At ServiceNow Knowledge 2026, the story was bigger than product launches or AI theater. What emerged in Las Vegas was a clearer picture of ServiceNow’s ambition: to become the autonomous operating layer for the enterprise, where context fuels intelligence and AI agents drive action. From security and CRM to portfolio management and the digital workplace, the company’s message was unmistakable: the future belongs to platforms that don’t just inform decisions, but make work move. But what do we think?

Ongoing Context-graph Expansion

Charles Betz, VP/Principal Analyst

Two years ago, we observed that the IT management market was consolidating around two platform players amid a broad field of best‑of‑breed solutions: ServiceNow and Atlassian. Both held their flagship conferences last week.

ServiceNow began in IT service management, expanded into enterprise service management, and has continued to broaden its footprint. Last time I counted, ServiceNow appeared in 18 distinct Forrester Waves, with leadership positions in many of them. While acquisitions have played a role, the pattern has not been portfolio assembly a la the CAs and HPs of old. ServiceNow has generally used acquisitions as sources of talent and IP, redeveloping functionality on the Now platform rather than adopting a diverse array of tech stacks. From an architectural perspective, that distinction matters.

This year’s event centered on context, as represented by the ServiceNow Service Graph. Interest in knowledge graphs, semantics, and ontology is not new, but generative AI has raised the practical stakes. Agents require data that is not only available but well‑defined, semantically grounded, and defensible. Many Forrester clients are encountering this constraint directly as they move from experimentation to production.

ServiceNow’s acquisition of data.world reflects this shift, as do its broader investments in enterprise architecture. The company reports that its EA product is exceeding expectations and functioning as a strategic asset rather than a niche tool. This year, ServiceNow also emphasized a combined EA and strategic portfolio management approach. Similar arguments surfaced at last fall’s TBM Council, where speakers repeatedly called for closer alignment between IT finance, architecture, and portfolio management. In practice, this brings technological constraints and risks into decision-making earlier, rather than treating them as downstream concerns. For organizations struggling to surface technical debt at the executive level, this is a meaningful change.

ServiceNow’s data estate continues to grow, most recently through the acquisitions of Armis and Veza. Despite recent market headwinds, the platform’s accumulated context—billions of workflow executions, hundreds of millions of configuration items, and decades of operational history—creates real inertia. The most credible long‑term risk is not replacement by a vibe‑coded alternative, but large frontier model providers acquiring SaaS companies to gain durable, permissioned access to that context.

ServiceNow Lights Up Vegas And Reinvents The Revenue Engine With CPQ AI Agents

Vicki Brown, VP Principal Analyst

Organizations increasingly recognize that sales performance slows at the point of the quote. When CPQ processes grow complex, sales teams lose momentum, and complexity becomes the bottleneck. The real opportunity is to reposition CPQ as an AI‑agent‑driven front door to revenue that absorbs complexity, clarifies decisions, and accelerates execution before deals stall. At Knowledge 2026 in Las Vegas, ServiceNow demonstrated how AI agents now manage the journey from meeting to quote by automating configuration, pricing, approvals, and quote creation. By placing AI‑powered CPQ at the center of the revenue engine, ServiceNow connects systems, speeds decisions, and moves value seamlessly from intent to execution. Under the bright lights of Vegas, the message was clear: let AI agents run the process so humans can run the relationship.

ServiceNow Doubles Down On CRM For Autonomous Customer Operations

Kate Leggett, VP Principal Analyst

At Knowledge 2026, ServiceNow renamed their Sales and Order Management product to Sales CRM and their Customer Service Management product to Service CRM, and positioned their suite as a system that autonomously executes work end-to-end rather than just serving as a record of customer engagement. They introduced AI specialists, or what Forrester calls “Worker Agents,” which can derive intent, orchestrate across workflows, and deliver outcomes across CRM operations and be governed centrally via the AI Control Tower. For example, AI specialists for Service provide autonomous case management, including triggering field or back-office work – especially important in key focus industries such as telco and financial services. AI specialists for Sales qualify leads, advance opportunities, configure quotes, manage order fulfillment, and process invoice disputes, only escalating to the front office when it encounters a true exception. In addition, ServiceNow showcased how Logik.ai’s AI‑powered CPQ is now natively embedded into Sales CRM, where AI agents now automate configuration, pricing, approvals, and quote creation – and highlighted its traction in key industries.

Trust The Architecture, Not The Timeline

Julie Mohr, Principal Analyst

ServiceNow drew a sharp line at Knowledge 2026 between agents and specialists. Agents complete tasks. Specialists hold jobs. A specialist gets a name, a manager, a domain, performance metrics, and accountability for outcomes the way a human teammate does. The architecture beneath the distinction is what gives it weight. Probabilistic reasoning meets deterministic workflow execution, and the 20 years of business rules, SLAs, and audit trails that ServiceNow has accumulated mean a specialist’s recommendation becomes a governed action with built-in traceability. The distinction collapses at the management layer. Assigning a specialist to a functional team and managing it like another L1 analyst is command-and-control thinking dressed in new clothes, and it wastes what memory and cross-domain skills make possible: a specialist in incident management collaborating with one in asset management and one in financial planning to resolve a problem none of the three functional teams could solve alone. Workforce decisions will run ahead of any thoughtful redeployment narrative, and ServiceNow’s “redeploy savings to higher-value work” answer was the right line for a keynote and the wrong line for a CIO planning next year’s headcount.

Knowledge management received less stage time at Knowledge 2026 than any major domain, and the absence is the analysis. ServiceNow has stopped treating knowledge management as a product category and now treats it as a substrate that feeds specialists and the conversational front door. The article is no longer the deliverable. The answered question is. EmployeeWorks federates retrieval-augmented generation across hundreds of systems and resolves intent before a user ever sees an article, which is forcing a long-overdue shift from activity metrics like article views, attachments, and deflection rates to outcome metrics like search success and question resolution. Curation belongs to agents now. The harder question is whether any knowledge management system can hold organizational memory the way an LLM holds individual memory. ServiceNow’s answer lives in the interaction layer, not the knowledge layer, leaving every CKO to decide where the institutional brain resides.

ServiceNow Is Committed To Its Security Business

Erik Nost, Senior Analyst

Security was on high display as a core tenet throughout the conference, making up one of four of their agentic platform’s primary use cases: sense, decide, act, and secure. CEO Bill McDermott believes security will make up a lot of their business in the future, which is already contributing over one billion of their revenues.

ServiceNow’s strategic bets on recent acquisitions, Armis and Veza, were showcased, but given that the acquisitions just closed, ServiceNow left with a less grounded security story vs. others presented, like sense, decide, and act. There is a lot they are still figuring out. They present compelling cases: by combining their various graphs (e.g., knowledge, access) and leveraging their context engine, they would fill in missing pieces of proactive security programs, providing more visibility for better prioritization, and using agents to steer security teams through a more autonomous remediation cycle. However, Armis and Veza are still sold as stand-alone options, and integrations are ongoing (some have been completed, including Armis’s threat intelligence into ServiceNow’s Proactive Security Platform). Eventually, Veza would provide value by integrating its access into ServiceNow’s user graph, and Armis could provide context from its cyber asset graph (especially discovery of IT, IoT, and OT devices) into other graphs. Many of Armis’s capabilities highlighted were emphasized across OT, IoT, and MIoT. Armis still has competing products from ServiceNow (Armis Centrix and ServiceNow Unified Security Exposure Management; Vulnerability Management; Operational Technology), so details on licensing and how/if these will integrate further were not fleshed out by the time Knowledge kicked off.

ServiceNow Is Turning The Digital Workplace Into An Autonomous Operating Layer

Christy Punch, Principal Analyst

ServiceNow Knowledge 2026 underscored a clear shift: DEX management is no longer a standalone discipline, but a critical element of a broader operational fabric. While there were incremental DEX updates, the larger story is ServiceNow’s “we do all the things” advantage. By sitting at the intersection of ITSM, security and risk, AIOps, AI governance, application and portfolio management, and, increasingly, CRM, ServiceNow has access to a depth of operational signals that few platforms can match. That matters because DEX has historically struggled to move beyond scores and sentiment. Through its Context Engine and decision and action graphs, ServiceNow is now positioning itself to connect employee friction directly to the systems, entitlements, workflows, and decisions that cause it – and, more importantly, to the business outcomes leaders actually care about.

This positioning becomes more explicit as ServiceNow pushes to be the ecosystem control center and AI front door. Otto represents a unified conversational layer where employees ask for what they need, and governed work happens across departments, systems, and tools – backed by Action Fabric that enables auditable, automated remediation. The most provocative development, however, is the emergence of autonomous AI “specialists”: role‑based digital workers capable of executing end‑to‑end workflows across IT, HR, security, and CRM. While early value centers on absorbing repetitive work, this model exposes hard truths around process maturity, governance, supervision, and workforce impact. The connective tissue is readiness. AI‑driven automation cannot bypass governance, change management, or culture. As ServiceNow unifies workflows, data, and AI orchestration, organizational boundaries blur, and operating models must evolve toward shared accountability and deliberate human‑plus‑AI collaboration. The org chart may not shrink, but it’s unlikely to stay the same.

ServiceNow Bets On AI Control Tower To Connect (And Break Down) Planning & Delivery Pillars

Margo Visitacion, VP/Principal Analyst

Organizations are increasingly recognizing that strategic portfolio management succeeds or fails at the point of demand. When demand is unmanaged, automation becomes noise, delivery teams become overloaded, and the system itself starts to feel like the problem. The real opportunity is to establish demand management as a disciplined front door—one that reduces friction, clarifies intent, and enables better decisions before work ever reaches delivery. Otto, make demand management a disciplined front door that reduces friction, clarifies intent, and helps you make better decisions before work, and looks to remove data chaos. Across enterprises, the challenge is not a lack of data or insight. Most organizations already generate summaries, analytics, and assessments. The issue is that insight does not reliably translate into action. Teams are often faster at collecting information than they are at making decisions, assigning work, or following through. As a result, value stalls between planning and execution. Connecting and creating value across multiple planning capabilities, such as enterprise architecture and portfolio management, allows analysis across multiple disciplines to make better decisions. Let’s see this in action.

Let’s Connect

Have questions? That’s fantastic. Let’s connect and continue the conversation! Please reach out to me trough social media or  request a guidance session. Follow my blogs and research at Forrester.com.