ServiceNow today announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness. Specifically, AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at every point in a multi-agent workflow. ServiceNow also enables enterprises to discover what AI is running, control what AI agents do, and measure spend against outcomes with a broadened set of governance capabilities.
AI agents need more than a reasoning model to execute enterprise workflows securely. They need structure: which data or tools they can access, clear rules for what actions they’re allowed to do, and an auditable record of who authorized it. ServiceNow provides the operational foundation that helps enterprises make AI agents safe for production. AI Passport is a cryptographically signed credential that AI agents refer to at runtime, including environments such as NVIDIA OpenShell, to verify their authorized scope, grounded in enterprise business context for governed decisions. When an AI agent stays within its passport scope, it can operate freely. When it drifts, graduated responses can be enforced — redirecting, restricting, or reconnecting the AI agent with proper context — including kill switch capabilities at machine speed if termination is needed. ServiceNow’s Super Intelligence Control Tower keeps the full audit record behind actions, transforming AI agent execution into governed, auditable, and accountable work.
AI Passport: attested authority, enforceable at the edge
AI Passport is built on open specifications so that any governance product, identity provider, or enforcement point can issue and verify credentials for their own and third-party AI agents. Credentials are verifiable at every step in multi-agent workflows.
This represents a fundamental shift from reaction to prevention. Unlike audit trails, which show what happened after the fact, AI Passport helps prevent AI agents from acting outside their scope by authorizing what they can do at runtime. It brings ServiceNow’s ‘Shift Zero’ approach to life: secure by design, at inception. Each AI agent receives its own AI Passport, issued by the Super Intelligence Control Tower and grounded in the enterprise’s live business context through ServiceNow Configuration Management Database (CMDB), Governance, Risk, and Compliance (GRC) policies, and workflow approvals. For third-party AI agents especially, this creates a verifiable permissions record rather than relying on the AI agent’s own ‘claims’ about its permissions.
The approach to AI Passport enables precision revocation and scoped delegation that narrows at each step for third-party agent governance, along with audit trails that include full compliance signatures. ServiceNow is also announcing NVIDIA as a design and launch partner, building a production-ready enforcement implementation using the NVIDIA Open Agent Safety Platform, which features NVIDIA OpenShell open-source secure runtime software and the NVIDIA Sentry security framework.
AI Passport: attested authority, enforceable at the edge
AI Passport is built on open specifications so that any governance product, identity provider, or enforcement point can issue and verify credentials for their own and third-party AI agents. Credentials are verifiable at every step in multi-agent workflows.
This represents a fundamental shift from reaction to prevention. Unlike audit trails, which show what happened after the fact, AI Passport helps prevent AI agents from acting outside their scope by authorizing what they can do at runtime. It brings ServiceNow’s ‘Shift Zero’ approach to life: secure by design, at inception. Each AI agent receives its own AI Passport, issued by the Super Intelligence Control Tower and grounded in the enterprise’s live business context through ServiceNow Configuration Management Database (CMDB), Governance, Risk, and Compliance (GRC) policies, and workflow approvals. For third-party AI agents especially, this creates a verifiable permissions record rather than relying on the AI agent’s own ‘claims’ about its permissions.
The approach to AI Passport enables precision revocation and scoped delegation that narrows at each step for third-party agent governance, along with audit trails that include full compliance signatures. ServiceNow is also announcing NVIDIA as a design and launch partner, building a production-ready enforcement implementation using the NVIDIA Open Agent Safety Platform, which features NVIDIA OpenShell open-source secure runtime software and the NVIDIA Sentry security framework.
Unified discovery, visibility, and measurement
In addition to AI Passport, ServiceNow delivers end-to-end AI governance on one unified platform across discovery, visibility, control, measurement, and compliance. The new capabilities announced today build on ServiceNow’s autonomous remediation and kill switch capabilities that empower enterprises to act with speed.
The ServiceNow AI Platform runs on a single unified data model, which enables governance decisions to happen automatically across asset intelligence, identity security, and AI observability, eliminating manual handoffs between teams:
- Shadow AI detection that finds unapproved AI agents running in the network
- 400+ out-of-box connectors that will enable AI discovery across platforms and vendors
- Access mapping that grounds authorization decisions in actual entitlements
- Continuous enterprise AI observability that keeps track of AI agent traces and behavior
Beyond discovering what AI is running, enterprises need visibility into whether that AI is delivering value and operating within budget. ServiceNow is announcing:
- Cost governance that tracks user, department, and runtime spending
- Value intelligence that connects consumption, cost, quality, and realized user value so teams can optimize AI use, maintain budget commitments, and help prove business value
- AI Cost Management as part of IT Asset Management (ITAM), which will integrate with the Super Intelligence Control Tower to bring frontier model, embedded SaaS AI, hyperscaler, and data center GPU costs into a single view, alert teams to potential budget overruns, and ground spend in business context
- Policy enforcement that will manage alert-to-throttle-to-block graduated responses
AI control in highly regulated industries
For financial institutions, ungoverned assets and shadow AI multiply risk across compliance clocks. Regulators are shrinking incident notification windows far faster than manual, spreadsheet-driven programs can respond. ServiceNow’s 2026 Banking AI Maturity Index reveals that gap: while 100 percent of banks report using AI, only 24 percent have the governance to match it. Unmanaged service accounts, shadow AI agents, and unregistered devices remain exposed.
ServiceNow’s new Operational Resilience solution brings AI governance, risk, and security together in one place, with centralized data that helps financial institutions respond quickly. It gives CROs and CISOs the same real-time visibility and control. The Super Intelligence Control Tower senses ungoverned assets, identities, and AI agents across IT, OT, cloud, and third-party systems on one data model and unified platform. It is designed to treat a rogue AI agent like any other exposed asset: it finds it, flags it, and shuts it down, if needed. When an incident hits, banks can triage, contain, and revoke access inside the regulatory window, with auditable proof already in hand.
Availability
AI Passport, shadow AI detection, and AI Cost Management are expected to be available in Q4 2026. ServiceNow’s Operational Resilience solution for financial services is available today.
Attendees of NVIDIA GTC Berlin can also learn more about AI Passport, powered by the ServiceNow AI Platform and NVIDIA Open Agent Safety Platform, by joining session SB61172.
Related
This entry was posted on October 15, 2026 at 4:27 pm and is filed under Commentary with tags ServiceNow. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
ServiceNow advances its operational harness for enterprise AI with AI Passport and expanded governance capabilities
ServiceNow today announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness. Specifically, AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at every point in a multi-agent workflow. ServiceNow also enables enterprises to discover what AI is running, control what AI agents do, and measure spend against outcomes with a broadened set of governance capabilities.
AI agents need more than a reasoning model to execute enterprise workflows securely. They need structure: which data or tools they can access, clear rules for what actions they’re allowed to do, and an auditable record of who authorized it. ServiceNow provides the operational foundation that helps enterprises make AI agents safe for production. AI Passport is a cryptographically signed credential that AI agents refer to at runtime, including environments such as NVIDIA OpenShell, to verify their authorized scope, grounded in enterprise business context for governed decisions. When an AI agent stays within its passport scope, it can operate freely. When it drifts, graduated responses can be enforced — redirecting, restricting, or reconnecting the AI agent with proper context — including kill switch capabilities at machine speed if termination is needed. ServiceNow’s Super Intelligence Control Tower keeps the full audit record behind actions, transforming AI agent execution into governed, auditable, and accountable work.
AI Passport: attested authority, enforceable at the edge
AI Passport is built on open specifications so that any governance product, identity provider, or enforcement point can issue and verify credentials for their own and third-party AI agents. Credentials are verifiable at every step in multi-agent workflows.
This represents a fundamental shift from reaction to prevention. Unlike audit trails, which show what happened after the fact, AI Passport helps prevent AI agents from acting outside their scope by authorizing what they can do at runtime. It brings ServiceNow’s ‘Shift Zero’ approach to life: secure by design, at inception. Each AI agent receives its own AI Passport, issued by the Super Intelligence Control Tower and grounded in the enterprise’s live business context through ServiceNow Configuration Management Database (CMDB), Governance, Risk, and Compliance (GRC) policies, and workflow approvals. For third-party AI agents especially, this creates a verifiable permissions record rather than relying on the AI agent’s own ‘claims’ about its permissions.
The approach to AI Passport enables precision revocation and scoped delegation that narrows at each step for third-party agent governance, along with audit trails that include full compliance signatures. ServiceNow is also announcing NVIDIA as a design and launch partner, building a production-ready enforcement implementation using the NVIDIA Open Agent Safety Platform, which features NVIDIA OpenShell open-source secure runtime software and the NVIDIA Sentry security framework.
AI Passport: attested authority, enforceable at the edge
AI Passport is built on open specifications so that any governance product, identity provider, or enforcement point can issue and verify credentials for their own and third-party AI agents. Credentials are verifiable at every step in multi-agent workflows.
This represents a fundamental shift from reaction to prevention. Unlike audit trails, which show what happened after the fact, AI Passport helps prevent AI agents from acting outside their scope by authorizing what they can do at runtime. It brings ServiceNow’s ‘Shift Zero’ approach to life: secure by design, at inception. Each AI agent receives its own AI Passport, issued by the Super Intelligence Control Tower and grounded in the enterprise’s live business context through ServiceNow Configuration Management Database (CMDB), Governance, Risk, and Compliance (GRC) policies, and workflow approvals. For third-party AI agents especially, this creates a verifiable permissions record rather than relying on the AI agent’s own ‘claims’ about its permissions.
The approach to AI Passport enables precision revocation and scoped delegation that narrows at each step for third-party agent governance, along with audit trails that include full compliance signatures. ServiceNow is also announcing NVIDIA as a design and launch partner, building a production-ready enforcement implementation using the NVIDIA Open Agent Safety Platform, which features NVIDIA OpenShell open-source secure runtime software and the NVIDIA Sentry security framework.
Unified discovery, visibility, and measurement
In addition to AI Passport, ServiceNow delivers end-to-end AI governance on one unified platform across discovery, visibility, control, measurement, and compliance. The new capabilities announced today build on ServiceNow’s autonomous remediation and kill switch capabilities that empower enterprises to act with speed.
The ServiceNow AI Platform runs on a single unified data model, which enables governance decisions to happen automatically across asset intelligence, identity security, and AI observability, eliminating manual handoffs between teams:
Beyond discovering what AI is running, enterprises need visibility into whether that AI is delivering value and operating within budget. ServiceNow is announcing:
AI control in highly regulated industries
For financial institutions, ungoverned assets and shadow AI multiply risk across compliance clocks. Regulators are shrinking incident notification windows far faster than manual, spreadsheet-driven programs can respond. ServiceNow’s 2026 Banking AI Maturity Index reveals that gap: while 100 percent of banks report using AI, only 24 percent have the governance to match it. Unmanaged service accounts, shadow AI agents, and unregistered devices remain exposed.
ServiceNow’s new Operational Resilience solution brings AI governance, risk, and security together in one place, with centralized data that helps financial institutions respond quickly. It gives CROs and CISOs the same real-time visibility and control. The Super Intelligence Control Tower senses ungoverned assets, identities, and AI agents across IT, OT, cloud, and third-party systems on one data model and unified platform. It is designed to treat a rogue AI agent like any other exposed asset: it finds it, flags it, and shuts it down, if needed. When an incident hits, banks can triage, contain, and revoke access inside the regulatory window, with auditable proof already in hand.
Availability
AI Passport, shadow AI detection, and AI Cost Management are expected to be available in Q4 2026. ServiceNow’s Operational Resilience solution for financial services is available today.
Attendees of NVIDIA GTC Berlin can also learn more about AI Passport, powered by the ServiceNow AI Platform and NVIDIA Open Agent Safety Platform, by joining session SB61172.
Share this:
Like this:
Related
This entry was posted on October 15, 2026 at 4:27 pm and is filed under Commentary with tags ServiceNow. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.