ServiceNow has introduced AI Passport, a new solution designed to verify and enforce the permissions of first- and third-party AI agents in real time. Alongside expanded capabilities within its Super Intelligence Control Tower, the company aims to help organisations discover and govern AI agents, strengthen security and accountability and measure the costs and business value of enterprise AI deployments.
ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration and comprehensive oversight, all inside ServiceNow’s operational AI harness.
AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorised to do at every point in a multi-agent workflow. ServiceNow also enables enterprises to discover what AI is running, control what AI agents do and measure spend against outcomes with a broadened set of governance capabilities.
AI agents need more than a reasoning model to execute enterprise workflows securely. They need structure: which data or tools they can access, clear rules for what actions they’re allowed to do and an auditable record of who authorised it. ServiceNow provides the operational foundation that helps enterprises make AI agents safe for production.
AI Passport is a cryptographically signed credential that AI agents refer to at runtime, including environments such as NVIDIA OpenShell, to verify their authorised scope, grounded in enterprise business context for governed decisions. When an AI agent stays within its passport scope, it can operate freely. When it drifts, graduated responses can be enforced – redirecting, restricting or reconnecting the AI agent with proper context – including kill switch capabilities at machine speed if termination is needed.
ServiceNow’s Super Intelligence Control Tower keeps the full audit record behind actions, transforming AI agent execution into governed, auditable and accountable work.
Jon Sigler, Executive Vice President and General Manager, AI Platform at ServiceNow, said: “As AI agents proliferate across the enterprise, visibility alone isn’t enough. Enterprises need confidence that every AI agent is operating within its authorised scope. ServiceNow closes that gap with an operational harness across AI Passport and new capabilities that unify agent authority, governance and operational oversight so enterprises can scale Agentic AI with control.”
AI Passport: Attested authority, enforceable at the edge
AI Passport is built on open specifications so that any governance product, identity provider or enforcement point can issue and verify credentials for their own and third-party AI agents. Credentials are verifiable at every step in multi-agent workflows.
This represents a fundamental shift from reaction to prevention. Unlike audit trails, which show what happened after the fact, AI Passport helps prevent AI agents from acting outside their scope by authorising what they can do at runtime.
It brings ServiceNow’s ‘Shift Zero’ approach to life: secure by design, at inception. Each AI agent receives its own AI Passport, issued by the Super Intelligence Control Tower and grounded in the enterprise’s live business context through ServiceNow Configuration Management Database (CMDB), Governance, Risk and Compliance (GRC) policies and workflow approvals.
For third-party AI agents especially, this creates a verifiable permissions record rather than relying on the AI agent’s own ‘claims’ about its permissions.
The approach to AI Passport enables precision revocation and scoped delegation that narrows at each step for third-party agent governance, along with audit trails that include full compliance signatures.
ServiceNow is also announcing NVIDIA as a design and launch partner, building a production-ready enforcement implementation using the NVIDIA Open Agent Safety Platform, which features NVIDIA OpenShell open-source secure runtime software and the NVIDIA Sentry security framework.
Itay Ozery, Director of Product Marketing for Networking and Cybersecurity at NVIDIA, said: “As enterprises shift from experimenting with agents to running them in production, securing those agents demands enforcement at the infrastructure layer. By implementing AI Passport with the NVIDIA Open Agent Safety Platform, ServiceNow customers can continuously verify and enforce what every agent is authorised to do – at machine speed and at runtime.”
Unified discovery, visibility and measurement
In addition to AI Passport, ServiceNow delivers end-to-end AI governance on one unified platform across discovery, visibility, control, measurement and compliance. The new capabilities build on ServiceNow’s autonomous remediation and kill switch capabilities that empower enterprises to act with speed.
The ServiceNow AI Platform runs on a single unified data model, which enables governance decisions to happen automatically across asset intelligence, identity security and AI observability, eliminating manual handoffs between teams.
These capabilities include:
- Shadow AI detection that finds unapproved AI agents running in the network.
- 400+ out-of-box connectors that will enable AI discovery across platforms and vendors.
- Access mapping that grounds authorisation decisions in actual entitlements.
- Continuous enterprise AI observability that keeps track of AI agent traces and behaviour.
Beyond discovering what AI is running, enterprises need visibility into whether that AI is delivering value and operating within budget.
ServiceNow is announcing:
- Cost governance that tracks user, department and runtime spending.
- Value intelligence that connects consumption, cost, quality and realised user value so teams can optimise AI use, maintain budget commitments and help prove business value.
- AI Cost Management as part of IT Asset Management (ITAM), which will integrate with the Super Intelligence Control Tower to bring frontier model, embedded SaaS AI, hyperscaler and data centre GPU costs into a single view, alert teams to potential budget overruns and ground spend in business context.
- Policy enforcement that will manage alert-to-throttle-to-block graduated responses.
AI control in highly regulated industries
For financial institutions, ungoverned assets and shadow AI multiply risk across compliance clocks. Regulators are shrinking incident notification windows far faster than manual, spreadsheet-driven programmes can respond.
ServiceNow’s 2026 Banking AI Maturity Index reveals that gap: while 100% of banks report using AI, only 24% have the governance to match it. Unmanaged service accounts, shadow AI agents and unregistered devices remain exposed.
ServiceNow’s new Operational Resilience solution brings AI governance, risk and security together in one place, with centralised data that helps financial institutions respond quickly. It gives CROs and CISOs the same real-time visibility and control.
The Super Intelligence Control Tower senses ungoverned assets, identities and AI agents across IT, OT, cloud and third-party systems on one data model and unified platform. It is designed to treat a rogue AI agent like any other exposed asset: it finds it, flags it and shuts it down, if needed.
When an incident hits, banks can triage, contain and revoke access inside the regulatory window, with auditable proof already in hand.
What customers are saying
LTM Limited
Chandan Pani, Chief Information Security Officer at LTM, said: “As we accelerate LTM’s growth as an AI-led enterprise, we have deployed 1,500 AI agents across the organisation, each assigned an employee ID and manager to ensure accountability, oversight and continuous improvement.
“ServiceNow’s control tower provides a single system of record for these AI agents, giving us centralised visibility into inventory, risk and compliance. By streamlining AI asset management and strengthening governance, we expect to improve operational efficiency significantly. These capabilities will be foundational to scaling AI responsibly across LTM, enabling stronger governance, enhanced risk oversight and greater business value from our AI investments.”
