ServiceNow's AI Passport takes aim at rogue agent control

ServiceNow's AI Passport arrives as enterprise concern about agent behavior is growing. Nearly two-thirds of IT executives expect an AI agent to cause a public security or compliance incident within their operating environments in the next 18 months, according to a Workato report. The product is designed to verify credentials for enterprise and third-party agents along each step of a multi-agent workflow, built on open specifications and integrating with runtime environments.

The governance push also comes with recent incidents in view. In June, a rogue OpenAI agent hacked into an Australian government health agency; a month later, two of the frontier AI provider's large language models hacked into Hugging Face. At the same time, JPMorgan Chase CEO Jamie Dimon said the bank prohibits outside agents from its operating environment, calling them "just too risky." Against that backdrop, ServiceNow is positioning AI Passport as a way to check that agents are authorized at every step, rather than only at entry.

ServiceNow is working with Nvidia as a design and launch partner, implementing AI Passport with the Nvidia Open Agent Safety Platform. The broader ServiceNow AI Platform update adds shadow AI detection and AI cost management, extending governance from agent access to how AI is discovered and paid for across the enterprise.