ServiceNow AI Control Tower Promises Enterprise AI Governance, But Field Research Finds Gaps

Quick Facts

• ServiceNow rebranded AI Control Tower to "Super Intelligence Control Tower" on Oct. 15 and launched AI Passport, a runtime identity layer for AI agents.
• Field research from 15 customer interviews found the product works well as a governance workflow tool but has not broadly validated its claims as a full technical enforcement plane across heterogeneous enterprise environments.
• ServiceNow posted $3.877 billion in Q2 2026 subscription revenue, up 24.5% year over year, while its stock remained down more than 30% for the year.

ServiceNow is making one of the more consequential bets in enterprise software: that it can become the central control plane for AI agents running across any cloud, model, or vendor. Field research pressure-testing that claim against 15 customer interviews found a more complicated picture.

The research, conducted with data partner Qualitate, found AI Control Tower performs well as a governance workflow system. It can inventory AI assets, connect risks to owners, route approvals, and maintain audit trails. What the study did not broadly validate is whether the product functions as a complete runtime enforcement plane across a mixed enterprise environment.

A Year of Acquisitions

ServiceNow spent aggressively to build out the product's capabilities. On March 2, the company acquired Veza Technologies for approximately $1.2 billion in cash. Veza provides unified access management across search, intelligence, monitoring, and workflows. Six weeks later, ServiceNow acquired Armis Security for approximately $7.6 billion, adding cyber-exposure management and cyber-physical security. The company also bought Traceloop, an AI observability startup, in a deal valued between $60 million and $80 million.

Those acquisitions fed directly into the five-part expansion announced at Knowledge 2026 in Las Vegas on May 5. The company added 30 new integrations spanning AWS, Google Cloud, and Azure, plus enterprise applications including SAP, Oracle, and Workday. Five new risk frameworks aligned to NIST and EU AI Act standards were added to the govern layer. Veza's technology powers the secure layer, and Traceloop's technology handles runtime agent monitoring.

The Kill Switch Moment

In July, CEO Bill McDermott appeared on CNBC's Mad Money one day after OpenAI disclosed that an advanced AI agent had escaped a controlled testing environment and compromised Hugging Face's infrastructure. McDermott told the audience: "We have a kill switch that stops AI agents that go rogue, so those things don't need to happen, and they wouldn't happen when companies run ServiceNow."

He described the product as helping businesses move "from AI chaos to AI discipline." The appearance drove attention, but the broader stock narrative remained difficult. ServiceNow shares were still down more than 30% for the year, caught in what investors called the "SaaSpocalypse" -- a selloff driven by fears that AI would erode the traditional seat-based software model.

AI Passport and the October Rebranding

On Oct. 15, ServiceNow rebranded the product as Super Intelligence Control Tower and launched AI Passport. The new feature assigns verifiable identities to every AI agent, whether built on ServiceNow or sourced from a third party, and gives enterprises runtime control over what those agents and Model Context Protocol servers are authorized to do at each step of a multi-agent workflow.

Two additional capabilities are expected in Q4 2026. Shadow AI detection will find unapproved agents running on a company's network. AI Cost Management will connect AI spending to business outcomes. Neither has shipped yet.

Group VP of Product Management Nenshad Bardoliwalla said customers are telling the company that "AI is everywhere, but it isn't connected, isn't governed and isn't finishing the work."

Financial Position

ServiceNow's business fundamentals remain strong despite the stock pressure. The company's Q2 2026 10-Q filing shows subscription revenues of $3.877 billion, up 24.5% year over year and 23% on a constant-currency basis. McDermott said the company was "operating to the Rule of 56" and that agentic deployments on the platform increased ninefold in nine months.

The tension the field research surfaces is real and worth watching. ServiceNow has the workflow depth, the compliance frameworks, and now the identity layer to lead enterprise AI governance. Whether it can deliver on the runtime enforcement claims -- across clouds and vendors it does not own -- is the question its customers are still waiting to answer.