Four of the twelve capabilities in ServiceNow’s Autonomous Security launch arrive in December. The other eight are available now. That split is the most useful detail in this week’s announcement.

The launch, made during ServiceNow’s Black Hat USA 2026 presence in Las Vegas, groups six solutions under the Autonomous Security line: unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, agentic incident response, and cyber risk and compliance. All route through AI Control Tower. The control-tower architecture, along with the roles of Armis and Veza, was previewed at Knowledge 2026 in May. This week’s news is the packaging: six named solutions, the Shift Zero brand, and a clear go-to-market claim as one of the fastest-growing major enterprise cybersecurity businesses.

Automation Arrives on Two Timelines

Available today: agentic exposure management, autonomous remediation agents, application security, dynamic application security testing, external attack surface management, agentic AI for cyber-physical security, AI agent access security, and non-human identity remediation.

Arriving in December: the tier-two security operations center AI specialist, the vulnerability resolution AI specialist, agentic AI for continuous control monitoring, and cryptographic asset compliance.

The December capabilities handle the heavier decision-making work. The specialist that builds and executes multi-phase incident response plans, and the agent that orchestrates vulnerability triage and remediation at scale, sit closest to the autonomy the platform describes. Staggered availability is common in enterprise software. For buyers, the practical question becomes which of the six solutions can be budgeted this quarter and which should be planned around a December release date.

Platform Breadth and Specialist Depth

Yevgeny Dibrov, ServiceNow’s senior vice president and general manager for cybersecurity and risk, noted that machine identities double every eighteen months and that fragmented tools struggle to keep pace. That reality underpins the case for consolidation, and the data supports it.

The same week also highlighted the specialist path. Zenity closed a $125 million Series C, making the case that agent governance moves quickly enough to benefit from purpose-built tooling alongside broader platforms. Axonius passed $200 million in annual recurring revenue, focusing on the asset visibility layer that ServiceNow now includes inside Autonomous Security.

A buyer managing seventy or more security tools has a clear incentive to consolidate. At the same time, two specialist vendors covering adjacent ground are posting strong growth. Both signals accurately describe the current market.

Baker Hughes on the Armis Integration

The announcement includes one customer perspective. Brandon Glaze, senior director for operational technology and industrial control system cybersecurity at Baker Hughes, highlighted the collaboration with the Armis team on visibility and resilience across industrial environments. The quote speaks specifically to the Armis integration. Because the full six-solution Autonomous Security bundle launched this week, broader customer references covering the complete line are still ahead.

What to Watch Next

• Will ServiceNow share early adoption metrics on the eight live capabilities before December, or will the next meaningful update wait for the full set?
• How will Zenity and Axonius position themselves relative to Autonomous Security — as complementary layers or as focused alternatives?
• When the December capabilities arrive, how closely will they deliver the level of autonomy described in the current materials?

About Shashi Bellamkonda

Loading bio…

LinkedIn Profile

Get new posts by email:

Subscribe

Powered by