Enterprise software leader ServiceNow has agreed to acquire cybersecurity specialist Armis in an all-cash transaction valued at $7.75 billion, marking one of the largest cybersecurity acquisitions of the year and signaling a major expansion of ServiceNow’s security and risk management ambitions.
The deal follows weeks of market speculation and comes shortly after Armis raised $435 million in a late-stage funding round that had fueled expectations of an initial public offering. Armis executives had previously indicated that a public listing could take place by the end of 2026, but the company has now opted to join forces with ServiceNow instead.
A Strategic Shift From IPO to Acquisition
The most recent funding round valued Armis at approximately $6.1 billion. Earlier this year, reports suggested that private equity firm Thoma Bravo had explored a potential acquisition at a lower valuation. The ServiceNow agreement ultimately surpasses those figures, offering a significant premium over prior estimates.
Founded to address growing visibility gaps in enterprise environments, Armis has built a platform designed to identify and secure a wide range of assets, including IT infrastructure, operational technology (OT), medical devices and Internet of Things (IoT) systems. Its offerings include asset discovery, risk assessment, vulnerability prioritization, compliance support and remediation capabilities.
Expanding ServiceNow’s Security Portfolio
ServiceNow said the acquisition will substantially expand its total addressable market for security and risk solutions, potentially more than tripling its opportunity in the sector. The two companies already maintain a partnership, with integrations that feed Armis’ asset intelligence into ServiceNow’s workflow automation platform.
Industry analysts view the deal as a logical extension of ServiceNow’s strategy to unify security insights with enterprise operations, especially as organizations grapple with increasingly complex hybrid and connected environments.
“The combination of ServiceNow and Armis creates a comprehensive, real-time view of connected assets,” said Larry Feinsmith, head of global technology strategy, innovation and partnerships at JPMorgan Chase. “That visibility is critical for building secure, trusted AI-driven systems.”
A Busy Year for Cybersecurity M&A
The Armis deal follows ServiceNow’s recent agreement to acquire identity security firm Veza Security, a transaction reported to be valued at more than $1 billion, though official financial details were not disclosed.
Armis itself has been active on the acquisition front, purchasing CTCI, Silk Security and Otorio over the past two years to broaden its capabilities across cloud, identity and industrial security.
According to industry tracking data, nearly 400 cybersecurity mergers and acquisitions have been recorded so far in 2025, underscoring continued consolidation as vendors race to deliver broader, integrated security platforms.
What Comes Next
The ServiceNow–Armis transaction is expected to close in the second half of 2026, pending regulatory approvals and standard closing conditions. Once finalized, Armis’ employees will join ServiceNow, integrating their technology and expertise into the larger organization.
As enterprises continue to prioritize visibility and protection across rapidly expanding digital ecosystems, the acquisition positions ServiceNow to play a more prominent role in the evolving cybersecurity landscape.
