ServiceNow is reportedly close to finalizing a major acquisition deal that could significantly strengthen its cybersecurity capabilities. According to sources cited by The Information, the cloud software giant is in advanced discussions to acquire Veza, a fast-growing cybersecurity startup specializing in identity and access management. The potential acquisition is estimated to be valued at more than $1 billion, which would exceed four times the total funding Veza has raised to date.
What Veza Does
Veza’s platform focuses on protecting enterprise identities — both human users and machine accounts that connect digital systems. The software detects unused or overly privileged accounts that could become entry points for cyberattacks. It also flags violations of role-based policies, such as cases where a single employee has full control over a sensitive workload without required separation of duties.
Beyond employee identity management, Veza creates an automated inventory of machine identities used for application-to-application communication — a growing attack surface in the cybersecurity landscape.
Why ServiceNow Wants Veza
ServiceNow already provides vulnerability detection, risk scoring, and threat monitoring. However, the company currently offers limited features for managing identity permissions across systems. If the deal closes, Veza’s technology would enhance ServiceNow’s cybersecurity stack by filling a critical gap in identity security — one of the biggest risk areas for enterprises today.
The acquisition would align with ServiceNow’s strategy of expanding its AI and cybersecurity portfolio through high-value M&A. Earlier this year, the company acquired AI platform Moveworks in a $2.85 billion deal, followed by the purchase of data management startup data.world, further strengthening its AI-driven enterprise tools.
Announcement Timeline
The Veza acquisition could reportedly be announced as early as next week, though neither company has officially commented on the deal.