Armis
Armis provides an AI-driven, agentless Cyber Exposure Management platform that discovers, classifies, and protects IT, OT, IoT, IoMT, and cloud assets for Fortune 500 enterprises, healthcare systems, manufacturers, and government/defense agencies worldwide, now operating as a wholly owned subsidiary of ServiceNow.
- Company typePrivate
- Founded2016
- HeadquartersSan Francisco, United States
- Headcount501–1,000
- GTM typeB2B
- OfferingSoftware
What Armis does
Armis is a cyber exposure management and security company founded in 2016 in Israel by Yevgeny Dibrov and Nadir Izrael, headquartered in San Francisco, California, and operating as a wholly owned subsidiary of ServiceNow following a $7.75 billion cash acquisition completed on April 20, 2026. Its flagship product is Armis Centrix™, a cloud-native, agentless Cyber Exposure Management platform powered by the AI-driven Armis Asset Intelligence Engine, a crowdsourced knowledge base tracking over 6.5 billion assets across IT, OT, IoT, IoMT, cloud, and code environments. The platform combines passive network traffic analysis with vendor-safe Smart Active Querying, deep packet inspection, behavioral anomaly detection, and the Armis Vulnerability Intelligence Database to deliver real-time asset discovery, risk scoring, vulnerability prioritization, and automated policy enforcement via 200+ pre-built integrations.
Armis monetizes primarily through quote-based enterprise SaaS subscriptions to Armis Centrix and modular add-ons (CAASM, OT/IoT Security, Medical Device Security, VIPR Pro, VMDR, Application Security, Early Warning, SRA), typically sold under multi-year contracts priced by asset count, environment scope, and deployment model (SaaS, hybrid, on-prem, or air-gapped). At the time of the ServiceNow acquisition, Armis reported more than $340 million in annual recurring revenue with 50%+ year-over-year growth, serving over 35% of the Fortune 100 across healthcare, manufacturing, government/defense, energy, retail, and financial services verticals, with a dedicated Armis Federal division and DISA IL5 / FedRAMP Moderate authorizations. Distribution combines direct enterprise field sales, a formal channel partner program (Armis Integration Network, 5-Star CRN Partner Program), the Armis Marketplace and Developer Portal (API v3), and—post-acquisition—ServiceNow's global enterprise sales force and Autonomous Security & Risk platform.
Armis firmographics
Firmographics- Name
- Armis
- Legal name
- Armis Inc.
- Website
- https://armis.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Acquired
- Headcount range
- 501–1,000 employees
- Short description
- Armis provides an AI-driven, agentless Cyber Exposure Management platform that discovers, classifies, and protects IT, OT, IoT, IoMT, and cloud assets for Fortune 500 enterprises, healthcare systems, manufacturers, and government/defense agencies worldwide, now operating as a wholly owned subsidiary of ServiceNow.
- Ownership category
- akta.pro rank
Armis industry classification
Industry- Product category
- Cyber Exposure Management / Cybersecurity Software
- NAICS
- Software Publishers (5132), Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373), Computer Peripheral Equipment, Nec (3577)
- akta.pro primary industry
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)
- akta.pro secondary industries
- Endpoint & Mobile Asset Management (UEM/MDM Asset Controls) (BPAEAOAI), Cloud FinOps & SaaS Spend Management (BPAEAOAH), Third-Party Model/Vendor Risk & Supply-Chain Assurance (HDAAAMAK)
Keywords
Where Armis is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices12 records
Markets served
Armis business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations, Others
Revenue model
- Armis Centrix Subscription Licenses: Recurring SaaS subscriptions to the Armis Centrix platform and its modular solutions (Asset Management & Security, OT/IoT Security, Medical Device Security, VIPR Pro, VMDR, Application Security, Early Warning). Sold via "Request a Demo" with quote-based pricing, typically multi-year enterprise contracts; before the ServiceNow acquisition, Armis was reported to have more than $340M in annual recurring revenue with over 50% year-over-year growth.
- Deployment & Professional Services: On-premises and hybrid deployment options (including an air-gapped on-prem OT/IoT product), plus implementation, integration, and managed services delivered by Armis Professional Services and the partner ecosystem.
- API & Developer Platform Access: Indirect monetization through the Armis Developer Portal and Armis Marketplace, where ecosystem developers and partners consume Armis asset intelligence via API v3 and pre-built integrations, supporting land-and-expand into broader enterprise deals.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Quote-based enterprise subscription for Armis Centrix and modular add-ons (CAASM, OT/IoT, Medical Device Security, VIPR Pro, VMDR, AppSec, Early Warning) |
| Other | Annual | Custom demo-led pricing with self-guided interactive product tour |
Go-to-market motion4 records
Distribution channels7 records
Marketing channels12 records
Armis product offering
Product offeringCore offering
Armis sells the Armis Centrix™ cyber exposure management platform — a cloud-native, agentless SaaS that uses an AI-driven Asset Intelligence Engine to continuously discover, classify, and risk-score every IT, OT, IoT, IoMT, and cloud asset in an organization's environment. The platform is sold as modular subscriptions (CAASM, OT/IoT Security, Medical Device Security, VIPR Pro, VMDR, Application Security, Early Warning, Secure Remote Access) plus deployment, professional services, and an API/Marketplace ecosystem, primarily to Fortune 500 enterprises and U.S. federal/defense customers.
Product overview
Armis offers Armis Centrix™, a single unified cyber exposure management platform delivered as a SaaS core platform with multiple specialized modules plus on-prem and air-gapped deployment variants. The core platform is powered by the Armis Asset Intelligence Engine and Armis Vulnerability Intelligence Database, which together provide asset discovery, behavioral analysis, vulnerability intelligence, and risk scoring across IT, OT, IoT, IoMT, cloud, and code assets. Built on this core are add-on modules including Armis Centrix for Asset Management and Security (CAASM), OT/IoT Security (SaaS and On-Prem), Medical Device Security, VIPR Pro (Prioritization and Remediation), Vulnerability Management Detection and Response (VMDR), Application Security, Early Warning, Secure Remote Access (SRA), and the AI Assistant. Supporting features include Armis Centrix Insights, Smart Active Querying, the Armis Marketplace for partner integrations, and the Armis Developer Portal (API v3) for customer and partner integrations.
Differentiator
Problem solved
Functional benefit
Brands
- Armis Centrix™: Cloud-native cyber exposure management platform that delivers real-time visibility, risk assessment, and proactive protection of an organization's entire digital attack surface, powered by the Armis AI-driven Asset Intelligence Engine. Includes modular solutions for asset management, OT/IoT security, medical device security, vulnerability prioritization (VIPR), vulnerability management detection and response, application security, and early warning.
- Armis Developer Portal
- Armis Marketplace
- Armis Federal
Products and services
- Armis Centrix™ Armis's flagship cloud-native, AI-powered Cyber Exposure Management platform that unifies asset discovery, risk scoring, vulnerability prioritization, threat detection, and remediation across IT, OT, IoT, IoMT, cloud, and code assets for enterprise and federal customers.
- Armis Centrix™ for Asset Management and Security (CAASM) Cyber Asset Attack Surface Management (CAASM) module providing a unified, contextualized asset inventory, gap identification, and security posture consolidation across multiple source systems.
- Armis Centrix™ for OT/IoT Security (SaaS) Cloud-delivered OT/IoT security module that discovers, classifies, and protects operational technology and IoT assets, with vulnerability management, threat detection, and CMMS/ITSM workflow integration for industrial and enterprise customers.
- Armis Centrix™ for OT/IoT Security (On-Prem) On-premises deployment variant of Armis Centrix for OT/IoT Security purpose-built for air-gapped, regulated, and classified industrial networks, with all data kept local and continuous Device Knowledgebase updates.
- Armis Centrix™ for Medical Device Security Medical IoT (IoMT) security module that discovers, inventories, risk-scores, and protects connected medical devices across clinical environments while supporting patient safety and HIPAA alignment for hospitals, health systems, and medical device manufacturers.
- Armis Centrix™ for VIPR Pro – Prioritization and Remediation AI-driven vulnerability prioritization and remediation module that consolidates findings from multiple scanners, deduplicates and prioritizes based on exploit likelihood, asset criticality, and business context, and automates ownership assignment and ticketing via bidirectional workflow integrations.
- Armis Centrix™ for Vulnerability Management Detection and Response (VMDR) VMDR module that combines continuous, evidence-based vulnerability assessment with prioritization and response workflows, integrating bi-directionally with Qualys, Tenable, and other vulnerability management tools to reduce false positives by up to 70% and cut network impact by 90% versus traditional scanners.
- Armis Centrix™ for Application Security
Quantifiable outcome
- 75% improved MTTR for prioritized findings
- +10 more outcomes
Companies that use Armis
Customer profileNamed customers36 records
Segments4 records
Ideal customer profiles6 records
Armis technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration20 records
AI capability10 records
Feature11 records
Armis partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core, flagship and minor.
- IllumiocoreIllumio and Armis expanded their strategic partnership in February 2026 to deliver an integrated security solution for converged IT and OT environments. The joint offering links Armis's asset discovery and cyber exposure management with Illumio's breach containment and microsegmentation platform, enabling Zero Trust security, asset discovery, and risk-based network segmentation globally.
- NVIDIAcoreArmis has a published Partner Brief on "Armis Exposure Management & Security on NVIDIA BlueField-3 DPU" and has blogged on protecting NVIDIA AI Factories at scale. The integration supports in-silicon security enforcement for agentic AI storage processing on the NVIDIA Vera BlueField-4 STX platform.
- ServiceNowflagshipServiceNow completed its $7.75 billion cash acquisition of Armis on April 20, 2026. Armis is integrated into the ServiceNow AI Platform as part of the Autonomous Security & Risk offering and ServiceNow's AI Control Tower, combining asset intelligence with Veza identity governance. Pre-acquisition, ServiceNow was already a deep technology integration partner, with Armis opening high-priority ServiceNow tickets automatically from OT alerts.
- Palo Alto Networks (CyberArk)minorReferenced as a peer vendor in the broader cybersecurity M&A wave. Armis's $7.75B ServiceNow deal is grouped with Palo Alto Networks' $25B CyberArk acquisition and Google's $32B Wiz acquisition as a 2025–2026 cybersecurity consolidation event.
Scale indicators12 records
Recent moves6 records
Expansion highlights6 records
Armis competitors and assessment
Company assessmentDirect peers
- Claroty: Direct competitor in OT/IoT/CPS security, offering asset discovery, vulnerability management, and threat detection for industrial, healthcare, and critical-infrastructure environments — directly overlapping Armis Centrix for OT/IoT Security and Medical Device Security.
- Nozomi Networks: Direct OT/IoT/ICS cybersecurity peer providing asset visibility, network monitoring, and vulnerability management for industrial control systems — comparable to Armis's on-prem and SaaS OT/IoT modules and a similar regulated-vertical customer base.
- Axonius: Direct CAASM competitor that consolidates asset data from existing security and IT tools to provide a unified asset inventory and security posture view — directly comparable to Armis Centrix for Asset Management and Security (CAASM).
- Forescout: Direct peer in OT/IoT and networked-device visibility, with comparable passive-monitoring architecture and a similar federal, healthcare, and industrial customer base — competing head-to-head in the agentless asset visibility category.
- Tenable: Direct vulnerability management peer; Tenable Nessus and Tenable One overlap with Armis Centrix VMDR and VIPR Pro, and Tenable is one of the scanner sources Armis ingests via bi-directional integration.
- Qualys: Direct vulnerability management and cloud security peer whose VMDR and TruRisk platform overlap with Armis Centrix VMDR and VIPR Pro, with Qualys scanner data also ingestible into Armis's prioritization engine.
- Rapid7: Direct vulnerability management and exposure management peer, offering InsightVM and exposure analytics that compete with Armis Centrix VMDR and VIPR Pro in mid-market and enterprise security operations.
Emerging players
- Dragos: OT-specific cybersecurity peer focused on industrial control systems and ICS threat intelligence; comparable to Armis's on-prem OT/IoT module but with a narrower industrial-only focus and emerging global footprint.
Broad incumbents
- CrowdStrike: Broad incumbent expanding its Falcon platform into exposure management, asset visibility, and OT/IoT — competing with Armis from a much larger endpoint install base, broader R&D budget, and integrated single-agent architecture.
- Palo Alto Networks: Broad incumbent operating the Cortex XSIAM and Prisma platforms across SIEM, EDR, cloud, and exposure management — competing with Armis as part of a wider portfolio rather than a focused CPS/exposure niche.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Armis social profiles
Digital presenceArmis compliance and trust
Trust signalCompliance9 records
Armis financial estimates
Financial estimateRevenue estimate
Valuation estimate
Armis leadership team
Management profileNumber of profiles
Profiles17 records
Armis subsidiaries and ownership
Company hierarchySubsidiaries1 record
Armis funding detail
Funding detailFunding overview
Funding rounds9 records
Investors20 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Armis M&A and investment
M&A and investmentM&A3 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Armis
What does Armis do?
Armis sells the Armis Centrix™ cyber exposure management platform — a cloud-native, agentless SaaS that uses an AI-driven Asset Intelligence Engine to continuously discover, classify, and risk-score every IT, OT, IoT, IoMT, and cloud asset in an organization's environment. The platform is sold as modular subscriptions (CAASM, OT/IoT Security, Medical Device Security, VIPR Pro, VMDR, Application Security, Early Warning, Secure Remote Access) plus deployment, professional services, and an API/Marketplace ecosystem, primarily to Fortune 500 enterprises and U.S. federal/defense customers.
Is Armis a public or private company?
Armis is a private company. It is classified as corporate owned and is currently acquired.
When was Armis founded?
Armis was founded in 2016. It employs 501 to 1,000 people.
Where is Armis based?
Armis is headquartered in San Francisco, United States, in the North America region.
How does Armis make money?
Three revenue lines are on record. Armis Centrix Subscription Licenses are the primary driver. The others are deployment & Professional Services and API & Developer Platform Access.
Who are Armis's main competitors?
Direct peers on record are Claroty, Nozomi Networks, Axonius, Forescout, Tenable, Qualys and Rapid7. Dragos is listed as an emerging player. Broad incumbents are CrowdStrike and Palo Alto Networks.
Does Armis have an API?
Yes. Armis offers a public developer portal and API (API v3) enabling developers and partners to build integrations, automate workflows, query asset intelligence data, retrieve vulnerability information, and integrate Armis Centrix platform capabilities with external systems. The developer portal provides documentation, references, and developer resources. Developer documentation is at dev.armis.com.
What industry is Armis in?
Armis's product category is Cyber Exposure Management / Cybersecurity Software. Its primary akta.pro industry code is HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII), with a secondary code of BPAEAOAI, Endpoint & Mobile Asset Management (UEM/MDM Asset Controls). Its NAICS code is 5132 and its SIC code is 7372.