ServiceNow's $7.75 Billion Armis Bet: What It Means for Enterprise IT Buyers

Key points

• ServiceNow acquired cybersecurity company Armis in December 2025 for $7.75 billion in cash, its largest deal ever.
• By mid-2026, ServiceNow's share price had fallen roughly 30% from historic highs amid fears that AI tools will erode demand for traditional software subscriptions.
• Only 50% of ServiceNow's new revenue in 2025 came from seat-based subscriptions, down from the model the company was built on.
• Former Gartner analyst Brad LaPorte says ServiceNow paid 23 times Armis's annual revenue not for the product but for a strategic position inside IT asset management.
• Analysts warn that consumption-based pricing, which charges customers for what they use rather than a flat fee per user, carries hidden cost risks buyers need to understand.

ServiceNow built its business on a simple idea: charge companies a monthly fee for every employee who uses the platform. That model, called per-seat pricing, funded its rise to the top of the IT service management market, where organisations use software to track and fix their own technology problems. Now the company's moving away from that model, and a $7.75 billion acquisition is the clearest signal yet of where it's heading.

Why did ServiceNow buy a cybersecurity company?

Armis makes software that finds and maps every device connected to a company's network, including ones that are easy to forget: factory sensors, medical scanners, office routers. ServiceNow paid 23 times Armis's yearly revenue of roughly $340 million to get it.

That multiple is striking. Brad LaPorte, a former Gartner analyst now at Lionfish Tech Advisors, puts it bluntly: "Nobody pays 23 times revenue for a product. They pay for a position."

The position ServiceNow wanted is inside what IT teams call the CMDB, short for Configuration Management Database. Think of a CMDB as a company's official list of every piece of technology it owns and who is responsible for it. Most CMDBs are wildly inaccurate. "Everyone reconciles to it. Nobody believes it," LaPorte told CSO Online. Armis builds that list automatically by scanning the network rather than relying on humans to update a spreadsheet.

Once you know exactly what exists and where, you can automate the job of fixing problems, which is precisely what ServiceNow's workflow tools are designed to do. The deal also pulls in buyers ServiceNow hasn't historically sold to: hospitals, utilities, manufacturers. And it brings a new decision-maker into the room. The CISO, the executive responsible for security, has never been ServiceNow's primary buyer before.

Should existing ServiceNow customers be worried?

Possibly, yes, for two reasons worth understanding before the next renewal meeting.

First, Armis had a reputation for working alongside every IT management platform on the market, including ServiceNow's direct rivals. LaPorte calls it the "Switzerland" model. That neutrality's gone. Customers who relied on Armis integrations with other tools may find those relationships more complicated going forward.

Second, ServiceNow's moving to consumption-based pricing, where you pay for what you actually use rather than a fixed fee per person. On paper that sounds fairer. In practice, costs can be hard to predict and harder to cap. Chris Selland, founder of research firm Differential Factor and a lecturer at Northeastern University, notes that the real threat to ServiceNow was never AI writing competing software. It was "seat compression": companies buying fewer seats as AI handles work that once needed a human. Consumption pricing is ServiceNow's answer to that, but it shifts the financial risk onto the buyer.

Rob Smith, CEO of Lionfish Tech Advisors and a former Gartner analyst, frames the competitive picture plainly: "ServiceNow's defense is that it knows the steps in your process, and that is expensive to re-create."

That incumbency protects ServiceNow more than many analysts initially credited. Replacing its deeply embedded workflows with AI-generated alternatives turns out to be harder than it sounds. Worth noting here: we reported in August on three top-severity flaws in ServiceNow's AI platform, one exploitable without logging in, which gives CISOs being sold on deeper ServiceNow integration a concrete reason to ask hard questions about the platform's security record before signing.

For buyers, the immediate practical question is cost control. Consumption pricing rewards careful monitoring of what the platform actually does on your behalf each month. Organisations that don't put usage limits and regular audits in place risk bills that bear no resemblance to last year's subscription invoice.