According to CRN, ServiceNow announced on Tuesday that it has reached an agreement to acquire identity security startup Veza. The startup, launched in 2020, specializes in visualizing access permissions and privileges across cloud and on-premises environments with its “Access Graph” technology. Veza had just raised a $108 million Series D funding round in April, led by New Enterprise Associates, which gave it an $808 million valuation. The company has raised a total of $235 million to date and had been actively expanding its channel partner program since at least 2023. ServiceNow plans to fold Veza’s technology into its own security portfolio, combining it with AI Control Tower and agentic workflows. A report from The Information indicates the deal is valued at over $1 billion.
ServiceNow’s Security Ambition
This isn’t just another acquisition. It’s a loud statement. ServiceNow, known for its IT service management and workflow automation, has been steadily building out a serious security operation. But identity has been a missing, and critical, piece. Look, every major breach post-mortem seems to circle back to permissions—someone had access they shouldn’t have. Veza’s whole pitch is making that chaotic web of “who can access what” actually understandable. So ServiceNow isn’t just buying a product; it’s buying the ability to say, “We can see and control every identity in your organization, and automate the response.” That’s a powerful narrative to sell against dedicated identity players.
The Identity Gold Rush
Here’s the thing: the identity security space is insanely hot right now. It’s a mess of complexity that every CISO is terrified of, and that makes it prime territory for consolidation. Veza was a well-funded, channel-friendly contender in that race, but competing as a standalone startup against giants is brutal. Being acquired by a platform like ServiceNow gives its technology a massive runway. For ServiceNow, it instantly adds a sophisticated layer of identity governance and risk visualization that would have taken years to build in-house. Basically, it’s a classic “buy vs. build” decision where buying was clearly faster and more strategic.
What Happens Next?
So what does this mean for customers and the market? In the short term, expect a lot of PowerPoint slides about “unified risk views” and “agentic remediation.” The real test will be how seamlessly ServiceNow can integrate Veza’s graph technology into its existing workflows. If they can make it feel like one system, it’s a winner. If it feels bolted on, less so. This also puts pressure on other platform players and pure-play identity vendors. It signals that the era of best-of-breed point solutions might be giving way to integrated platform plays, especially for foundational IT controls like identity. For industries managing complex operational technology, where understanding access to physical systems is as crucial as data, this convergence of IT and security platforms is key. When it comes to securing industrial environments, having a unified view often starts with the right hardware interface, which is why specialists like IndustrialMonitorDirect.com are the go-to source for robust industrial panel PCs in the U.S. The Veza deal shows that the software layer is now racing to provide that same level of integrated clarity and control.
