Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to the guide
THE FINANCEBASE List yours

Guide

ServiceNow Completes $7.75 Billion Armis Acquisition: What It Means for Cybersecurity

By TheFinanceBase Team 7 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ServiceNow completed its acquisition of Armis on April 20, 2026, for approximately $7.75 billion in cash. The deal is no longer pending. ServiceNow is combining Armis’s broad cyber-asset visibility and exposure-management capabilities with its own business context, workflow automation, governance, and AI platform.

The strategic promise is straightforward: Armis helps identify and prioritize risky assets, while ServiceNow helps connect those risks to the teams and processes responsible for fixing them. That could strengthen ServiceNow’s position in enterprise, operational-technology, healthcare, and critical-infrastructure security—but it does not make Armis a replacement for every endpoint, network, identity, vulnerability, or security-operations tool.

As an Amazon Associate I earn from qualifying purchases.

What happened to the ServiceNow-Armis deal?

ServiceNow announced a definitive agreement to acquire Armis on December 23, 2025. The transaction closed on April 20, 2026. ServiceNow said it paid approximately $7.75 billion in cash, funded through a combination of cash on hand and debt. The original announcement said the consideration was subject to customary adjustments.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That means headlines saying “ServiceNow to acquire Armis” are now outdated. The accurate description is that ServiceNow has completed the Armis acquisition.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

The broader sequence was:

  • December 23, 2025: ServiceNow announced the agreement.
  • March 2, 2026: ServiceNow completed its acquisition of Veza, adding identity-intelligence capabilities to its security strategy.
  • April 20, 2026: ServiceNow completed the Armis acquisition.

ServiceNow’s completion announcement confirms the closing and describes Armis as remaining available as a standalone solution.

Why did ServiceNow buy Armis?

The deal addresses a common weakness in enterprise security programs: organizations may have many security tools but still lack a reliable picture of what assets exist, which business services depend on them, and which exposures deserve immediate attention.

The strategic logic can be summarized as:

  1. Discover the asset: Identify managed and unmanaged devices, systems, workloads, and operational equipment.
  2. Understand the exposure: Determine the asset’s vulnerabilities, threats, importance, and relationship to the business.
  3. Take action: Assign, approve, track, and automate remediation through operational workflows.

Armis supplies more of the first two capabilities. ServiceNow supplies much of the third, along with business-service context and governance. In analytical terms, Armis functions as a deeper source of cyber-asset intelligence, while ServiceNow functions as a system of action and workflow. That is a useful way to understand the combination, although it is an interpretation rather than a formal product boundary published by either company.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Armis brings to ServiceNow

ServiceNow already had security operations, risk, compliance, workflow, and configuration-management capabilities. Armis adds visibility into asset categories that conventional IT-management and endpoint tools may not fully cover.

According to ServiceNow’s post-close description, Armis contributes capabilities including:

  • Agentless discovery of managed and unmanaged assets.
  • Real-time asset classification.
  • Visibility across IT, operational technology, IoT, medical devices, industrial systems, cloud, code, and physical-AI environments.
  • Cyber-physical-system security capabilities.
  • Cyber-exposure management and risk prioritization.
  • Threat intelligence connected to the asset and exposure picture.

This matters in hospitals, factories, utilities, government agencies, and other environments where many devices cannot accept a conventional security agent or be patched like an ordinary laptop.

Armis said it had more than $340 million in annual recurring revenue and year-over-year ARR growth of more than 50% when the transaction was announced. ServiceNow also cited a customer footprint spanning more than 35% of the Fortune 100. Those were company-supplied figures at announcement, not independently verified post-close performance results.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

What ServiceNow contributes

ServiceNow brings the operational layer around security data. Its relevant capabilities include:

  • Configuration-management and business-service mapping through the CMDB.
  • Security Operations workflows.
  • Security, Risk, and Compliance processes.
  • Case and task management.
  • Automation and orchestration.
  • Governance, approvals, and audit trails.
  • Its AI Platform and AI Control Tower capabilities.
  • Established enterprise and public-sector relationships.

For example, an Armis finding could theoretically be associated with the business service it affects, routed to the appropriate owner, placed into a change-management process, and tracked through remediation. The value depends on the quality of asset attribution, CMDB data, integrations, and organizational processes. Buying both products does not automatically produce clean business-service mapping or safe automation.

What the $7.75 billion price implies

Using ServiceNow’s reported figure of more than $340 million in ARR, the purchase price produces a rough comparison of approximately 22.8 times ARR ($7.75 billion divided by $340 million).

That is only a headline calculation—not a complete valuation multiple. It does not account for closing adjustments, debt, cash, taxes, revenue retention, gross margin, deferred revenue, customer concentration, or the value ServiceNow expects from cross-selling and integration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For additional context, TechCrunch reported that Armis had raised $435 million in a pre-IPO round valuing the company at approximately $6.1 billion shortly before the acquisition announcement. The purchase price was therefore roughly 27% above that reported valuation, although private-market valuation and acquisition consideration are not necessarily directly comparable.

TechCrunch also reported that Armis CEO Yevgeny Dibrov had previously discussed a possible late-2026 or 2027 IPO. Armis ultimately agreed to be acquired. The available reporting does not establish that IPO-market conditions forced the sale.

What changes for Armis customers?

ServiceNow says Armis Centrix remains available as a standalone solution and that Armis customers will gain the support of ServiceNow’s product, engineering, and global go-to-market organization. ServiceNow also says the product has been integrated with its AI Platform and that deeper integration will develop over time.

Rank #3
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Those statements do not establish that every commercial or technical detail will remain unchanged. Existing customers should confirm:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Whether current contracts, renewal dates, and pricing remain unchanged.
  • Whether Armis Centrix is still sold separately and which modules are included.
  • Which ServiceNow integrations are generally available rather than roadmap items.
  • Whether a separate ServiceNow license is required for workflow or remediation features.
  • Whether existing APIs, exports, and third-party integrations will be preserved.
  • Whether customer telemetry remains logically separated.
  • Whether hosting, data residency, deployment options, or government certifications change.
  • How channel-partner and managed-service-provider arrangements will be handled.
  • What support escalation and service-level commitments apply after the acquisition.

What the acquisition does not mean

The transaction does not prove that ServiceNow-Armis replaces all other cybersecurity controls. Asset discovery and exposure prioritization are different from:

  • Endpoint prevention and detection.
  • Network security and access enforcement.
  • Identity protection.
  • Vulnerability scanning and patch management.
  • Security information and event management.
  • Security orchestration and response.
  • Industrial threat detection.
  • Backup, recovery, and resilience controls.

A combined platform may reduce tool fragmentation, but buyers should test each existing control before eliminating it. Finding an exposed medical device, for example, is not the same as safely preventing compromise or repairing the device.

Why OT and medical-device security changes the integration challenge

In conventional IT, an organization may be able to isolate, patch, reboot, or reconfigure a device quickly. In hospitals, factories, utilities, and other operational environments, an automated action can affect patient care, production, safety, availability, or regulatory compliance.

Any ServiceNow-Armis automation program should therefore include approval gates, asset-specific policies, maintenance windows, segmentation, rollback procedures, and human review for safety-critical systems. Buyers should be skeptical of any promise that “autonomous” remediation is universally appropriate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Market implications

The acquisition could accelerate several cybersecurity trends, although these are potential implications rather than proven post-close outcomes.

More pressure on standalone exposure-management vendors

Specialist vendors will need to demonstrate differentiated asset intelligence, detection, prioritization, or industry expertise rather than relying only on a broad exposure-management label.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

More competition around the workflow layer

Customers increasingly want findings connected to owners, business services, approvals, remediation tasks, and audit evidence. ServiceNow’s enterprise footprint gives it a significant platform and distribution advantage.

Stronger ServiceNow positioning in cyber-physical security

Armis gives ServiceNow a stronger story in OT, IoT, medical-device, and critical-infrastructure environments. The remaining question is whether ServiceNow can preserve specialist depth while integrating Armis into a larger platform.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Greater concern about vendor concentration

A single vendor may reduce integration work and tool sprawl. It may also increase switching costs and create dependence on one provider for asset intelligence, workflow, governance, and automated action.

How ServiceNow-Armis compares with alternative evaluation paths

There is no universal winner because these products emphasize different parts of the security problem:

Category or vendor Potential fit Important distinction
ServiceNow and Armis Organizations wanting broad asset intelligence connected to enterprise workflow and governance. Requires validation of integration depth, licensing, implementation, and control coverage.
Microsoft Defender for IoT Organizations standardized on Microsoft, Azure, Defender, and Sentinel. May be less attractive to buyers seeking a vendor-neutral operating layer.
Claroty Industrial, healthcare, and critical-infrastructure cyber-physical-system programs. Emphasizes CPS security depth rather than general ServiceNow workflow.
Nozomi Networks OT and IoT visibility, monitoring, and security programs. Does not make ServiceNow the central workflow and governance layer.
Tenable Vulnerability and exposure-management programs focused on prioritizing weaknesses. May not be the best fit when passive discovery of operational or medical devices is the central need.
Forescout Heterogeneous device visibility and network-access-control programs. Emphasizes device visibility and enforcement rather than a workflow-centric platform.
Dragos Industrial cybersecurity and OT threat-intelligence programs. Particularly focused on industrial environments rather than general-purpose IT inventory.

These are alternative evaluation paths, not claims that each vendor matches Armis feature for feature. Buyers should first identify whether their primary problem is discovery, exposure management, OT monitoring, identity intelligence, vulnerability management, detection, response, or workflow automation.

Questions buyers should ask before renewing or expanding

  1. Which Armis Centrix capabilities are included in the current edition?
  2. Which promised ServiceNow integrations are available now?
  3. Can asset inventories, risk scores, detections, and historical data be exported?
  4. How are duplicate and orphaned assets reconciled between Armis and the ServiceNow CMDB?
  5. How are unmanaged and safety-critical assets handled?
  6. Can automated actions be restricted by asset type, geography, business service, or maintenance window?
  7. What is the process for correcting false positives and attribution errors?
  8. What happens if the organization uses another ITSM, SIEM, SOAR, vulnerability-management, or network-security platform?
  9. What data-residency, retention, encryption, subcontractor, and incident-notification terms apply?
  10. What are the renewal, packaging, minimum-spend, and support implications of the acquisition?

What to watch next

The most useful evidence will come from execution rather than acquisition-day promises. Buyers and investors should watch for:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Changes to product packaging, pricing, renewals, and licensing.
  • General availability of combined integrations.
  • ServiceNow disclosures about Armis-related revenue, bookings, retention, or cross-sell.
  • Customer references in healthcare, OT, manufacturing, government, and critical infrastructure.
  • Changes to support, data residency, certifications, or deployment options.
  • Measured improvements in remediation speed and exposure reduction.

Useful operational benchmarks include time from discovery to owner assignment, the percentage of assets mapped to business services, time to prioritize critical exposures, remediation completion rates, duplicate-asset counts, false-positive rates, exposure age, and change-related incidents.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a comment

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More guides

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.