ServiceNow has expanded its Autonomous Security portfolio with six AI-powered security solutions designed to help enterprises prevent, detect and respond to cyber threats in real time as organizations accelerate the adoption of agentic AI.

The new offerings span unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, agentic incident response, and cyber risk and compliance. The company also introduced AI Specialists, including a Vulnerability Resolution AI Specialist, capable of autonomously completing security workflows.

According to ServiceNow, enterprises now operate more than 70 security tools on average, creating fragmented visibility across endpoints, networks, cloud environments and identities. The company said its latest capabilities aim to consolidate security operations into a unified platform that provides contextual visibility, governance and automated remediation.

The announcement builds on ServiceNow’s “Shift Zero” strategy, which focuses on embedding preventive security controls across enterprise environments rather than relying on reactive threat response. The approach is intended to secure systems, identities and AI agents continuously while providing governance and auditability.

“As AI exposures compound exponentially, security teams operate on a human clock,” said Yevgeny Dibrov, SVP and GM, Cybersecurity and Risk, ServiceNow. “Organizations need autonomous security and governance that matches the scale, velocity and unpredictability of AI-driven threats.”

Among the new capabilities, Unified Exposure Management consolidates vulnerability findings from multiple sources and prioritizes remediation using threat intelligence. The Vulnerability Resolution AI Specialist automates vulnerability triage and executes low-risk patching tasks.

ServiceNow also expanded its application security portfolio with Dynamic Application Security Testing (DAST), External Attack Surface Management (EASM), and enhanced Application Security capabilities that identify vulnerabilities in AI-generated code and software supply chains before deployment.

For operational technology (OT) environments, the company introduced Agentic AI for Cyber Physical Security, providing agentless discovery, continuous compliance monitoring and automated remediation across industrial, IoT and medical device networks.

Identity security enhancements include AI Agent Access Security and Non-Human Identity Remediation, designed to govern AI agents, service accounts and machine identities under least-privilege access principles while automating credential rotation, deprovisioning and permission management.

ServiceNow also announced Agentic Incident Response, enabling AI to autonomously investigate, correlate and respond to security incidents, escalating only high-risk decisions to human analysts.

In governance and compliance, the company introduced Agentic AI for Continuous Control Monitoring and Cryptographic Asset Compliance to automate evidence collection, monitor regulatory controls continuously and help organizations transition to quantum-resistant cryptography.

The expanded portfolio is powered by capabilities from Armis and Veza, whose technologies provide asset visibility and identity intelligence that feed ServiceNow’s AI Control Tower for centralized governance and automated remediation.

Several capabilities, including Agentic Exposure Management, Application Security, DAST, EASM, AI Agent Access Security and Non-Human Identity Remediation, are available immediately. The Tier 2 SOC AI Specialist, Vulnerability Resolution AI Specialist, Continuous Control Monitoring and Cryptographic Asset Compliance are expected to become available in December 2026.

Join the community of 2M+ industry professionals.

Subscribe to Newsletter to get latest insights & analysis in your inbox.

All about ETCISO industry right on your smartphone!