ServiceNow closes its Veza acquisition at about 1.2 billion dollars

ServiceNow has completed its acquisition of Veza, announced on 2 December 2025 and closed on 2 March 2026 for approximately 1.2 billion dollars, substantially in cash. Veza had raised a 108 million dollar Series D earlier in 2025 at a valuation of 808 million. Its platform maps effective permissions across applications, data systems, cloud, and SaaS, covering non-human identity management, identity security posture, privileged access monitoring, and governance and administration. ServiceNow is using it to extend identity and access controls across its security and risk portfolio, and specifically to strengthen AI Control Tower by governing what AI agents can access and do inside an enterprise.

Why it matters

Veza's contribution is the entitlement graph: not "who is in which group" but what that group actually resolves to on a specific S3 bucket, Snowflake table, or Salesforce object. That is the question conventional IGA has always answered badly, because certification campaigns review role names rather than effective permissions.

Putting that graph inside ServiceNow is strategically obvious and commercially awkward. ServiceNow already sits in the workflow layer where access requests and approvals happen, so the loop closes. But Veza sold well to organisations running SailPoint or Saviynt as a visibility layer over an incumbent, and that neutrality is harder to maintain from inside a platform with its own governance ambitions.

If you bought Veza as an overlay, check licensing at renewal. Alternatives are in our IGA ranking.

Source: ServiceNow