SAN FRANCISCO, March 4, 2026, 02:29 PST
ServiceNow (NOW.N) has completed its acquisition of identity security firm Veza, a deal it said closed on March 2 and that will fold Veza’s access controls into its Security and Risk products as companies roll out autonomous “agentic AI” systems. “In the era of agentic AI, every identity — human, AI agent, or machine — is a force for enterprise impact,” ServiceNow President and COO Amit Zavery said in the company’s statement. Veza, founded in 2020 and based in Los Gatos, California, serves nearly 150 enterprise customers and has 230 employees, ServiceNow said. 1
The timing is not subtle. ServiceNow has been warning that cloud migrations and fast AI deployments are multiplying identities and permissions faster than many firms can track, widening the gap between what security tools can see and what they can fix. In a blog post tied to the deal, ServiceNow said machine identities now outnumber human ones by more than 80 to one, a shift it argues has made access sprawl a default condition in large companies. 2
Veza CEO Tarun Thakur framed the close as “Day 1,” writing that the combined group wants to build an “enterprise agent identity control plane” that plugs into ServiceNow’s AI Control Tower. Agentic AI refers to software that can take actions—opening tickets, approving tasks, moving data—rather than only generating text, and the argument from both companies is that those agents need tighter, auditable permissions. 3
ServiceNow also filed a Form S-8 on March 2 to register 854,359 shares tied to employee stock options and restricted stock units it assumed in the Veza transaction, a filing showed. The registration covers Veza’s 2020 and 2025 stock plans and a 2025 restricted stock unit plan. 4
Financial terms were not updated with the close, but ServiceNow disclosed earlier what it expected to pay. In its annual report filed in January, the company said the Veza deal carried about $1.25 billion in cash consideration, subject to customary adjustments, and was expected to close in the first half of 2026. 5
At its core, Veza sells what the industry calls identity governance and administration—plainly, the work of checking who has access to what, approving changes, and proving it later to auditors—along with tools aimed at spotting accounts with too much privilege. ServiceNow is betting that putting those checks inside its workflow engine can shorten the time from “we found risky access” to “we removed it.”
The move pushes ServiceNow further into a crowded identity market where specialists such as Okta and CyberArk already sell access and privilege controls, and where large security platforms bundle their own identity features. ServiceNow’s angle is that identity data can feed directly into service workflows—tickets, approvals, and remediation steps—rather than living in a separate dashboard.
But identity cleanups can break things. Mapping permissions across hundreds of apps is messy, and automated fixes can trigger outages, lock users out, or clash with internal controls if the data is wrong or the rules are too blunt. That risk—plus customer reluctance to swap out entrenched identity tools—could slow the cross-sell story the deal is meant to support.
For ServiceNow, the immediate test is execution: keeping Veza’s customers stable, retaining technical talent, and turning identity signals into actions that security teams trust enough to run at scale. The broader bet is that identity becomes the choke point for both attackers and the next wave of autonomous software.
