Enterprise software giant ServiceNow has agreed to acquire cybersecurity firm Armis in an all-cash deal valued at $7.75 billion, marking one of the largest security acquisitions of the year.
The deal underscores how cybersecurity has become a central pillar of enterprise IT strategy as companies accelerate AI adoption, cloud migration, and automation. ServiceNow said the acquisition will strengthen its ability to secure connected devices, operational technology, and cloud assets—areas increasingly targeted by sophisticated attacks.
Armis is best known for its agentless security platform, which helps organizations monitor unmanaged and IoT devices across corporate networks. As enterprises deploy more sensors, smart systems, and AI-driven infrastructure, the attack surface has expanded dramatically. Security teams are under pressure to gain visibility into assets that traditional tools often miss.
For ServiceNow, the acquisition fits a broader strategy of embedding security deeper into workflow automation. Rather than treating cybersecurity as a standalone function, the company has been positioning it as an integrated layer across IT operations, risk management, and compliance processes.
The timing is notable. Enterprise security spending has remained resilient even as companies rein in other technology budgets. Boards are increasingly unwilling to cut back on cybersecurity following a series of high-profile breaches, regulatory fines, and operational disruptions.
Investors are also watching the valuation closely. At nearly $8 billion, the deal signals confidence that security platforms tied to critical infrastructure and AI-driven environments will continue to command premium prices. It also highlights consolidation pressure in the cybersecurity sector, where scale and platform integration are becoming decisive advantages.
If approved, the acquisition is expected to accelerate ServiceNow’s push into security-focused enterprise workflows, while giving Armis access to a far larger customer base. The deal reinforces a simple message: in the AI era, security is no longer optional or peripheral—it is core enterprise infrastructure.
