In partnership with

👋 Hi, it’s Rohit Malhotra and welcome to the FREE edition of Partner Growth Newsletter, my weekly newsletter doing deep dives into the fastest-growing startups and S1 briefs. Subscribe to join readers who get Partner Growth delivered to their inbox every Wednesday morning.

Latest posts

If you’re new, not yet a subscriber, or just plain missed it, here are some of our recent editions.

Partners

Reply to everything. Edit nothing.

Your inbox is full. Slack is piling up. Client messages need a response yesterday. Typing thoughtful replies to all of it takes hours you don't have.

Wispr Flow turns your voice into clean, professional text you can send the moment you stop talking. Speak like you would to a colleague — tangents and all — and get polished output. Emails, Slack, LinkedIn, WhatsApp, whatever's open.

89% of messages sent with zero edits. Used by teams at OpenAI, Vercel, and Clay. Works on Mac, Windows, and iPhone.

Interested in sponsoring these emails? See our partnership options here.

Subscribe to the Life Self Mastery podcast, which guides you on getting funding and allowing your business to grow rocketship. 

Previous guests include Guy Kawasaki, Brad Feld, James Clear, Nick Huber, Shu Nyatta and 350+ incredible guests.

ServiceNow acquisition spree

Introduction

ServiceNow's acquisition spree is not about AI capabilities. It is a structural move from a company that watched Wall Street start pricing workflow software as a casualty of the agent era, and decided the fastest path out of that bucket was buying its way to becoming the layer the agents have to run on.

On the surface: the world's largest workflow software company stitching together cybersecurity, identity, observability, analytics, conversation, and CPQ in under six months. A capability spree. A platform expansion. The kind of run that gets filed under "McDermott being McDermott" and forgotten by the next earnings call.

Look closer, and the logic gets sharper.

ServiceNow stock fell from $211 last summer to $98 in February. A 53 percent drawdown despite Q4 revenue growing 21 percent to $3.57 billion and full-year revenue hitting $13.3 billion. The market was not punishing performance. It was repricing the category. The thesis on the sell side: once agents can execute a process end to end, the orchestration layer compresses to zero.

Salesforce was already telling a different story. Agentforce at $540 million in ARR and Informatica plugged in as the data backbone. Microsoft was telling it from the Copilot Studio side. Both companies had a clean narrative for the agent era. ServiceNow had a workflow product and a stock chart that looked like the market believed the bear thesis.

So instead of waiting for the agent layer to commoditize ITSM, McDermott wrote checks. Moveworks closed in December for $3 billion. Armis closed April 21 for $7.75 billion, six months ahead of schedule. Veza closed March 2 for around $1 billion. Pyramid Analytics, Traceloop, and Logik.AI filled in analytics, LLM observability, and CPQ.

Every deal slots into the AI Control Tower. Discovery, identity, observability, analytics, conversation, commerce. Not point products. Building blocks for the layer that sits above the agents and decides what they can see, do, and touch.

Six acquisitions in six months is not a roadmap. It is a race against a repricing.

Setup

ServiceNow was running two clocks at once. While its sales org was closing a record Q4 - $3.57 billion in revenue, 21% growth, every guidance number beat - the stock was getting cut in half. From $211 in July to $98 in February. A 53% drawdown into a year of clean execution. Wall Street was not pricing the business. It was pricing the category.

The repricing was not a panic. It was a thesis. The sell-side argument went like this: ITSM is workflow orchestration. Workflow orchestration is what AI agents replace first. Once Anthropic's Claude and OpenAI's GPT can execute a multi-step process inside Slack or Teams, the layer ServiceNow charges for collapses to a feature. Bear analysts at Guggenheim and KeyBanc had already published variants of this thesis by January. Each one cited Microsoft's Copilot Studio shipping inside Dynamics 365 and Salesforce's Agentforce hitting $540 million in ARR by Q3.

McDermott was not losing on execution. He was losing on narrative. Salesforce had Agentforce. Microsoft had Copilot. ServiceNow had a workflow story written in 2019. Against that backdrop, six acquisitions in six months was not a spree. It was a refusal to let the market finish the repricing without him.

The strategy

McDermott's frame is not "buy AI capabilities." It is "own the layer the agents have to run on."

ServiceNow calls it the AI Control Tower. Strip the marketing and it is a governance plane. The thing that decides what every agent in an enterprise can see, what data it can touch, what actions it can take, and what gets logged when it does. Not the agent. Not the model. The layer above both.

The bet is that enterprises will not let 50 different AI agents from 50 different vendors run loose inside their environment without a single pane to govern the lot. CIOs already running 106 SaaS apps are not adding 50 agents on top without a control layer. McDermott is building that layer before Salesforce, Microsoft, or a startup defines it first.

This reframes every acquisition. Armis is not a cybersecurity buy. It is the asset discovery feed that tells the Control Tower what exists. Veza is not identity software. It is the permissions graph. Moveworks is not a chatbot. It is the conversational surface. Pyramid is the analytics. Traceloop is the observability. Logik is commerce.

Six products. One control plane. Sold as inevitability.

The six deals as one stack

Read top to bottom and the spree stops looking like a shopping list.

Layer

Acquisition

Closed

Price

What it does

Asset discovery

Armis

Apr 21, 2026

$7.75B

Sees every device, OT system, and IoT asset on the network

Identity

Veza

Mar 2, 2026

~$1B

Maps who and what can access what, across human, machine, and AI identities

Conversation

Moveworks

Dec 2025

$3B

The natural-language surface employees actually talk to

Analytics

Pyramid Analytics

Feb 2026

Undisclosed

Conversational queries against connected data

Observability

Traceloop

Mar 2026

$60–80M

LLM evaluation and failure detection, built on OpenLLMetry

Commerce

Apr 2026

Undisclosed

CPQ engine for AI-powered selling

Total disclosed spend: approximately $11.8 billion. Six deals in roughly six months.

Stack them in order and the architecture becomes obvious. Armis tells the Control Tower what exists in the environment. Veza tells it who and what can touch each asset. Moveworks is the interface employees use to ask the agents to do something. Pyramid lets the agents query the underlying data conversationally. Traceloop watches every agent action and flags when one breaks. Logik handles the commercial transaction layer where agents quote, configure, and close.

Every layer is a wall the Control Tower needs to be defensible. Skip identity and CISOs block the rollout. Skip observability and procurement blocks it. Skip the conversation layer and end users never adopt it. Skip analytics and the agents are blind. McDermott did not buy six companies. He bought six veto points and removed each one from the deployment friction.

Two of the six (Moveworks, Armis) were on IPO tracks. ServiceNow paid the IPO premium to take both off the market. That is not opportunism. That is denying the same building blocks to Salesforce and Microsoft.

The trade

ServiceNow traded $11.8 billion in cash and stock for the right to define the governance layer before Salesforce or Microsoft did. The math underneath: roughly 18% of FY26 guided revenue committed in six months to acquisitions that, on a standalone basis, generate under $500 million in combined ARR. The premium is not for the revenue. It is for the position. Every dollar above standalone value is McDermott buying speed. Building Armis-equivalent asset discovery in-house takes five years and still leaves you without the install base. Building Moveworks-equivalent conversational AI takes three years and still leaves you behind a category that already shipped.

The sellers traded independence for certainty in a market that had stopped offering it. Armis was tracking toward a 2026-2027 IPO. Moveworks was on a similar path. Both walked into 2026 watching CoreWeave's March IPO stall after the April tariff announcement, Kraken pause its filing, and the late-stage AI funding environment compress around anything not named Cerebras or Anthropic. A $7.75B strategic exit at 25x ARR beat a 2027 IPO at uncertain multiples and a public market that just repriced ServiceNow itself by 53%.

The smaller deals tell the same story in miniature. Traceloop sold for $60-80 million on $6.1 million raised. The investors got a 10x-plus exit on a three-year-old company. The founders got distribution into every ServiceNow customer. Pyramid's investors, who had committed $250 million across multiple rounds, got liquidity on a deck that has been pitched since 2009.

The bear case on the trade is timing, not thesis. If Anthropic ships native enterprise governance with Claude in Q3 2026, or OpenAI's enterprise tier adds asset discovery and identity controls before ServiceNow finishes integrating six products, the Control Tower becomes a layer enterprises route around. The integration window is twelve to eighteen months. The competitive window is shorter than that.

The defeater is structural. Governance built by the model labs has a conflict of interest the labs cannot engineer around. The thing being governed cannot credibly be the governor. CIOs running multi-vendor agent strategies, which is most of them, will not centralize policy enforcement inside Anthropic or OpenAI when the same CIO is also evaluating Gemini and Llama. The neutral governance layer is the one that survives. ServiceNow is buying neutrality the labs cannot sell.

Who loses

Salesforce loses the cleanest. Agentforce was supposed to be the agent platform enterprises standardized on, with Informatica plugged in as the data backbone. ServiceNow now competes one layer up, at governance, with native identity (Veza), native asset discovery (Armis), and native observability (Traceloop) that Agentforce does not have. Benioff's $50 billion buyback and raised $63 billion FY30 target signal he understands the threat. He is defending the install base before the renewal cycle gets contested.

Palo Alto and CyberArk lose a flank they did not expect. Identity security was their category. Veza inside ServiceNow turns identity governance into a feature of the workflow platform, sold to the same CIOs already running ServiceNow for ITSM. Palo Alto's $24.5 billion CyberArk deal was sized to own this category. ServiceNow just made it a checkbox.

Microsoft loses the narrative purity. Copilot Studio is the agent builder. ServiceNow is the agent governor. Two different layers, but to the CIO running an agent rollout, the question becomes "do we govern through Microsoft or ServiceNow," and Microsoft does not have an answer that is not Purview-shaped.

Every loser still has revenue. None of them have the same story they had in January.

Bigger signal

The bigger signal is not about ServiceNow. It is about what category leaders do when the market starts pricing in their disruption.

Three forces converged in Q1 2026. CIOs are cutting vendors fast, with 68% planning consolidation and the average enterprise already down from 130 SaaS apps to 106. Private equity is sitting on $3.7 trillion in dry powder and racing deployment deadlines. The IPO window closed for late-stage AI companies that are not Cerebras-scale, after CoreWeave stalled in March and tariffs froze activity in April. Every late-stage company facing a 2026-2027 IPO is now choosing between a strategic exit and an uncertain public market.

This is the consolidator's window. The companies who can credibly say "we are the platform" before the CIO finishes the audit get to define the next decade. Salesforce is doing it through Informatica and Agentforce. Microsoft is doing it through Copilot Studio and the Azure stack. ServiceNow just did it in six months with $11.8 billion.

The middle tier of SaaS, the $50 million to $500 million ARR companies that are not category-defining, are not the consolidators. They are the consolidation targets. Cursor sold. Moveworks sold. Armis sold. The next twelve months will name the rest.

Closing thoughts

McDermott is not buying capabilities. He is buying time, narrative, and shelf space before the market finishes the repricing. The bet works if the AI Control Tower becomes the governance layer enterprises actually adopt. It fails if agents flatten the stack faster than ServiceNow can integrate six acquisitions into one product.

For founders sitting at $100-500M ARR, the consolidation wave forces a real choice.

Sell now if you are in a category that just got compressed. Gong is the example. Conversation intelligence is now competing with Moveworks inside ServiceNow, Einstein inside Salesforce, and Copilot inside Microsoft. The independence path narrowed in six months.

Build to be acquired if you sit in a layer the consolidators need but do not have. Glean is the example. Enterprise search bridges the gap between analytics and the conversational surface. Every Control Tower needs one. None of them have built it.

Hold if your category has a data moat the consolidators cannot follow. Ramp is the example. Finance operations are too vertical for ServiceNow's horizontal play. The workflow specificity is the defense.

The middle path, staying independent through 2027 in a horizontal category, is the option that just closed.

Here is my interview with Charlie O'Donnell who founded Brooklyn Bridge Ventures, backing 105 startups including Hungryroot and Brigit. He wrote the #1 bestseller Founder Unfriendly, what Investors Won't Tell You About Getting Funded

If you enjoyed our analysis, we’d very much appreciate you sharing with a friend.

Tweets of the week

Here are the options I have for us to work together. If any of them are interesting to you - hit me up!

And that’s it from me. See you next week.

What do you think about my bi-weekly Newsletter? Love it | Okay-ish | Stop it

Reply

Avatar

or to participate

Keep Reading