ServiceNow's security and risk business has quietly surpassed $1 billion in annual contract value, outpacing rivals as software giants scramble to offset AI-driven budget shifts and market volatility
ServiceNow delivered second-quarter results that exceeded Wall Street's expectations for revenue, margins, and bookings, even as investors braced for more fallout from the so-called "SaaSpocalypse." The term, popularized after IBM and Pegasystems both blamed shifting artificial intelligence spending for disappointing software results, captured fears that enterprise software growth was stalling across the board. IBM shares plunged 25% after warning that clients were prioritizing AI infrastructure over traditional software, while Pegasystems dropped more than 16% after missing revenue targets and citing unprecedented disruption from AI competition.
Against this backdrop, ServiceNow avoided the fate of its peers. The company reported $3.9 billion in subscription revenue for the quarter, a 24.5% increase from the prior year. Shares jumped 5.5% in premarket trading as investors digested news that ServiceNow's artificial intelligence contract value had crossed the $1 billion mark. But beneath the AI headlines, a different billion-dollar milestone is quietly reshaping the company's future: ServiceNow's security and risk business has organically surpassed $1 billion in annual contract value, making it the fastest-growing among the top 10 enterprise cybersecurity providers.
Cybersecurity Surges Past AI Hype
While much of the market's attention has focused on ServiceNow's AI initiatives, the company's security and risk division has quietly become a core growth engine. This business, which provides cybersecurity and compliance tools integrated into ServiceNow's workflow platform, reached the $1 billion annual contract value threshold in the third quarter of 2025-before the company's two largest acquisitions further expanded its reach. In December, ServiceNow paid $7.75 billion in cash for Armis, a cyber exposure firm, closing the deal in April. Just weeks earlier, it agreed to acquire identity security company Veza for roughly $1 billion. These deals are expected to more than triple ServiceNow's addressable market in security and risk, positioning the company to compete directly with established cybersecurity giants.
This aggressive expansion mirrors a broader trend among software companies. As AI infrastructure spending absorbs a larger share of corporate technology budgets, firms like Alphabet and Palo Alto Networks have made multibillion-dollar acquisitions in cloud and identity security to maintain growth. For ServiceNow, cybersecurity is emerging as a category where demand remains resilient, even as core software subscriptions face new headwinds.
Security Risks and Market Realities
Yet, ServiceNow's rapid push into cybersecurity comes with its own challenges. Just nine days before its earnings call, the company disclosed a critical vulnerability in its AI Platform-tracked as CVE-2026-6875-that allowed unauthenticated attackers to execute code without credentials. Security researchers confirmed active exploitation beginning July 17, though ServiceNow reported no evidence that attacks reached its hosted customer instances. The timing highlights a central tension: ServiceNow is asking enterprise clients to trust its security solutions while simultaneously patching urgent flaws in its own platform.
Neither CEO Bill McDermott nor analysts addressed the vulnerability during the earnings call, leaving some investors to weigh the risks of relying on a vendor that is both a security provider and a potential target. This dynamic is not unique to ServiceNow; as more software companies pivot toward cybersecurity, they must also demonstrate that their own infrastructure can withstand the same threats they promise to defend against.
Strategic Shifts in Enterprise Software
ServiceNow's results offer a preview of how mature software companies are adapting to the reallocation of corporate budgets toward AI infrastructure. Rather than competing directly for AI dollars, many are acquiring their way into categories like cybersecurity, where spending is projected to grow more than 12% in 2026 to roughly $240 billion, according to industry estimates. This strategy depends on successful integration of acquired businesses and the ability to outpace the disruption that has hit legacy software providers.
For investors, the shift raises new questions about how to evaluate enterprise software stocks. The focus is moving from how quickly a company can adopt AI to how effectively it can buy its way into markets that AI cannot easily replace. As recent coverage of IBM's stock plunge shows, the stakes are high for companies that fail to adapt to changing technology priorities.
ServiceNow's performance this quarter suggests that cybersecurity may offer a more durable growth path than AI alone. But the company's ability to maintain momentum will depend on integrating its new acquisitions, managing security risks, and convincing customers that it can deliver both innovation and reliability in a rapidly evolving market.
In the second quarter of 2026, ServiceNow reported $3.9 billion in subscription revenue, up 24.5% year-over-year, and confirmed that its security and risk business had surpassed $1 billion in annual contract value. The company's $7.75 billion acquisition of Armis and $1 billion deal for Veza are expected to significantly expand its presence in the cybersecurity sector, at a time when global information security spending is forecast to reach $240 billion in 2026.
Cybersecurity has become a central pillar of enterprise technology strategy as organizations face increasingly complex threats and regulatory requirements. Unlike traditional software categories, security spending tends to remain resilient even during periods of economic uncertainty, as companies cannot afford to neglect risk management. For investors, understanding the difference between core software growth and the expansion of security offerings is critical when evaluating the long-term prospects of firms like ServiceNow. The ability to integrate acquisitions, address vulnerabilities, and deliver measurable value will likely determine which companies emerge as leaders in the next phase of enterprise technology.
