Strategic PartnersLatest editionIssue 10
ServiceNow
ServiceNow announced agentic continuous control monitoring for Integrated Risk Management on 2026-11-10, with AI agents that configure control checks, interpret failures, open tickets and can remediate within policy across 100+ connected systems;
Full research summary
ServiceNow announced agentic continuous control monitoring for Integrated Risk Management on 2026-11-10, with AI agents that configure control checks, interpret failures, open tickets and can remediate within policy across 100+ connected systems; general availability is expected in Q1 2027. Same-day Futurum analysis says value hinges on how many systems customers connect and whether auditors accept agent evidence, and expects slow adoption of automatic fixes. SLED relevance is indirect: no public-sector customer or framework such as CJIS, StateRAMP or NIST 800-53 is named. No new SLED deployment or measured outcome appeared tonight.
Read the edition Previous: Issue 09, November 9All ServiceNow editions
What this stream covers
ServiceNow AI-powered IT service management, workflow automation and enterprise platforms. Separate vendor claims from independent deployments, benchmarks and limitations. Explain Government/Education applicability where supported, without forcing irrelevant news into a SLED use case.
- Evidence records
- 2
- Cross-source patterns
- 0
- Also published November 10
- AnthropicAWSCampus OperationsCiscoCitizen Engagement & ServicesCrowdStrikeDellEmergency ServicesEverpureGoogleHealth & Human ServicesK–12Local GovernmentMicrosoftNetAppNVIDIAOpenAIPalo Alto NetworksPublic SafetyRed HatResearch UniversitiesState GovernmentStudent SuccessTransportationUtility ManagementVAST Data
- Subscribe
- Atom feed for ServiceNow
The latest edition did not claim a cross-source pattern; each of its records stands on its own.
Research through your lens
Every resource includes source evidence and takeaways for all three roles.
Evidence in this micro-vertical
24 resources
Follow the outcomes
24 resources across outcomes in your selection. Counts include all outcomes.
Refine by evidence type and topic
ServiceNow's Agentic Continuous Control Monitoring Turns Failed Controls Into Tickets and Fixes
Futurum's same-day analysis says customer value from ServiceNow's agentic continuous control monitoring will depend on how many systems customers connect and whether auditors accept the evidence agents produce. It expects risk teams to be slow to enable automatic fixes, because removing access or changing settings can break production processes and agents work from customer-written control descriptions; most customers will likely start with detection and tickets. External auditors will need to see how evidence was collected and how an agent reached its conclusion. It names competitors (Vanta, Drata, AuditBoard, Archer, MetricStream), ties Access Graph to the Veza acquisition closed March 2, 2026 and device monitoring to the $7.75 billion Armis acquisition completed April 2026, and notes pricing was not disclosed. Its 2H 2026 Enterprise Applications Decision Maker Survey (N=833, published August 2026) found IT operations and observability (21.6%) and cybersecurity (16.4%) lead first-rank agent deployment plans; among generative-AI add-on payers (n=645), 36.6% prefer consumption pricing.
Limitations & uncertainty
Analyst opinion, not an evaluation of a deployed system; survey is commercial and not SLED-specific; Futurum discloses vendor relationships and AI-assisted writing; product not generally available until Q1 2027.
ServiceNow Brings Agentic Monitoring to Every Control in the Enterprise at Machine Speed
On 2026-11-10 ServiceNow announced agentic continuous control monitoring in ServiceNow Integrated Risk Management (IRM), with general availability expected in Q1 2027. AI agents are said to configure control checks, interpret results and act on failed controls based on the organization's written control narratives; when a control fails, the platform flags it, opens a ticket and can remediate automatically within defined policies. Monitoring extends beyond the ServiceNow platform through 100+ prebuilt integrations to cloud, container, identity, SaaS, on-premises, OT, IoT and medical-device tools. Access Graph (part of the Context Engine) brings human, machine and AI-agent access into monitoring, and unified control mapping links one control to equivalent requirements in SOX, PCI-DSS, ISO 27001, HIPAA and the EU AI Act. The release names one customer quote (CNA Insurance) and one IDC analyst quote. Claimed benefits (fewer surprises, lower audit cost, reduced risk exposure) are not quantified.
Limitations & uncertainty
Vendor announcement of a future capability (GA expected Q1 2027); benefits are unquantified; no public-sector framework mapping or customer is named; the IDC quote describes the design, not measured results.
Broward County, Florida, selects ServiceNow to put AI agents to work for government employees
ServiceNow announced on 2026-11-09 that Broward County, Florida's second-most populous county (more than 2 million residents), has gone live with ServiceNow IT Service Management and Workflow Data Fabric. The county's Enterprise Technology Services Division supports about 8,000 users across more than 800 departments and units, with more than 100 service catalog items and workflows plus integrations for collaboration, device management, identity and secure access. The release says the county has evaluated close to 35 AI use cases over the past year and a half, that ITSM uses AI to automate previously manual workflows, and that Workflow Data Fabric with AI Search connects information across departments. Early benefits are described only qualitatively as faster response times and more consistent, simplified workflows. Elite partner Beyond20 supported planning, configuration and testing. Independent context: Broward County Board of County Commissioners file 24-1492 (agenda and final action 2024-12-10) approved, 8-0, a sole-brand designation for ServiceNow ITSM and authorized an open-end reseller contract for an initial five-year term with five one-year renewals, a potential ten-year estimated amount of $10,000,000, after an August 2024 RFI drew two responses that ETS judged did not meet requirements.
Limitations & uncertainty
Vendor press release; outcomes are qualitative and unmeasured. Headline references AI agents, but body describes ITSM automation and AI Search, with agents implied as future capability. Contract figure is a 2024 board estimate ceiling, not spend.
ServiceNow Goes All In on Governing Every AI Agent
An independent cybersecurity analyst reviewed ServiceNow's five October 2026 AI governance announcements, centered on AI Passport (a signed, scoped credential for every agent and MCP server checked at each workflow step), shadow AI discovery, kill switches, AI cost management and an 11-member Control Tower Alliance. The analyst calls ServiceNow's business context (CMDB, GRC policies, workflow approvals) the differentiator, but names enforcement as the weakness: beyond its own platform ServiceNow decides while partners such as Okta and NVIDIA block. Most capabilities are not generally available; AI Passport is expected in Q4 2026 and most Alliance integrations are commitments, not shipping code. Recommendation: treat ServiceNow as a strong candidate for AI governance system of record where it already runs CMDB and GRC, while keeping enforcement in existing identity and security tools; inventory every agent, assign identities and named human owners, and test kill switches end to end.
Limitations & uncertainty
Single analyst opinion; short public summary of a longer brief not opened; no hands-on testing or public-sector sample described; analyst firm serves vendors and investors, so independence is from ServiceNow but not a formal evaluation.
- Source
- ServiceNow Community (ServiceNow AI Platform blog)
- Published
- 2026-11-05 (posted ~7 hours before retrieval)
Introducing the Access Analysis Agent: Your Quick Answer to "Can This User Access This?"
In the Brazil release, ServiceNow introduced an Access Analysis Agent in the ServiceNow Otto panel that answers natural-language questions about whether a user, group, or role can access tables, records, AI agents, or agentic workflows. Results are Passed, Blocked, or Undefined, naming the blocking ACL, role, security attribute, or condition, and flagging scripts that need manual review. Results are logged in Access Analyzer. Available to admins/security with access_analyzer_admin or user_admin. Corroborated in Access Analyzer Brazil release notes and the ServiceNow Store listing (Paid; Compatibility: Brazil; scope sn_acl_ai_agents).
Limitations & uncertainty
Vendor claim only; Paid Store app; accuracy of conversational ACL answers not independently measured; no SLED deployment cited.
Australia Patch 8 (security-related fixes including ServiceNow AI Platform)
Australia Patch 8 was released on 2026-11-05 (build tag glide-australia-02-11-2026__patch8-10-22-2026; 456 problem fixes). Its security-related fixes section states the patch includes fixes for security-related problems that affected certain ServiceNow applications and the ServiceNow AI Platform, recommends that customers upgrade for the most secure and up-to-date features, and refers readers to KB3229040 for security-problem details. The public RN does not enumerate CVE IDs; KB3229040 was not readable without Now Support login in this run.
Limitations & uncertainty
CVE IDs/CVSS not in public RN; KB3229040 gated; no exploitation evidence stated on the opened page; vendor source only.
- Source
- ServiceNow Community (Upgrades and Patching blogs)
- Published
- 2026-11-05 (posted ~10 hours before retrieval; marks Brazil GA)
Kickstart Your ServiceNow Brazil Release Guide (Part 1 of 4)
Brazil reached General Availability on 2026-11-05. The kickstart guide frames Brazil as moving from working alongside AI to supervising autonomous AI, opening governed actions to AI agents through MCP servers. It warns MCP servers are multiplying across ITSM, ITOM, SPM, HRSD and Process Intelligence (CMDB and Service Mapping in Controlled Availability), and that Platform Owners must decide which AI clients may connect before enabling them. Legacy LLM models are no longer selectable for new AI skills, agents or agentic workflows. Catalog-role ACL removals on request tables and other access changes require pre-upgrade testing; many production upgrades are expected in December.
Limitations & uncertainty
Vendor upgrade guide; full PREPARE impact matrix linked as 'coming soon' in places; not a measured SLED outcome study.
- Source
- ServiceNow Workflow (Jon Sigler, EVP & GM, AI Platform)
- Published
- 2026-11-05
Introducing the Brazil release: Enterprise AI that carries work forward
ServiceNow's AI Platform executive announced the Brazil release as generally available on 2026-11-05 and framed it around three areas: Autonomous Engineer (delegated planning, parallel building and test generation, with developers still responsible for architecture, quality and production readiness); ServiceNow Arc, described as a personal enterprise AI agent running on an NVIDIA OpenShell runtime or an employee desktop and governed by Super Intelligence Control Tower; and Action Fabric, which connects approved ServiceNow and third-party agents to workflows and tools with identity, permissions, policy and auditability. A new Lux experience unifies navigation and search, and the release is said to include more than 1,300 accessibility enhancements. The only quantitative performance claim is lab testing in which Arc handled 95% of everyday background tasks on local models running on NVIDIA RTX Spark.
Limitations & uncertainty
Vendor executive marketing. 95% figure is the vendor's own lab test with no method published. No regulated-market availability, pricing or licensing detail. Features named may roll out on different schedules than the family GA.
LTM and ServiceNow expand partnership to scale agentic AI and accelerate joint go-to-market
ServiceNow and Elite partner LTM announced a planned expansion of their partnership to scale governed agentic AI and joint go-to-market for more than 700 shared customers. LTM is positioned as a 'client-zero' blueprint, claiming 1,500 ServiceNow AI Agents deployed across its operations, Super Intelligence Control Tower for AI inventory and risk oversight, expecting up to 80% improvement in AI asset management and efficiency, and up to 87% faster senior management review cycles. No public-sector customer outcomes are cited.
Limitations & uncertainty
Vendor claim; private-sector partner metrics; planned expansion not a signed SLED reference; no independent validation.
- Source
- ServiceNow Community (Public Sector Digital Services blog)
- Published
- 2026-11-05 (community UI showed 'yesterday' on 2026-11-06 America/Chicago retrieval)
Public Sector Digital Services 2026 Brazil Release
ServiceNow’s Brazil Family Release messaging for Public Sector Digital Services emphasizes Investigative Case Management enhancements: Case Link Analysis turns people, organizations, vehicles, locations, and evidence into a live relationship map with conversational AI so investigators can ask who is linked to a case; Master Index Versioning keeps immutable, time-stamped entity history for audit/court defensibility; investigators can create field work orders from investigative tasks; and a GOV.UK Developer Toolkit supplies GDS-aligned portal components. The post’s stated design principle is that AI surfaces patterns while people keep judgment. No agency outcome metrics or named deployments are provided.
Limitations & uncertainty
Vendor claim only; no accuracy metrics; features may change; entitlements/pricing via representative; GOV.UK toolkit is UK-specific; no named U.S. SLED customer results.
ServiceNow adds Hiring Assistant to a suite of Productivity Assistants for HR leaders and managers
ServiceNow announced Hiring, Manager, HRBP and Talent Insights Productivity Assistants inside EmployeeWorks/HR Service Delivery, in Controlled Availability. The HRBP Assistant resolves low-risk approvals against policy criteria; Findem talent data powers the Hiring and Talent Insights assistants. Vendor-reported customer figures: LTM HR productivity +21%; Robinhood deflects 70% of employee requests.
Limitations & uncertainty
Vendor claim; private-sector customers only; Controlled Availability; transferability to civil-service hiring unproven.
ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway
AWS documents configuring Bedrock AgentCore Gateway (as an MCP server) to perform a Microsoft Entra ID on-behalf-of token exchange so an AI agent calls the ServiceNow REST API as the signed-in user; ServiceNow maps the preferred_username claim to a user and applies that user's permissions.
Limitations & uncertainty
Vendor guidance only; AWS GovCloud/FedRAMP availability of AgentCore not addressed; cross-cloud data flow must meet state data residency rules.
- Source
- ServiceNow Community (CEG AI CoE articles)
- Published
- 2026-11-03 (posted 'yesterday' relative to 2026-11-04 retrieval)
A few AI agent updates in the ServiceNow Brazil release
Brazil release notes add MCP server security controls (access rules, allowed tools), an Access Analyzer test for AI agent/workflow access, a redesigned AI Agent Studio with built-in automated evaluations, and deny-by-default access control for specified agentic AI record types on newly activated instances (previously allow).
Limitations & uncertainty
Secondary vendor summary; full release notes not inspected here; default change limited to newly activated instances.
What the ServiceNow Control Tower Alliance Actually Tells You About Enterprise AI Governance Architecture
Independent analysis of the 10/28 Control Tower Alliance. It credits centralized control planes and pretested integrations with closing observability gaps and shifting connector-maintenance cost away from buyers. It warns that routing discovery, observability and enforcement through one vendor creates a single point of failure. Systems outside the alliance get weaker governance support, and proprietary policy schemas raise exit costs. Pretested does not mean validated for a buyer's load, data classification or incident response. Before contracting, buyers should require exportable open-format policies, documented fail-closed or fail-open behavior, a governance-failure incident runbook, and defined data-residency and telemetry routing, plus SLAs that cover the governance layer specifically.
Limitations & uncertainty
A consultancy that sells governance stress-testing wrote this, so it has a commercial interest in raising the risks. The page shows only a 'Last updated' date (Nov 03, 2026); original publication may be earlier. The analysis is not based on testing the alliance integrations.
ServiceNow's ChatGPT Plugin Is Live; Security Follows
Independent analysis of the 10/28 ServiceNow-OpenAI expansion. Only one ServiceNow MCP plugin in ChatGPT is available now. Enhanced plugin features are expected by end of 2026, a voice interface in Q1 2027, OpenAI-powered security capabilities in early access in January with general availability in Q2 2027, and Codex in AI Workflow Factory sometime in 2027. The author calculates a 155-245 day wait to security GA and says this is a planning interval, not a commitment. Neither company disclosed pricing or contract value. The plugin runs through Action Fabric under existing ServiceNow permissions, but that does not prove a customer's roles, approvals and audit events are configured correctly. The article recommends a bounded pilot on one incident workflow and confirming which identity the plugin uses, whether approval rules still apply, and what the audit history records.
Limitations & uncertainty
Single-author analysis built from vendor releases; the day-count window is the author's calculation. No customer data. The October 28 announcement itself is not in the archive and was not separately opened for this edition.
Why ServiceNow Stock Plunged This Week
The Motley Fool reports the stock was down 31% for the week through the Oct. 29 close, citing S&P Global Market Intelligence, while the S&P 500 rose 1.3%. It says the market focused on the 18.5% Q4 cRPO growth guidance rather than management's AI metrics, such as an 8.5-fold increase in deals spanning five or more AI products. It frames the question as whether enterprise workflow platforms face long-term growth friction, notes a trailing P/E of 79, and suggests waiting for the January Q4 report for clarity.
Limitations & uncertainty
Investor-oriented commentary; the weekly decline overlaps the single-day drop already reported in the 10/29 edition. New material is the weekly figure, the attribution to cRPO guidance, and the bundling-durability framing.
What ServiceNow (NOW) Said on Its Q3 Earnings Call
Per the earnings-call summary, ServiceNow's CFO attributed the soft Q4 cRPO outlook (18.5% constant currency) partly to a higher mix of on-premises public-sector deals (a 25-basis-point cRPO headwind that still counts toward revenue), early Q3 renewals and T4C provisions. Management also said it is funding deployment expertise for select large deals; customers receiving it advanced AI adoption about twice as fast in the first five weeks. That support is booked as professional services, it reduced subscription growth by about 25 bps in Q3 (about 50 bps expected in Q4), and it is not meant to be permanent. Other figures: internal AI use is said to generate over $1B in annualized value, and productivity gains are reducing the need for some operational roles. The on-prem public-sector statement was cross-checked against the Motley Fool call transcript; the federal business, where deals over $1M grew more than 30%, is the only public-sector segment broken out.
Limitations & uncertainty
Secondary summary of vendor statements and not an independent evaluation. 'Public sector' is not split into federal and SLED; the twice-as-fast adoption figure covers only five weeks with no method given; the summary site is affiliated with MarketBeat and may be automated.
Citizens reiterates ServiceNow stock rating after mixed Q3 results
Independent reporting characterized Q3 as mixed: non-GAAP EPS of $1.00 missed the $1.02 consensus, revenue growth slowed to 20.5% from 24.0% the prior quarter, and gross margin of 77.3% missed the 78.9% consensus. Morgan Stanley cut its price target from $180 to $160 citing growth concerns while acknowledging AI momentum. The page's ticker showed NOW down 26.95%.
Limitations & uncertainty
Article states it was generated with AI support and reviewed by an editor; it reports analyst opinions, not independent product evaluation. Ticker data is volatile.
SDI Presence Modernizes Asset Management for the City of Chicago Office of Public Safety Administration
SDI Presence says it implemented ServiceNow Enterprise Asset Management for Chicago's Office of Public Safety Administration, centralizing nearly 60,000 assets and replacing spreadsheets and manual workflows, with chain-of-custody tracking for body-worn cameras, Tasers and radios supporting federal consent decree compliance. Benefits are 'anticipated', including 40% to 60% less audit labor. Predictive maintenance and analytics are described as future possibilities.
Limitations & uncertainty
Partner marketing; benefits are anticipated; no AI deployed per the release.
[Security Advisory] October 2026 CVE Advisory Notification (KB3228994)
On October 29, 2026 ServiceNow issued CVE-2026-103093 (critical: an admin-role user could bypass Rhino sandbox restrictions and execute code on the host OS), CVE-2026-103094 (high: plaintext passwords could persist in a system table) and CVE-2026-6877 (medium: domain separation bypass in the SR-CSM Task Plan Templates store app). ServiceNow says hosted instances were updated, it has no evidence of malicious exploitation, and lists remediated releases (e.g., Yokohama Patch 13 Hotfix 4a, Zurich Patch 10 Hotfix 3b, Australia Patch 5). Rapid7's database lists CVE-2026-103093 at CVSS 4.0 9.4, not in CISA KEV.
Limitations & uncertainty
Vendor-authored; exploitation status is the vendor's statement; the sandbox escape requires admin role, which limits but does not eliminate risk.
ServiceNow Reports Third Quarter 2026 Financial Results
ServiceNow reported Q3 2026 subscription revenue of $3,988M (21% YoY), raised its 2026 AI annual contract value target to $1.7B, and said year-to-date agentic AI consumption in production is up more than 13x. It announced a Control Tower Alliance (founding members include Anthropic, AWS, Cisco, NVIDIA, Okta, OpenAI), an AI Passport for verifying agent scopes, no-code agent building in EmployeeWorks, a ToolSmith developer environment, a standalone Flow service desk, and Autonomous Security. The release contains no SLED-specific customer outcomes.
Limitations & uncertainty
Vendor press release with forward-looking statements; metrics are not independently verified; no public-sector breakdown in the release itself (federal commentary reported elsewhere was not inspected from a primary transcript).
- Source
- County of Los Angeles Board of Supervisors
- Published
- 2026-10-14
Board Notification of Intent to Execute Work Order E2-275 for ServiceNow ITSM Implementation
LA County ISD notified its Board of intent to award a $1,990,000 work order to Accenture LLC to implement ServiceNow ITSM, ITOM (CSDM, CMDB, Discovery), Security Incident Response, Field Service Management, Employee Center and Performance Analytics, replacing a legacy ITSM platform that sunsets in December 2026. Six proposals were received; four met minimum requirements and were scored by an evaluation committee. Funding is pending Information Technology Investment Board approval. The notice does not mention AI.
Limitations & uncertainty
Procurement notice, not an evaluation of results; evidence class reflects a government publication documenting a competitive evaluation; AI is not in scope; funding not yet approved; two weeks of post-go-live support is short for a platform of this breadth (interpretation).
Raleigh, North Carolina, reduces IT service desk costs by 66% with ServiceNow AI agents
ServiceNow says Raleigh is the first municipal government with its IT Service Desk AI Specialist ('Alli') in production, alongside the 'Ral-E' AI agent. Reported outcomes: 66% lower IT service desk costs 'achieved by redirecting staff time', 98% of AI-generated incident summaries accepted as-is, nearly half of IT requests resolved autonomously (target 85%), 98% first-contact routing, 98% deflection for Ral-E, and 20+ automated workflows. A four-person help desk supports 4,400 employees; the city plans to connect the agents to the 'Ask Raleigh' resident portal.
Limitations & uncertainty
Vendor claim; '66% lower costs' reflects redirected staff time, not reported budget reduction; metrics unverified; Raleigh co-developed the product, so transferability to less mature tenants is uncertain. Independent GovTech reporting (already in the archive as raleigh-servicenow-alli-it-helpdesk-agent-20261008) adds council concerns about rogue agents, displacement and cost, and the CIO's view that governance tooling lags.
ITS Advisory 2026-102: Multiple Vulnerabilities in ServiceNow's AI Platform Could Allow for Unauthorized Access
NY ITS rated five ServiceNow AI Platform vulnerabilities (including unauthenticated improper access control, SQL injection and authorization bypass) as High risk for large and medium government entities and Medium for small ones, with no reported in-the-wild exploitation. It recommended applying vendor fixes after testing plus CIS safeguards: vulnerability management, monthly patching, least privilege, service-account inventory, penetration testing and network segmentation.
Limitations & uncertainty
Published September 25, 2026, before this edition's window; included because today's October 2026 batch (KB3228994) is the next ServiceNow AI Platform advisory and this is the most recent government risk rating found. Not an independent technical analysis.
Stream editions
Each edition carries its own synthesis and evidence ledger.
November 10, 20261 edition
November 9, 20261 edition
November 7, 20261 edition
November 6, 20261 edition
November 5, 20261 edition
November 4, 20261 edition
November 3, 20261 edition
November 2, 20261 edition