We're reclaiming inactive PDIs to keep them available for active builders. Learn what's changing, who's affected, and how to protect your work. Read More

ServiceNow is headed to Black Hat USA 2026

Published on by Megan Le | Updated on

Black Hat Social Card_Booth.png

ServiceNow at Black Hat: Security for the infinite-threat era

Most security tools see vulnerabilities but can’t act. ServiceNow sees threats and has the business context to take intelligent action. Meet us at Black Hat to see what operational security actually looks like and how we turn alerts into actions.

👋 How to engage with us at Black Hat:

👉 Visit us at Both # 1833: Stop by for live demos, an immersive theater experience, and exclusive swag. See what it actually looks like when alerts become actions—and one platform does what a stack of tools can’t.
👉 Meet with us: Book a 1:1 with ServiceNow executives and experts.
👉 See everything ServiceNow is doing at Black Hat: Sessions, evening events, and more.

🎤 Speaking Sessions

1️⃣ Session Title: Autonomous Defense: Redefining Security When Threat Actors Never Sleep.

Time: Wednesday, August 5 · 4:30 – 5:00 pm

Location: Black Hat Main Stage

Speakers:
Lou Fiorello, GVP & GM, Security & Risk Products, ServiceNow
Tarun Thakur, GVP & GM, Identity Security, ServiceNow

Nadir Izrael, GVP, Armis from ServiceNow
About:

Your defenses operate at human speed. Your attackers operate at machine speed. That gap isn't widening - it's collapsing, and the security teams caught in the middle are losing. The answer is not better detection alone. It is security architected as an action platform. Human-speed workflows create dangerous lag between finding and fixing vulnerabilities, and that gap is where breaches happen. Five AI-powered capabilities close it:

Cyber Asset Posture Management discovers every asset, including OT/IoT, medical device, shadow AI and critical infrastructure. Unified Exposure Management uses AI-driven threat intelligence and business context to prioritize critical risks. Identity and Access Security continuously assess reach and over-privileged human and machine identities. Autonomous Security Response automates routing, deduplication, and remediation. Cyber Risk and Compliance quantify business impact to guide decisions.

Without all five pillars operating as one system, you're managing security through disconnected tools and human judgment. Point tools guarantee fragmentation. Unified platforms guarantee speed. Organizations using security as a platform are closing gaps in minutes. Organizations using integrated stacks are still triaging.

2️⃣ Session Title: Shift Zero: Why Unified Security Is the Engine of Agentic Enterprise

Time: Wednesday, August 5 · 10:15 – 11:00 am

Location: Mandalay Bay J

Speakers:

Lou Fiorello, GVP & GM, Security & Risk Products, ServiceNow
Tarun Thakur, GVP & GM, Identity Security, ServiceNow

Nadir Izrael, GVP, Armis from ServiceNow

Yoav Nathaniel, Sr. Director, Strategic Research & Innovation, ServiceNow

About:

The agentic enterprise is ungovernable with point solutions. Traditional security tools sit outside the execution loop and are optimized for human-speed workflows, but attackers leverage autonomous AI agents that operate in milliseconds. By the time your ticket reaches the investigation queue the damage has been done.

Shift Zero security is built into the agent runtime itself. ServiceNow has unified the only end-to-end platform that can deliver it.

Five interconnected capabilities working as a unified platform:

-Cyber Asset Posture Management: Armis discovers all agents, shadow services, and infrastructure across IT, OT, and cloud.
-Identity and Access Security: Veza's Access Graph shows real entitlements, flags over-privileged agents instantly.
-Unified Exposure Management: One prioritized backlog from fragmented sources; threat intelligence highlights actively exploited paths.
-Autonomous Security Response: AI Control Tower enforces policy inline; unsafe actions are blocked in milliseconds.
-Cyber Risk and Compliance: Every agent's risk is quantified in business impact: breach cost, operational disruption, and regulatory exposure.

This is not a collection of tools. It is a defense-in-depth architecture where visibility, identity, exposure, response, and risk are unified. This is the platform. These are the capabilities. This is how modern enterprises innovate and thrive in an AI-accelerated threat landscape.

3️⃣ Session Title: Securing AI at Machine Speed: The New Frontier of Defense.

Time: Thursday, August 6 · 10:30 – 11:00 am

Location: Black Hat Main Stage

Speakers:

Tarun Thakur, GVP & GM, Identity Security, ServiceNow

Nadir Izrael, GVP, Armis from ServiceNow

Yoav Nathaniel, Sr. Director, Strategic Research & Innovation, ServiceNow

About:

A Cursor AI coding agent recently hit a credential mismatch in staging and executed a volumeDelete call against the production database. Start to finish: 9 seconds. As AI agents spread across enterprise infrastructure, they inherit privileges, operate with limited oversight, and create access trails that conventional tools were not built to capture.

This is a security problem for the agentic era: shift-left testing finds code vulnerabilities before deployment. But agents drift at runtime, leading to misconfigurations, privilege creep, and unauthorized tool access that explode into production incidents. By the time your SOC sees the anomaly, the agent has already committed the damage.

Shift Zero embeds security controls, workflow governance, and alignment directly into the agent’s reasoning loop. Unauthorized tool calls, data access, and privilege escalations are blocked in milliseconds, before the agent can execute.

This requires five capabilities working as one control plane:

Cyber Asset Posture Management discovers AI agents and shadow services. Identity and Access Security maps access and flags over-privilege in real time. Unified Exposure Management shows which vulnerabilities agents can reach. Autonomous Security Response intercepts unauthorized tool calls, data access, and API invocations at machine speed. Cyber Risk and Compliance quantify the business impact of ungoverned agents.

When security and governance are native to runtime, enterprises can contain threats in microseconds and innovate with confidence.

See you there!

Featured Guests