ServiceNow Expands Autonomous Security Portfolio with Six AI-Powered Security Solutions

ServiceNow has accelerated its Autonomous Security vision with the launch of six integrated security solutions designed to deliver prevention-first, AI-native cyber defence across exposure management, vulnerability detection, cyber-physical security, identity and access security, incident response, and cyber risk and compliance. The company also introduced new AI Specialists, including the Vulnerability Resolution AI Specialist, to automate security workflows and help organisations prevent, contain and remediate threats at machine speed.

As enterprises increasingly deploy agentic AI, ServiceNow says security teams are struggling to keep pace with the growing number of AI agents, identities and software assets that expand the attack surface. The company estimates that the average enterprise now operates more than 70 security tools, creating fragmented visibility across endpoints, cloud environments, networks and identities.

To address this challenge, ServiceNow is positioning its Autonomous Security platform as a unified system that brings together assets, identities, AI agents and security operations into a single governed environment. Central to this approach is Shift Zero, the company’s strategy of embedding prevention throughout the security lifecycle by continuously governing systems, identities and AI agents in real time.

“As AI exposures compound exponentially, security teams operate on a human clock,” said Yevgeny Dibrov, SVP and GM, cybersecurity and risk, ServiceNow. “Machine identities double every 18 months. Fragmented security tools can’t match the curve AI is creating. Organizations need autonomous security and governance that matches the scale, velocity, and unpredictability of the threats coming: where all assets, identities, AI agents, critical infrastructure, cloud environments and code are protected, and can adapt as fast as the ecosystem moves to detect and remediate threats in real-time. Security becomes an accelerant, not the brake.”

The six new solution areas form the foundation of ServiceNow’s Autonomous Security platform:

• Unified Exposure Management consolidates vulnerability data from multiple sources, enriches it with threat intelligence and business context, and automates remediation using AI-driven prioritisation and the new Vulnerability Resolution AI Specialist.
• Continuous Vulnerability Detection extends security across applications, cloud infrastructure and external attack surfaces through enhanced application security, dynamic application security testing and external attack surface management.
• Cyber-Physical Security introduces agentless discovery, behavioural analysis and automated remediation for operational technology (OT), medical devices and IoT environments without disrupting production systems.
• Identity and Access Security expands governance for AI agents, machine identities and service accounts, enabling organisations to apply consistent least-privilege policies while automating credential rotation, deprovisioning and permission revocation.
• Agentic Incident Response enables ServiceNow’s Tier 2 SOC AI Specialist to autonomously investigate and respond to security incidents by correlating threat intelligence, enriching alerts and executing containment actions while escalating only high-risk decisions to human analysts.
• Cyber Risk and Compliance transforms compliance into a continuous process through automated control monitoring, real-time policy validation and support for quantum-ready cryptographic migration, helping organisations maintain compliance with frameworks such as SOC 2, ISO 27001, PCI-DSS and HIPAA.

ServiceNow said the expanded portfolio builds on its existing security and risk capabilities alongside technologies acquired through Armis and Veza. By combining continuous asset visibility, identity intelligence and AI-driven orchestration within its AI Control Tower, the company aims to provide enterprises with a unified platform for autonomous security, governance and risk management.