The Armis Deal and Its Scale
In April 2026, ServiceNow paid $7.75 billion in cash for Armis, a platform that monitors every connected device on an enterprise network—medical equipment, industrial systems, and other internet-of-things devices—and flags those that pose a security risk. The transaction was the largest acquisition in ServiceNow's history and the second-biggest pure startup exit in Israeli tech on record, behind Google's $32 billion acquisition of Wiz in 2025. Armis co-founder Yevgeny Dibrov, 38, and co-founder Nadir Izrael split roughly $930 million between them. Dibrov became general manager of the newly formed Armis business unit inside ServiceNow, while Izrael took the role of group vice president of product and engineering, continuing to run the operation they had built a decade earlier, now attached to a company with an $180 billion market cap and thousands of enterprise customers.
Origins in Israeli Military Intelligence
The Armis founders' path to ServiceNow began inside Unit 81, an elite technology division of the Israeli Defense Forces that builds hardware and surveillance tools. In 2007, Assaf Rappaport, then 24, served as commanding officer for the 19-year-old Dibrov. "He would come in the morning with TheMarker, basically Israel's Wall Street Journal, and we had terrific discussions and fighting about things unrelated to intelligence and computer science and cyber, but talking about business," Rappaport said of Dibrov. Rappaport himself later topped Israeli tech exit rankings with Google's $32 billion acquisition of Wiz, a cloud cybersecurity company, in 2025.
The 'SaaSpocalypse' Sell-Off and Market Reversal
When news of the Armis deal first leaked to Bloomberg in mid-December, ServiceNow's stock opened down 9% that Monday. The reaction reflected a then-emerging concern gripping software investors: that AI agents would make traditional enterprise software obsolete. By spring, Wall Street had coined the term "SaaSpocalypse," and ServiceNow shares fell as much as 42% in the first four months of 2026, a steeper drop than Salesforce over the same stretch. The narrative reversed in May, when ServiceNow shares surged 41% in their best performance of the year, followed by an additional 8% gain in late July. The rally followed a Q2 earnings beat in which revenue rose 24% to $3.99 billion and AI products crossed $1 billion in annual contract value.
Management's Counter-Narrative
ServiceNow chief product officer Amit Zavery rejected the SaaS doomsday premise. "We did not really believe in this SaaS apocalypse," he told Fortune, noting that the company was hitting or beating its own financial targets every quarter through the scare. Zavery framed the Armis deal as an offensive move, not a defensive one. The acquisition allowed ServiceNow to fold cybersecurity, IT asset management, and industrial device monitoring into a single platform. "That's where our thinking was, and that's how we're seeing the traction play out very well. Our thesis was accurate, as you can see," he said. Management has since pointed to improved security traction after combining Armis with Veza inside its Autonomous Security and Risk unit.
What Remains Uncertain
ServiceNow has not disclosed specific security attach rates or the share of average contract value attributable to Armis capabilities since the April close. Near-term performance is expected to hinge on incremental monetization metrics, including current remaining performance obligations (cRPO) and security annual contract value in upcoming quarters. Integration risk also remains a live variable; if the next two earnings prints do not show incremental monetization, market sentiment could shift quickly, according to sell-side commentary. The next verifiable milestone is ServiceNow's next quarterly earnings release, which will be the first to reflect a full quarter of consolidated Armis results.
Share this article
