ServiceNow closes its Veza acquisition at about 1.2 billion dollars
Announced in December 2025 and closed on 2 March 2026, substantially in cash. Veza, valued at 808 million dollars in its Series D, now supplies the permission graph behind ServiceNow's AI Control Tower.
ServiceNow has completed its acquisition of Veza, announced on 2 December 2025 and closed on 2 March 2026 for approximately 1.2 billion dollars, substantially in cash. Veza had raised a 108 million dollar Series D earlier in 2025 at a valuation of 808 million. Its platform maps effective permissions across applications, data systems, cloud, and SaaS, covering non-human identity management, identity security posture, privileged access monitoring, and governance and administration. ServiceNow is using it to extend identity and access controls across its security and risk portfolio, and specifically to strengthen AI Control Tower by governing what AI agents can access and do inside an enterprise.
Why it matters
Veza's contribution is the entitlement graph: not "who is in which group" but what that group actually resolves to on a specific S3 bucket, Snowflake table, or Salesforce object. That is the question conventional IGA has always answered badly, because certification campaigns review role names rather than effective permissions.
Putting that graph inside ServiceNow is strategically obvious and commercially awkward. ServiceNow already sits in the workflow layer where access requests and approvals happen, so the loop closes. But Veza sold well to organisations running SailPoint or Saviynt as a visibility layer over an incumbent, and that neutrality is harder to maintain from inside a platform with its own governance ambitions.
If you bought Veza as an overlay, check licensing at renewal. Alternatives are in our IGA ranking.
Source: ServiceNow
Related on Start with Identity
- BlogPalo Alto Networks closes its 25 billion dollar CyberArk acquisition
The largest deal in security industry history closed on 11 February 2026. CyberArk shareholders took 45 dollars cash plus 2.2005 Palo Alto shares per ordinary s
- BlogCyera agrees to buy Oasis Security for about 1 billion dollars
A data-security company is paying roughly 1 billion dollars, about 700 million of it in cash, for a four-year-old non-human identity startup. The price says mor
- BlogSailPoint closes its Entro Security deal, reportedly at 200 million dollars
Two weeks from announcement to close. Entro brings discovery and lifecycle management for more than 1,200 kinds of secret, token, and certificate into SailPoint
- GlossaryAccess Certification
Periodic review of who has access to what, with managers or resource owners attesting that access is still appropriate. A regulatory requirement in many industr
- GlossaryCIEM
Cloud Infrastructure Entitlement Management. Tools that discover and right-size identities and permissions across AWS, Azure, and GCP, reducing excessive and un
- GlossaryIAM
Identity and Access Management. Workforce identity for employees, contractors, and partners. Covers authentication, authorization, lifecycle, and audit. Distinc