigate the increased adoption of AI. Worldwide end-user spending on information security is projected to increase 12.5% in 2026 to $240bn, with rising threats and the expanding use of AI and generative AI being the key growth drivers. As rapid AI adoption expands the attack surface for organisations, real-time visibility into vulnerabilities and actionable insights for what to fix first are critical to reduce risk and strengthen security posture.

The acquisition of Armis should extend and enhance ServiceNow’s security, risk and OT portfolios in critical and fast-growing areas of cyber security and drive increased AI adoption by strengthening trust across businesses’ connected environments. ServiceNow’s security and risk business crossed the $1bn annual contract value threshold in the third quarter of 2025. This acquisition is expected to more than triple ServiceNow’s market opportunity for security and risk and accelerate its roadmap to autonomous proactive cyber security.

“ServiceNow is building the security platform of tomorrow,” said Amit Zavery, president of ServiceNow. “In the agentic AI era, intelligent trust and governance that span any cloud, any asset, any AI system and any device are non-negotiable if companies want to scale AI for the long term. Together with Armis, we will deliver an industry-defining strategic cyber-security shield for real-time, end-to-end proactive protection across all technology estates. Modern cyber risk doesn’t stay neatly confined to a single silo, and with security built into the ServiceNow AI platform, neither will we.”

Yevgeny Dibrov, CEO of Armis, added: “AI is transforming the threat landscape faster than most organisations can adapt. Every connected asset has become a potential point of vulnerability. We built Armis to protect the most critical environments and give both public and private sector organisations the real-time intelligence they need to stay ahead, so they can see their entire environment clearly, understand risk in context and take action before an incident occurs. Together with ServiceNow, customers will have a powerful new way to reduce their exposure and strengthen security at scale.”

Armis extends the full lifecycle of cyber exposure management, discovering assets in real time and prioritising the highest risk issues. Its security products will pair with ServiceNow workflows to drive end-to-end protection and lifecycle action including in industries with cyber-physical assets – such as manufacturing and healthcare – so security teams stay ahead of threat actors rather than react after breaches occur.

By connecting Armis’ capabilities and dataset to the ServiceNow AI control tower – which onboards, governs and manages AI across the enterprise – ServiceNow builds on its broader security investments and the critical need for end-to-end exposure management and identity governance in AI security.

As long-time partners, ServiceNow and Armis already offer multiple integrations that connect Armis’ differentiated data and insights to ServiceNow’s workflow action. Armis provides deep, real-time, agentless discovery and classification of managed and unmanaged assets – including OT, IoT, medical and industrial devices that traditional tools often miss – creating a continuously updated map of the enterprise environment.

When paired with ServiceNow’s business-context CMDB – which maps assets to the services, processes and teams they support – and the ServiceNow AI platform, ServiceNow and Armis should more effectively defend organisations from AI-powered attacks, by offering a complete, actionable understanding of cyber exposures and resolution workflows. Exposure insights should automatically flow to the right teams, trigger remediation at scale and deliver measurable, continuous reduction of enterprise risk. Rather than fragmented views in separate tools, Armis and ServiceNow will offer an AI-native platform for cyber asset exposure management, giving confidence in what’s connected, what’s exposed, and how quickly it can be addressed.

Based in California, Armis (www.armis.com) has surpassed $340m in annual recurring revenue, with year-over-year growth exceeding 50%. Founded in 2015, with a team of approximately 950, Armis has a platform used by more than 35% of the Fortune 100 and seven of the Fortune 10, as well as by public-sector organisations and government agencies globally.

The transaction is expected to close in the second half of 2026, subject to customary regulatory approvals and closing conditions. Upon closing, Armis’ team will join ServiceNow (www.servicenow.com).