Brazil Patch 1, Brazil, Australia Patch 7, Australia Patch 6, Australia Patch 5, Australia Patch 4, Australia Patch 3, Australia Patch 1
Generative AI
ServiceNow AI Control Tower is a centralized enterprise governance and visibility workspace. It helps organizations discover, govern, secure, observe, and measure all AI assets—including internal models and third-party agents.
- AI Control Tower: A single-pane view of your organization's AI footprint, with actionable insights for governance and control.
- Centralized AI asset inventory: Centralized view for your AI systems, AI models, prompts, MCP servers, and datasets, and how they relate to each other.
- Discover: Automatically discover AI across the enterprise, including hyperscalers, SaaS platforms, and dev platforms. Also automatically discover Now Assist skills and ServiceNow deployed models.
- Govern: Establish AI strategy, manage risk and lifecycle, deploy and enforce integrated controls, and demonstrate compliance. Connect AI investments to business outcomes, and automate compliance with the EU AI Act and NIST AI RMF through continuous governance rather than periodic audits.
- Secure: Track AI agent access, security posture metrics, and guardrails. Take action through automated workflows while maintaining control across your entire AI landscape. Analyze exposure, prompt injections, and offensive content.
- Observe: Continuously monitor and evaluate AI agents' performance through metrics and log traces. Quality and safety scoring feeds value calculations.
- Measure: Quantify AI's business impact with comprehensive metrics that track adoption rates, realized value, and ROI.
- AI Native platform experience: Built-in AI insights and recommendations that drive action, not just reporting.
AI Control Tower adds new capabilities across discovery, governance, security, monitoring, and measurement of AI usage.
Secure
New
- AI Security Operator role — lets teams delegate agent containment (deactivate/reinstate) without granting full AI Steward access.
Changed
- Smarter Overview recommendations — "Your top recommendations" now ranks agents by critical security events (with agent name, event count, and threat categories); Overview and Post-runtime event lists are now consistent with each other.
- On the Overview tab, the Access issues detailed view includes a description that explains each access issue in plain language — identifying the agent, the operation, the resource, and the denial count.
- On the Runtime tab, Sensitive data metrics are shown for ServiceNow AI systems in a domain-separated instance.
- In Settings > Rules and templates > Security , the default values for Sampling rate and Max skill calls have changed on the External AI systems tab to help ensure efficient, predictable analysis. If you're upgrading, your Sampling rate and Max skill calls are updated to the new defaults. Your Detection enabled setting for each metric isn’t affected. After upgrading, check your Sampling rate and Max skill calls settings and adjust if needed.
Fixed
- In Policies, AWS Bedrock block and unblock actions fail without an error message when they don't succeed. (PRB2077055)
- After navigating to the Security page, tabs from the previous page were sometimes still shown until the page was refreshed. (PRB2063965)
- Selecting View source record from a security event's source log opened the underlying trace record directly, instead of the related page in Monitoring > Traces. (PRB2075468)
- In the legacy UI experience, some users couldn't see the Security and Privacy tab. (PRB2090102)
- Security fixes
Removed
- The base system Traceloop Warehouse HTTPS connection (sn_ai_security.Traceloop_API alias) is removed. If you're upgrading and use Traceloop-based external AI metrics, create a new HTTPS connection under that alias and re-create your credential with connection URL https://api.traceloop.com. (PRB2071152)
Monitor
Changed:
- Go directly to the traces where a mismatch was detected from the AI agent usage deviates from declared purpose recommendation. Previously, the recommendation opened the parent asset record.
- A new recommendation groups AI agent quality and safety score drops by severity level, so related drops across multiple assets appear on a single card rather than one card per asset.
- Monitor agentic AI performance over time using new filter options in the Monitor agent activity chart. View the top five lowest performing metrics, top five highest performing metrics, or view performance for a specific metric in the chart.
- View a list of lowest scoring metrics and the LLM judge's reasoning in the Quality and Safety score cards on the Session details page.
- Toggle between input and output when viewing trace details.
- Widget customization capability support across ALL AICT pages
Measure
New:
- Sub-vendor AI costs: Set a rate for a specific service from an integrated vendor, such as an agent platform. The sub-vendor rate takes precedence over the vendor rate. The vendor rate applies to any usage that doesn't have a sub-vendor rate.
- Subscription AI costs: Record per-seat subscription costs for integrated and non-integrated vendors. Specify the number of licensed seats, the cost per seat, and the contract dates. Optionally, add a one-time setup fee and distribute it over a set number of months so that it's included in the estimated monthly cost.
Changed:
- Assign costs to specific services from integrated vendors.
- Include per-seat subscription costs in AI cost tracking.
For full details, see AI Control Tower release notes
Not applicable for this application version.
Requires platform version Brazil or Australia Patch 6