Enterprise software giant ServiceNow announced its intent to acquire Veza, a leading identity security platform, on December 2, 2024. The acquisition aims to integrate advanced identity governance capabilities into ServiceNow’s expanding security and risk management portfolio, addressing the growing challenge of managing access across increasingly complex digital ecosystems.
ServiceNow Veza: Strengthening Identity-First Security
Veza’s Access Graph brings an AI-native approach to identity security, providing enterprises with a unified dashboard to monitor and control permissions across human, machine, and AI identities. The platform is designed to enforce least-privilege access principles, a critical security framework that minimizes risk by limiting user permissions to only what is necessary for their roles. With the proliferation of autonomous AI agents and decentralized computing resources, traditional perimeter-based security models have proven insufficient. ServiceNow Veza integration will enable organizations to gain continuous visibility into identity-related risks and respond proactively to potential threats.
Founded in 2020, Veza has gained attention for its AI-native Access Graph, which maps and analyzes access relationships across data systems, SaaS apps, infrastructure and AI agents. The company serves approximately 150 enterprise customers, including major financial institutions, hospitality brands, and consumer goods companies. In April 2025, Veza raised $108 million in Series D funding at a valuation of $808 million, reflecting strong investor confidence in the identity security market.
Strategic Value of the ServiceNow Veza Deal
The acquisition will fold Veza’s identity visibility, intelligence, and governance capabilities into ServiceNow’s existing security products, including Vulnerability Response, Incident Response, and Integrated Risk Management. According to Amit Zavery, president, chief operating officer, and chief product officer at ServiceNow, the combination of Veza’s Access Graph with ServiceNow’s AI Control Tower will deliver a single pane of glass for governing identity risk across the entire organization. This integration is particularly relevant as businesses adopt agentic AI, which requires robust identity controls to prevent unauthorized access to sensitive systems and data.
Market Context and Industry Implications
Identity security has become a top priority for enterprises as cyberattacks increasingly exploit weak access controls and credential abuse. The integration will also enhance ServiceNow’s AI Control Tower by governing what AI agents can access across enterprises. Industry experts have emphasized that the decentralization of computing resources and the rapid adoption of cloud and SaaS platforms have made identity-first security strategies essential. By acquiring Veza, ServiceNow is positioning itself to address these challenges head-on, offering customers a comprehensive platform that spans traditional IT, cloud environments, and emerging AI-driven workflows.
Customer Endorsements and Future Outlook
John Stecher, chief technology officer at Blackstone, said his firm already uses both platforms, highlighting the complementary nature of ServiceNow’s horizontal business workflows and Veza’s access intelligence capabilities. The transaction, which is subject to regulatory approvals and customary closing conditions, is expected to close in the coming months. Upon completion, ServiceNow Veza will enable customers to embrace AI-driven innovation with greater confidence, ensuring that every identity—whether human, machine, or AI—operates under strict security governance.
As organizations navigate the complexities of digital transformation, the ServiceNow Veza acquisition underscores the strategic importance of identity security in protecting critical assets and maintaining operational resilience in an era of accelerating technological change.
