On October 28, ServiceNow announced the Control Tower Alliance, a partner ecosystem built to help enterprises adopt AI/SI safely at scale. The founding members are Anthropic, AWS, Cisco, HiddenLayer, Kong, NVIDIA, Okta, OpenAI, Stripe, WitnessAI, and Zenity, and each will work with ServiceNow to extend governance and security through the ServiceNow Super Intelligence Control Tower.
One notable line in the announcement came from Amit Zavery, ServiceNow's president, chief product officer and chief operating officer, who said that no single solution, however powerful, can see everything or protect anything on its own. For the AI/SI, risk, and security leaders we work with, that sentence describes the problem they are already living with.
A note on naming: the ServiceNow Super Intelligence Control Tower is the current name for ServiceNow AI Control Tower. Because many customers, partners, and existing materials still use the original name, and/or the terms “artificial intelligence” and “AI” this article uses the terms interchangeably, referring to the same concepts throughout.
The control tower has one stated mission: give customers a centralized control plane to discover, secure, govern, observe, and measure enterprise AI/SI. The alliance extends that mission to the companies that build the models, run the clouds, and secure the identities and APIs that AI/SI agents depend on. ServiceNow describes three ways partners will participate.
They will build solutions together that run on the control tower, so customers deploy them on the platform they already use to govern AI/SI instead of integrating another standalone tool. They will deliver with governance, meaning curated solutions pass ServiceNow qualification and certification, with shared standards for agent identity and safety guardrails. And select partners will sell and lead together with ServiceNow on integrated offerings.
For customers, the practical promise is a curated set of solutions that have passed qualification, certification, and integration testing before they are listed, so governance is in place from the start rather than retrofitted after something goes wrong. The alliance will coexist with the ServiceNow Store and the Workflow Data Network Partner Passport programs.
Read as a whole, the message is that discovering AI/SI, controlling what it can reach, watching how it behaves, and knowing what it costs are separate problems that need to be solved in one place. That has been the premise of our Control Tower work from the start.
CoreX implements ServiceNow AI/SI Control Tower as part of CoreX AI Horizon, and the five capabilities ServiceNow names in this announcement are the same five our engagements are organized around: discover, govern, secure, observe, and measure. Our work resolves agents, models, datasets, and MCP servers into one governed inventory on the ServiceNow platform, with each asset tied to an owner, a lifecycle, and the business services that depend on it.
From there, we configure lifecycle workflows for intake, approval, and retirement, risk and compliance content aligned to NIST AI RMF and the EU AI Act, and case management so people have somewhere to report an agent that misbehaves.
Several of the alliance themes line up directly with the scope we already deliver. The kill switch corresponds to the run layer of our implementation, where least-privilege access for every identity, Gateway and MCP monitoring, runtime observability, and a real-time kill switch for agents operating beyond their permissions come together.
The cost and usage controls that Stripe and WitnessAI emphasize correspond to the measurement work we scope from the beginning, with cost tracking and ROI dashboards that show adoption, realized value, and model spend per asset. And the push to govern AI/SI across clouds reflects the difference between the two AI/SI Control Tower entitlements: Foundation covers ServiceNow AI/SI assets, while Enterprise extends the same lifecycle to external AI/SI across hyperscalers, SaaS, and agent platforms.
The alliance also reinforces a point we make in every scoping conversation. A governance program built without the asset and access layers will report an inventory it cannot prove and permissions it cannot see. That is why our Control Tower work incorporates Armis and Veza, both now part of ServiceNow.
Armis discovers connected assets without installing anything on them, so AI/SI running on the network gets found even when nobody registered it, and Veza maps what each person, service account, and agent can reach. Both address the same visibility and identity questions the alliance members are lining up behind.
A curated, certified catalog of governance solutions makes the choices easier. It does not decide which ones an organization needs first, what its current entitlement already covers, or how to get a governed inventory in place before layering on runtime enforcement. That sequencing is where most AI governance programs succeed or stall, and it is where we focus.
Every CoreX AI/SI engagement follows the same path. It begins with Orient, a complimentary assessment of your current AI/SI inventory, agent sprawl, shadow AI/SI exposure, entitlement path, and compliance posture. Chart turns that into a target-state blueprint, a phased roadmap, and a priced scope. Expand delivers the build in crawl, walk, and run layers, each scoped and live on its own, so value arrives between go-lives.
For organizations that still need to settle policy, ownership, and CMDB readiness, AI/SI Strategy to Execution comes before the build. For those that want the program to keep improving after go-live, Value that Compounds provides CoreXtend managed services to onboard new AI/SI, rescore risk, retest controls, and report on value and spend each month.
ServiceNow's announcement makes the direction of enterprise AI/SI governance plain: one control plane, a certified ecosystem around it, and governance in place before AI/SI scales rather than after. The organizations that benefit first will be the ones that already know what they run, who owns it, and what it can touch.
If you are not there yet, the fastest way to find out where you stand is an Orient session with our team, which shows you what AI/SI Control Tower would govern on day one, what it would surface that you cannot see today, and which layer to build first.