ServiceNow AI Passport signs agent credentials to enforce runtime scope limits and terminate non-compliant bots
The platform renames its AI governance hub and introduces cryptographically signed credentials to verify agent scope at runtime.
Key points
- ServiceNow renames AI Control Tower to Super Intelligence Control Tower.
- New AI Passport component provides verifiable, cryptographically signed identities for agents.
- Runtime controls enforce scope limits, including redirecting or terminating non-compliant agents.
ServiceNow has renamed its AI Control Tower to the Super Intelligence Control Tower (SICT) and introduced AI Passport, a mechanism for verifying autonomous agent identities. According to InfoWorld, the update aims to improve governance as enterprises move AI agents from pilot phases into production environments. The platform also updates EmployeeWorks to simplify the creation of these agents.
Root cause
The initiative addresses governance challenges that arise when organisations scale autonomous systems. Nenshad Bardoliwalla, SVP of AI product management at ServiceNow, stated that scaling becomes a risk if companies cannot identify running agents, their actions, or their system access. The new controls are designed to provide continuous visibility and enforcement rather than relying solely on post-event review.
Attack path
AI Passport acts as a cryptographically signed credential checked at runtime to verify an agent’s authorised scope. If an agent attempts to deviate from its permissions, defined actions are enforced. These measures include redirecting the agent, restricting its activity, reconnecting it with proper context, or triggering a kill switch. All such interventions are audited for tracking purposes.
Affected versions
The changes apply to the newly named Super Intelligence Control Tower and the updated EmployeeWorks platform. The AI Passport component is built on open specifications, allowing any governance product or identity provider to issue and verify credentials. This design supports both ServiceNow’s native agents and third-party autonomous systems within multi-agent workflows.
Mitigation
- Ensure the issuing data sources, such as CMDB and GRC policies, remain current.
- Verify that enforcement points are properly configured to check passport credentials.
- Monitor audit logs to track agent activity and any enforced actions.
- Confirm that third-party agents adhere to the open specification standards.
What it means for organisations
Teams should assess how autonomous agents are currently identified and authorised within their infrastructure. Governance leads need to verify that identity providers can issue verifiable credentials for all agents, including those from external suppliers. Operations managers must ensure that runtime enforcement mechanisms are active and that audit trails are comprehensive. This shift requires aligning technical controls with broader risk management policies to prevent unauthorised system access.
Background: AI agents
AI agents matter for security because they move beyond generating text to executing code and accessing systems. This autonomy means a single compromised prompt can trigger cascading failures across your infrastructure, requiring new controls for intent verification and action boundaries rather than just content filtering.
Read the full guide: Why AI Agents Matter for Security: Autonomy Risks
What to do and how to stay safe: ServiceNow
- Review current agent inventory to identify any systems lacking verifiable identity credentials.
- Validate that runtime monitoring tools can detect and enforce scope deviations immediately.
- Ensure configuration management databases are accurately reflecting current agent permissions.
- Establish clear protocols for handling agents that trigger automated kill switches or restrictions.
Step-by-step guide: AI governance checklist for production systems
General security guidance from the TechSec Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the AI Passport component?
It is a cryptographically signed credential for AI agents that is checked at runtime to verify the scope authorised by the enterprise.
Does this apply to third-party agents?
Yes, the AI Passport gives every agent, whether from ServiceNow or a third party, a verifiable identity and provides runtime control over its activities.
Who is the launch partner for this initiative?
Nvidia is the launch partner for the Super Intelligence Control Tower and its AI Passport feature.
