ServiceNow's bold bet on cybersecurity is paying off. The company's $7.75 billion acquisition of Armis — its largest deal ever — is a key reason its stock is holding up while other software companies struggle with what investors call the "SaaSpocalypse."
The term refers to fears that software-as-a-service companies are facing slowing growth and shrinking valuations. But ServiceNow's latest earnings suggest the company is bucking that trend, thanks largely to its push into cybersecurity.
ServiceNow's Armis acquisition drives cybersecurity growth
ServiceNow paid $7.75 billion in cash for Armis, a cyber exposure management firm, in December and closed the deal in April, according to TheStreet. The acquisition was the largest in the company's history and signaled a major commitment to security.
The bet appears to be working. ServiceNow's security and risk products were attached to 16 of its top 20 deals, according to The Globe and Mail. That means cybersecurity is no longer a side product — it is now a core driver of the company's biggest contracts.
"I expect the SaaSpocalypse fears to fade for the company as..." — The Globe and Mail
Earnings beat expectations despite gloomy software sentiment
The financial results back up the optimism. ServiceNow generated $3.877 billion in subscription revenue during the second quarter, up 24.5% from a year earlier and ahead of the $3.817 billion that analysts at FactSet had expected, according to Morningstar.
This came at a time when software stocks broadly were under pressure. ServiceNow shares had been struggling this year, caught up in the broader SaaSpocalypse selloff. But the earnings report showed momentum that investors had not priced in.
CEO Bill McDermott pointed to the growing threat landscape as a reason for the company's cybersecurity push. "The attack surface is exploding," he said, as reported by Morningstar.
AI and cybersecurity combine to fuel ServiceNow's momentum
ServiceNow is also leaning on artificial intelligence to differentiate itself. The company reported a "ninefold" increase in agentic deployments of its AI offering over the course of nine months, according to Morningstar.
McDermott framed this as a combined strength: "This agentic enterprise is being led by ServiceNow from workflow to cybersecurity."
The company's latest earnings show why it was willing to pay a record price for Armis, according to Calcalistech. The deal gave ServiceNow a leading position in cyber exposure management — the practice of identifying and reducing an organization's security risks before they become breaches.
- Armis focuses on "cyber exposure" — tracking every device connected to a network and flagging vulnerabilities
- The acquisition closed in April, and cybersecurity is now attached to the majority of ServiceNow's largest deals
- ServiceNow's subscription revenue growth of 24.5% outpaced analyst expectations by roughly $60 million
Our Take: The Armis deal shows the value of bold M&A
To put it plainly, ServiceNow's Armis acquisition is a case study in how the right deal at the right time can change a company's trajectory. When the deal was announced, many investors likely questioned the price tag. Now, the results are speaking for themselves.
The SaaSpocalypse narrative has been punishing software stocks broadly, treating them all as if they face the same problems. But ServiceNow's earnings show that companies with strong cybersecurity offerings and AI momentum can still deliver growth that beats expectations.
What matters for investors is this: ServiceNow did not just buy Armis for revenue. It bought Armis to make its entire platform more valuable. Security is now attached to its biggest deals, which means the acquisition is not a side bet — it is a core part of the company's growth strategy.
The lesson here is that not all software companies are created equal. When fears drive a whole sector down, it pays to look at which companies have real, differentiated growth drivers. ServiceNow's cybersecurity bet is proving to be exactly that.
