Analysis
ServiceNow's roughly $7.75 billion acquisition of cybersecurity startup Armis, first reported in December 2025 and closing this year, has become a central data point in the recovery narrative around what Wall Street dubbed the "Saaspocalypse" -- the early-2026 fear that AI agents would make traditional enterprise software platforms obsolete, Fortune reported. ServiceNow's stock opened down 9% the Monday the deal first leaked to Bloomberg, and the broader selloff that followed dragged the stock down as much as 42% over the first four months of 2026 -- a steeper decline than Salesforce experienced over the same period.
Armis, co-founded by Yevgeny Dibrov and Nadir Izrael, builds a platform that monitors connected devices and flags security risks across IT, operational technology and medical-device environments. ServiceNow's pitch for the deal was to fold cybersecurity exposure management, IT asset management and industrial device monitoring into a single platform it now markets as an "AI Control Tower" -- a way to position ServiceNow's core workflow-automation platform as the control layer for AI agents operating across a company's technology stack, rather than a legacy system those agents might route around.
The turnaround
The narrative shift began in May 2026, when ServiceNow shares surged 41% -- the company's best stretch since its 2012 IPO -- as investors credited the completed Armis integration with giving ServiceNow a clearer AI-era value proposition. The stock added another 8% in late July after second-quarter earnings beat estimates, a rally that outpaced both Salesforce and Workday over the same window. For a stock that had fallen 42% just months earlier on fears its category was being disrupted, that recovery is a fairly direct market verdict that a well-integrated acquisition addressing a real AI-era gap can reverse a sentiment-driven selloff.
Notably, Armis's founding story sits inside a broader Israeli cybersecurity success pattern: Dibrov previously co-founded Adallom with Assaf Rappaport, who went on to found Wiz, the cloud security company Google acquired for $32 billion in 2025 -- the largest deal in cybersecurity history and a reference point for the kind of outcome Armis's backers were underwriting when they invested.
A single acquisition reversing a 42% stock decline is a strong result, but it doesn't resolve the underlying Saaspocalypse thesis -- that AI agents will eventually disintermediate seat-based enterprise software -- so much as it demonstrates ServiceNow found one credible answer to it in cybersecurity specifically. Whether that answer generalizes across ServiceNow's other product lines, or whether competitors without a comparable acquisition to point to remain more exposed to the same fear, is still an open question the market hasn't fully priced.
