Porto implemented ServiceNow Certificate Management with 4MATT by integrating ITOM Discovery, ITAM, and IRM into a single governance architecture — reducing manual scripts by 97%, automating 92% of on-premises server inventories, and taking the compliance cycle from D+15 to D+1.
ServiceNow Certificate Management in Porto: How an operation with 5,000 servers and over 300 licensing agreements migrated from manual controls to continuous governance with ServiceNow.
What was delivered
- Implementation of ServiceNow Certificate Management integrated with ITOM Discovery, Integration Hub, ITAM and IRM
- Automation of data collection, normalization, and visibility for assets, contracts, and digital certificates.
- Executive dashboards for monitoring compliance, Discovery health, and license usage.
- Elimination of manual scripts, one-off inventories, and parallel controls in spreadsheets.
- Greater collaboration between IT and the security team, with a structured knowledge base.
Porto is one of Brazil's leading business groups, operating in insurance, healthcare, financial services, and other services. Its digital operation serves 17 million customers, 13,000 employees, 36,000 independent brokers, and 3.3 million users of the Porto App—supported by an on-premises infrastructure with over 5,000 servers, 360 networks, more than 300 licensing agreements, and over 19,000 software installations. Managing digital certificates and critical assets in this environment, with traceability, compliance, and operational efficiency, was the challenge that motivated the ServiceNow Certificate Management project with 4MATT.
The challenge
Porto needed to evolve from an operational model based on manual controls, point inventories, and low predictability to a continuous, automated, and data-driven approach. In an operation of this size, the absence of continuous visibility amplifies exposure to operational risks, compliance failures, and reliance on reactive actions.
The main challenges were eliminating recurring manual activities, replacing non-recurring inventories with continuous monitoring, reducing the complexity of managing software and digital certificates, and strengthening the integration between Discovery, CMDB, ITAM, IRM, and security. Without a structured platform, these processes relied on scripts, spreadsheets, and parallel controls—lacking adequate traceability or governance.
The decision to choose ServiceNow and 4MATT
The decision was structured based on a robust evaluation process, combining benchmarking with large companies, business case, SWOT analysis, technical, functional and business evaluation, as well as Proof of Concept with the main technologies. The choice for ServiceNow and 4MATT It was supported by four main vectors: support for key governance disciplines (methodologies, CMDB, service management); automatically populated data via Discovery and integrations; adaptability to the business rules of software vendors; and scalability and robustness of the platform.
ServiceNow Certificate Management: a solution connected to asset governance.
4MATT supported Porto on an integrated governance journey, connecting ITOM Discovery, ITAM, ServiceNow IRM and Certificate Management in an architecture focused on visibility, compliance, and continuous control. The scope included Integration Hub, ITOM Discovery, ITAM, IRM, and Certificate Management—even in an environment without ITSM or CSM, reinforcing the platform's flexibility to operate beyond traditional service flows.
The implementation followed a hybrid methodology focused on the progressive generation of value: planning with multidisciplinary workshops; Discovery with an initial focus on operating systems; accordance with contract registration, standardization and reconciliation; and finalization With dashboards, license visibility, and continuous monitoring of Discovery's health across the network, the implementation consolidated technical data, contracts, assets, risks, and certificates into a single platform.
Results achieved
Porto achieved significant gains in automation, compliance, and operational efficiency — transforming a reactive operation into a model of continuous governance.
| Dimension | Result |
|---|---|
| Automation | 97% reduction of manually executed scripts |
| Inventory | 92% of automated on-premises server inventories |
| Agility | Data collection reduced from D+30 to D+1 |
| Accordance | Generation of compliance and reduced visibility from D+15 to D+1. |
| Governance | Continuous control, monitoring, standardization and reconciliation |
| Operational safety | Greater collaboration with security and evolution of the knowledge base. |
Does your company still manage certificates, software, and critical assets using manual controls? Speak with a 4MATT specialist Discover how ServiceNow Certificate Management can enhance your governance, reduce risk, and accelerate operational compliance.
Are you already following 4MATT on LinkedIn? Follow us so you don’t miss new content about ITAM, Discovery and asset governance with ServiceNow.
Frequently Asked Questions
What is Certificate Management in ServiceNow?
It is the practice of centralizing, monitoring, and governing digital certificates within a corporate platform, reducing the risks of expiration, unavailability, and lack of traceability. In ServiceNow, Certificate Management integrates natively with CMDB, ITAM, and IRM — creating complete visibility into which assets and services depend on which certificates.
How does ServiceNow Certificate Management connect to ITAM and Discovery?
Discovery automatically identifies assets and technical components in the environment. ITAM structures governance, standardization, and control of contracts and licenses. ServiceNow Certificate Management extends this view by connecting digital certificates to assets, services, and associated risks—eliminating operational blind spots.
Why is Certificate Management critical for large companies?
Complex corporate environments have thousands of digital assets, integrations, applications, and services that depend on valid certificates. Failures in this control lead to downtime, security incidents, and exposure to regulatory risks. As demonstrated by the implementation of ServiceNow Certificate Management at Porto, automating this process drastically reduces the reliance on manual and reactive actions.
Does 4MATT implement Certificate Management with ServiceNow?
Yes. 4MATT is a ServiceNow Elite Partner in Brazil and works on projects involving ITAM, ITOM Discovery, CMDB, IRM, and ServiceNow Certificate Management for large corporate environments. Porto's case study is a benchmark for the integrated implementation of these disciplines in an architecture geared towards governance and continuous compliance.