ServiceNow Moves on Veza to Control Identity in the Age of AI Agents

There are moments in enterprise software when a company is not simply buying technology. It is buying visibility into the future. ServiceNow’s decision to acquire identity security startup Veza in Dec 2025 lands squarely in that category, a calculated move that places identity intelligence at the center of the modern enterprise operating system. In the current cycle of tech news, where AI agents are moving from experiment to workforce participant, the question facing CIOs is no longer whether automation will expand. The real question is who controls the permissions behind the machines.

Veza built its reputation solving a problem that quietly haunts nearly every enterprise system: access sprawl. The company’s platform maps who can access what across cloud infrastructure, data systems, and enterprise applications, translating tangled permission structures into something leaders can actually see and govern. Tarun Thakur, CEO of Veza, has long argued that identity security becomes exponentially harder as organizations scale across multi-cloud infrastructure and distributed workforces. Add autonomous AI agents to that environment and the stakes climb even higher. When digital workers begin reading data, triggering workflows, and making decisions at machine speed, identity stops being a background IT function and starts becoming a strategic control layer.

ServiceNow recognized that shift early. Amit Zavery, President, CPO, and COO at ServiceNow, framed the acquisition around a fundamental enterprise problem: organizations deploying AI need a way to understand exactly what those agents can access and what actions they are allowed to take. Veza’s technology gives ServiceNow a deep visibility layer into permissions across applications and data sources, allowing companies to manage least-privilege access not only for people but also for software identities and autonomous systems. In a market where enterprise platforms increasingly compete on control and context, that capability carries serious weight.

Financial terms of the transaction were not disclosed by the companies, though industry reporting suggests the deal value may exceed $1B. Veza’s last known valuation reached $808M following a funding round earlier in the year, signaling how rapidly identity security has moved from niche discipline to core infrastructure. That valuation gap tells its own story. Identity governance is no longer simply about compliance or audit readiness. It is about operational awareness in a world where data access determines competitive speed.

Enterprise customers are already thinking in those terms. In the official announcement, John Stecher, CTO at Blackstone, described the combined capabilities in practical terms. ServiceNow drives the firm’s horizontal workflows, while Veza enforces least-privilege identity controls and delivers access intelligence across systems. Together, the platforms offer something enterprises increasingly need: a workflow engine that understands not just the process but the identity behind every action moving through it.

That context explains why the acquisition is attracting attention across tech news circles. Identity has quietly become the control plane for modern computing. As AI agents multiply inside corporate environments, organizations must track what each digital actor can see, modify, or trigger. Without that clarity, automation becomes a risk multiplier rather than a productivity engine.

The deeper implication of the ServiceNow and Veza combination is architectural. ServiceNow already operates as a system of action across IT, operations, and business workflows. By integrating Veza’s identity intelligence layer, the company moves closer to owning the full context behind enterprise activity. Not just what work is happening, but who or what is authorized to do it. In an environment where machine identities may soon outnumber human ones, that capability sits at the heart of the next phase of enterprise infrastructure.

Which is why this story is resonating across tech news coverage of AI and cybersecurity. Identity used to function as a gate. Increasingly it is becoming a map of how work actually moves through an organization. And companies that understand that map first tend to control the terrain that follows.