ServiceNow has unveiled a new Autonomous Security portfolio comprising six unified solutions designed to help enterprises prevent, detect and remediate cyber threats at machine speed, as organisations grapple with the security risks introduced by agentic AI.

The announcement lands as Singapore tightens its own cybersecurity posture. The Cyber Security Agency of Singapore is updating the Cybersecurity Code of Practice for Critical Information Infrastructure to address advanced persistent threats and AI-enabled attacks, with revisions expected to mandate stronger board-level accountability and enhanced threat detection across critical sectors.

Six solutions built for machine-speed threats

ServiceNow said the portfolio spans unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, agentic incident response, and cyber risk and compliance. New AI Specialists — including a Vulnerability Resolution AI Specialist — are intended to complete security workflows autonomously, escalating only high-risk decisions to human analysts.

The company frames the shift as “Shift Zero”: moving from fragmented, reactive security to prevention embedded at every layer, with every system, identity and agent governed and secured in real time.

“Machine identities double every 18 months. Fragmented security tools can’t match the curve AI is creating,” said Yevgeny Dibrov, SVP and GM, cybersecurity and risk, ServiceNow.

Built on Armis and Veza acquisitions

The launch builds on ServiceNow’s US$7.75 billion acquisition of asset visibility firm Armis and its acquisition of identity security platform Veza, both of which now feed into ServiceNow’s AI Control Tower and Context Engine. The company said its security and risk business has surpassed US$1 billion in annual contract value.

• Agentic Exposure Management and a Vulnerability Resolution AI Specialist for prioritised remediation
• Application Security, DAST and External Attack Surface Management for code-to-cloud coverage
• Agentic AI for Cyber-Physical Security across OT, medical devices and IoT networks
• AI Agent Access Security and Non-Human Identity Remediation for ungoverned machine identities
• Agentic Incident Response powered by a Tier 2 SOC AI Specialist
• Continuous Control Monitoring and Cryptographic Asset Compliance for quantum-readiness

Most of the new capabilities are available now, with the Tier 2 SOC AI Specialist, Vulnerability Resolution AI Specialist, Continuous Control Monitoring and Cryptographic Asset Compliance expected in December 2026.

“We’ve appreciated the collaboration and innovation from the ServiceNow (Armis) team as we continue working together to improve cyber resilience,” said Brandon Glaze, Senior Director, Cybersecurity (OT/ICS), Baker Hughes.

The average enterprise runs more than 70 security tools, according to ServiceNow, fragmenting visibility across endpoints, networks, cloud environments and identities — a gap the company says its unified platform is designed to close as AI agents proliferate across enterprise systems.