ServiceNow Expands Security Portfolio with $7.75 Billion Acquisition

ServiceNow ($NOW) has completed its acquisition of Armis, strengthening the integration of enterprise AI and security platforms. The transaction was valued at $7.75 billion in cash (approximately 10.943 trillion won), reflecting an assessment that the competitive landscape for enterprise software in the AI era is shifting from seat sales to asset visibility, access management, and automated responses.

ServiceNow agreed to acquire Armis on December 23, 2025, and completed the transaction on April 20, 2026. In its announcement, the company stated that Armis possesses technology to identify connected assets in real-time across IT, operational technology (OT), the Internet of Things (IoT), medical devices, physical AI, code, and cloud environments.

Armis is a security firm that identifies equipment and software assets both inside and outside corporate networks and prioritizes exposure risks. Traditionally, corporate security has started with accounts, servers, and network defenses, but as AI agents, industrial equipment, and cloud services operate together, the scope of management has broadened.

The scale of the transaction is significant even within the Israeli tech industry. Ynet reported that this deal ranks fourth overall in Israel's exit criteria and second in terms of startup sales, following Wiz. Fortune highlighted this transaction as a major exit for Armis co-founder Yevgeny Dibrov.

Armis disclosed its growth figures just before the sale. The company reported that its annual recurring revenue (ARR) exceeded $300 million (approximately 423.6 billion won) on August 4, 2025. On November 5 of the same year, it announced that it raised $435 million (approximately 614.2 billion won), achieving a valuation of $6.1 billion (approximately 81.3 trillion won).

The ARR reported by ServiceNow in its acquisition announcement for Armis is even higher. ServiceNow stated in its December 2025 announcement that Armis's ARR exceeded $340 million (approximately 480.1 billion won) and had increased by more than 50% year-over-year. This is why both the $300 million and $340 million figures appear at different times.

The core of this transaction is not merely the addition of a single security product. ServiceNow announced that it would integrate Armis's asset detection and cyber exposure management capabilities with its AI control tower and automated workflows. It proposed a structure that combines identity and access information secured through the acquisition of Veza with Armis's asset information to control people, machines, AI agents, and connected devices together.

AI agents are artificial intelligence systems capable of autonomously making judgments and executing tasks or transactions to achieve objectives. Previous discussions have addressed how AI agents can perform file modifications, execute commands, search, and deploy. When an AI with authority operates within a work system, security control cannot end with just account management.

Reuters, in an article about ServiceNow's Q2 2026 results, discussed market concerns that AI agents could disrupt traditional SaaS billing models, coining the term "SaaSpocalypse". However, the assertion that Armis saved ServiceNow from this concern is an interpretation rather than a confirmed fact. What has been confirmed is the completion of the acquisition, the expansion of security and AI product lines, and the subsequent disclosed performance figures.

ServiceNow's subscription revenue for Q2 2026 was $3.877 billion (approximately 54.743 trillion won), a 24.5% increase compared to the same period last year. Total revenue was $3.987 billion (approximately 56.296 trillion won), and the annual contract value (ACV) of ServiceNow AI exceeded $1 billion (approximately 14.120 trillion won). In the same earnings announcement, the company explained that "Autonomous Security & Risk" combines the functionalities of Armis, Veza, and the AI control tower.

Market reactions have varied over time. Following the acquisition rumors in December 2025 and the final announcement, reports indicated that ServiceNow's stock price fell. Conversely, after the Q2 2026 earnings announcement in July 2026, reports indicated that the stock price rose in after-hours trading based on increased demand for AI and upward revisions of subscription revenue forecasts.

Cost burdens also remain. In its Q1 2026 earnings report, ServiceNow stated that Armis would contribute approximately 125 basis points to Q2 subscription revenue growth and cRPO growth, as well as guidance for subscription revenue growth in 2026. At the same time, it anticipated a burden of approximately 25 basis points on the gross margin for subscription revenue, about 75 basis points on the operating margin, and around 200 basis points on free cash flow margin.

Such large-scale acquisitions increase growth rates while also heightening integration risks. Some analysts have assessed that Armis is contributing faster than planned, while others have pointed out the integration burden associated with ServiceNow moving away from small complementary acquisitions to larger M&A. This is why revenue contribution and profitability pressures must be considered together.

There are implications for Korean companies as well. When AI agents operate with authority within work systems, the security targets extend beyond just servers and accounts. The ability to view and take action on connected devices, code, cloud, and medical/industrial equipment on a single screen is becoming a prerequisite for the adoption of enterprise AI.

ServiceNow is working to integrate Armis with its existing AI platform to expand security exposure management and automated response capabilities. The growth contributions and margin burdens of Armis will be reflected in the 2026 results.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.