The Control Tower Alliance is a ServiceNow partner program, announced on October 28, 2026, that brings together providers of AI models, cloud, security, identity, APIs, and usage measurement to deliver qualified integrations to the Super Intelligence Control Tower, the platform's control plane for discovering, protecting, governing, observing, and measuring enterprise AI. The announcement treats AI governance as an ecosystem problem, not an isolated tool issue.
What is the Control Tower Alliance?
The Control Tower Alliance is ServiceNow's answer to a practical problem: an AI agent traverses models, clouds, identities, APIs, and systems of record, and none of these points in isolation describes the entire risk. The program organizes specialized vendors around a single control plane, with integrations tested before reaching the customer. The central facts of official statement from ServiceNow They are summarized below.
| Item | Information confirmed |
|---|---|
| Announcement date | October 28, 2026, Santa Clara (California) |
| Founding members | Anthropic, AWS, Cisco, HiddenLayer, Kong, NVIDIA, Okta, OpenAI, Stripe, WitnessAI and Zenity |
| Central platform | ServiceNow Super Intelligence Control Tower |
| Covered domains | AI, cloud infrastructure, security, governance, value measurement, and token measurement. |
| Existing programs | It coexists with ServiceNow Store and Workflow Data Network Partner Passport, without replacing them. |
| Availability, price and regions | Not disclosed in the statement. |
Who are the founding members and what does each one bring to the table?
The founding members of the Control Tower Alliance cover different layers of an AI agent's value chain, from the model to usage-based billing. The press release details the contributions of eight of them; Anthropic, AWS, and OpenAI appear on the founders' list without individual integration descriptions in the announcement text.
| Member | Layer | Contribution described in the advertisement. |
|---|---|---|
| Cisco | AI Security | Cisco AI Defense provides ServiceNow with visibility into AI assets and security findings to drive remediation. |
| HiddenLayer | AI Security | Specific protection for AI against agentic threats, combined with ServiceNow workflow orchestration. |
| Kong | APIs | Real-time governance application over the APIs, models, and tools that agents rely on. |
| NVIDIA | Execution | NVIDIA OpenShell enforces agent boundaries at runtime, while ServiceNow provides workflow and business context. |
| Okta | Identity | It combines ServiceNow's contention decision layer with Okta's kill switch, which blocks new token requests from out-of-scope agents. |
| Stripe (Metronome) | Usage measurement | Reliable billing, real-time usage visibility, and cost control in pay-as-you-go billing models. |
| WitnessAI | Politics and cost | LLMs that interpret behavioral intent, with policy control, usage analysis, and prompt routing. |
| Zenity | Agent safety | Protection and control throughout the agent lifecycle, extended to platform workflows. |
Some of these contributions are stated as future vision. Okta, for example, describes as a shared goal the advancement of open standards for a cross-platform kill switch, capable of revoking an agent's access across multiple systems. This is product direction, not a capability available today.
How the program works: the three fronts
ServiceNow has structured the Control Tower Alliance into three partner relationship models, ranging from joint engineering to joint selling:
- Building together: Partners and ServiceNow develop solutions that run on top of the Super Intelligence Control Tower, instead of standalone tools that the customer needs to integrate on their own.
- Deliver with governance: The pre-integrated solutions undergo ServiceNow qualification and certification, with shared standards for agent identity and security guardrails.
- Selling and leading together: Selected partners integrate their solutions with Control Tower to create offerings that are sold and supported globally by ServiceNow.
For the client, the promised outcome is a curated catalog: AI solutions that have undergone qualification, certification, and integration testing before being listed. The expected benefit is adopting integrations with active AI governance from the start, rather than adding it after deployment.
Why ServiceNow treats AI governance as an ecosystem problem.
According to Amit Zavery, president, chief product officer, and chief operating officer of ServiceNow, the growth in the number and capabilities of agents has made it clear that no single solution can see or protect everything on its own. In the company's view, AI governance requires partners innovating together on an open platform to cover every vulnerable point in the organization.
The reasoning relies on the anatomy of an autonomous action. An agent can start in a conversational interface, use a model hosted in another cloud, authenticate with a non-human identity, call an API, and modify an operational record. A control restricted to the model does not see the identity; a control restricted to the identity does not see the cost; and neither, alone, knows which business service will be affected.
The move also consolidates a product trajectory. Super Intelligence Control Tower is the current name of the former AI Control Tower, as registered by... Constellation Research in the coverage of the third quarter results. In May 2026, at Knowledge 2026, ServiceNow already had AI Control Tower expanded to govern AI running on any company system, inside or outside the platform. The Control Tower Alliance is the next step: transforming point integrations into an ecosystem with eligibility rules. The sequence of partnerships and acquisitions that led to this point is in our [link to documentation]. ServiceNow's agentic AI strategy map.
The role of CMDB and CSDM in agent governance.
The Control Tower Alliance expands the signals reaching the control plane, but the quality of the decision still depends on the context the platform already has. Knowing that an agent exists is not enough: it is necessary to know who owns it, what applications it uses, and what business service it can affect. This answer comes from... CMDB and the CSDM service model, which links critical assets, identities, suppliers, and services.
Without these relationships, the security findings and consumption data brought by partners generate inventory, not decision-making. This is an architectural implication of the announcement, not a guarantee that every CMDB already contains the necessary context. The step-by-step process for registering, authorizing, and auditing agents on the platform is in the guide. AI agent governance in ServiceNow, ...and the inventory discipline that underpins this model is that of IT asset management.
What the Control Tower Alliance has yet to define
The Control Tower Alliance statement is, in large part, a statement of intent. ServiceNow itself classifies the text as containing forward-looking statements about the alliance's future capabilities, integrations, and offerings, and cites delays in development, integration, and certification, as well as regulatory changes regarding AI, among the risks.
Three gaps deserve attention from those planning investment. First, there is no availability date, price, or commercial terms for Brazil and Latin America. Second, the list of founders does not mean that all the products mentioned are already integrated or certified; availability must be verified on a case-by-case basis. Third, Armis and Veza, acquired by ServiceNow in 2026, are central to the convergence between... asset management and cybersecurity, They do not appear on the list of founders; the announcement does not clarify their role in the ecosystem.
Questions leadership should answer before scaling agents.
The Control Tower Alliance doesn't change the correct order of work: inventory and context first, then integrations. Before scaling an agentive AI initiative, IT, security, and risk leadership should be able to answer:
- What agents, models, MCP servers, and integrations are in use, including those not formally registered?
- Who owns each AI asset and for what business purpose has it been approved?
- What data, APIs, and actions can each agent access, and how is that permission revoked?
- To which business applications and services is each agent related in the CMDB?
- How are consumption, cost, incidents, and value delivered measured?
In regulated sectors, these responses must also consider privacy, outsourcing, continuity, and audit trails applicable to the Brazilian context. An integration standard designed for the global market does not, by itself, resolve local obligations.
According to 4MATT, a ServiceNow Elite Partner in Brazil with over 180 certified specialists, the most important factor influencing the secure adoption of agents is the quality of the inventory and the relationships between assets, identities, and services. High-quality integrations reduce the effort of connecting tools; they do not replace the data governance that gives meaning to the signals they produce.
Frequently Asked Questions
What is the ServiceNow Control Tower Alliance?
The Control Tower Alliance is a partner program announced by ServiceNow on October 28, 2026, to deliver AI, security, identity, APIs, and usage measurement solutions integrated with Super Intelligence Control Tower, with qualification, certification, and integration testing prior to listing.
Who are the founding members of the Control Tower Alliance?
The founding members are Anthropic, AWS, Cisco, HiddenLayer, Kong, NVIDIA, Okta, OpenAI, Stripe, WitnessAI, and Zenity, covering AI models, cloud, AI security, identity, API management, and consumption measurement.
Does Control Tower Alliance replace ServiceNow Store?
No. According to ServiceNow, the Control Tower Alliance coexists with ServiceNow Store and the Workflow Data Network Partner Passport program. The alliance is a specific program for AI governance solutions integrated with Super Intelligence Control Tower.
Is Control Tower Alliance already available in Brazil?
The announcement does not specify availability date, price, or commercial terms for Brazil or Latin America. Each integration must be verified individually with ServiceNow and the corresponding vendor.
Are Armis and Veza part of the Control Tower Alliance?
Armis and Veza are not listed among the founding members announced on October 28, 2026. Both were acquired by ServiceNow in 2026, and the alliance's announcement does not define their role in this ecosystem.