What happened
ServiceNow announced (reported Sept 4, 2026) an expansion of its Autonomous Security strategy spanning six areas — unified exposure management, continuous vulnerability detection, cyber-physical security, identity/access security, agentic incident response, and cyber risk/compliance — including a new Vulnerability Resolution AI Specialist that autonomously triages and patches low-risk findings.
Why it matters
Signals a major ITSM/GRC platform vendor consolidating fragmented security tooling into an agentic, autonomous-action model (detect→investigate→decide→act→document), competing directly with dedicated AI-SOC and exposure-management vendors.
Applicability
Enterprises already on ServiceNow's AI Control Tower should evaluate autonomy-level governance before enabling autonomous remediation actions.