ServiceNow Launches AI Agent to Empower Autonomous Security Defense

ServiceNow has introduced new AI-powered agents in its Security and Risk suite, marking a significant step toward accelerating autonomous defense capabilities for enterprises.

These advanced features are now available to ServiceNow customers, designed to help organizations move beyond reactive security measures. The focus is on automating threat responses, orchestrating remediation efforts, and reducing response times across the enterprise.

Announced at ServiceNow's annual Knowledge 2025 conference in Las Vegas, these AI agents aim to assist cybersecurity teams in addressing growing threats, alert fatigue, and compliance challenges. Leveraging ServiceNow's expertise in orchestrating complex workflows at scale, these agents can trigger dynamic playbooks, respond to vulnerabilities automatically, and deliver real-time insights to enhance decision-making and mitigate risks. The goal is to lay the foundation for self-defending enterprise systems capable of managing risk and compliance autonomously while maintaining appropriate human oversight.

"AI is redefining the rules of cybersecurity and risk management," said Lou Fiorello, Group Vice President and General Manager of ServiceNow's Security and Risk products. "CISOs want to harness AI to boost productivity and improve protection and response capabilities—amplifying impact at scale. This is why ServiceNow delivers new security-focused AI agents on a single platform with proper human supervision."

In addition to the new AI agents, ServiceNow has expanded its risk-based vulnerability management capabilities to include comprehensive exposure management workflows.

The new workflows enhance visibility into compensating controls, such as endpoint detection, response tools, and web application firewalls, providing organizations with a more holistic approach to risk mitigation. ServiceNow’s previously launched Threat Intelligence Platform has also been strengthened with additional security case management features to enable proactive and precise responses to emerging threats.

Partnerships

ServiceNow also announced an expansion of its partnerships with Cisco Systems and Microsoft to create an AI-to-AI security ecosystem, offering unified visibility and governance for AI deployments. These integrations combine ServiceNow's Workflow Intelligence with the cybersecurity expertise of Microsoft and Cisco, enabling faster threat detection, broader context, and more coordinated responses.

Beyond enhancing cybersecurity, ServiceNow is broadening its risk management scope with new operational resilience and AI governance tools.

A new service called AI Control Tower provides centralized visibility into organizations' AI assets, lifecycle processes, and compliance status, ensuring ethical and transparent AI usage across the enterprise. Additionally, the company unveiled a new Digital Operational Resilience Management solution, empowering businesses to manage disruptions, maintain continuity, and address emerging risks in today’s complex digital landscape.

Collectively, these updates reflect ServiceNow’s strategy to become a unified platform for enterprise resilience. By leveraging its AI platform, Workflow Data Fabric, and integration capabilities, ServiceNow aims to break down silos between departments and offer a single system of action that connects people, data, and processes.

These announcements follow the launch of ServiceNow’s new customer relationship management platform and other AI tools that make it easier to use AI agents. The new CRM offerings incorporate technology from Moveworks, a company ServiceNow acquired in March for $2.8 billion.