CoreX and Alchemy Global Networks have formed a partnership focused on industrial security and risk management, combining operational technology visibility with enterprise workflow and identity governance tools.
The companies said the offering will use asset intelligence from Armis and identity governance capabilities from Veza alongside ServiceNow’s AI Control Tower. ServiceNow completed its acquisition of Veza in March 2026 and Armis in April 2026.
The partnership is aimed at organisations in manufacturing, retail, healthcare, utilities, and energy that operate connected industrial environments. It brings OT asset discovery, access governance, remediation, and enterprise risk processes into the same ServiceNow-based workflow environment.
The arrangement also comes as ServiceNow expands its security platform beyond conventional enterprise IT. When it completed its acquisition of Armis in April, ServiceNow said the technology would add asset discovery and cyber-risk capabilities across IT, OT, IoT, medical devices, critical infrastructure, code, and cloud environments. Veza provides visibility into permissions and access paths associated with human, machine, and AI identities.
Together, Armis and Veza give ServiceNow visibility into connected assets and the identities that can access them. That information can then be linked to risk, governance, and remediation workflows within the platform.
Bringing OT data into enterprise security workflows
The partnership reflects the growing overlap between IT and OT systems inside industrial organisations. Its scope covers conventional IT infrastructure alongside industrial equipment, IoT devices, machine identities, and other connected systems.
The ISA/IEC 62443 series addresses cybersecurity across industrial automation and control systems, including the interfaces between operational environments, enterprise systems, suppliers, integrators, and service providers. The series sets requirements for different stakeholders, including asset owners, product suppliers, system integrators, and service providers.
CoreX will provide its ServiceNow workflow and OT management expertise, while Alchemy Global Networks will contribute cybersecurity, network engineering, and managed engineering services.
Rick Wright, CEO of CoreX, said industrial organisations are dealing with a mix of human and machine identities across increasingly connected IT and OT environments.
“By leveraging the combined intelligence of Armis and Veza within the ServiceNow AI Platform, CoreX and AGN can now help our clients operationalise a single, intelligent graph that maps every asset and every permission,” Wright said.
The companies said the system is designed to combine information about connected industrial assets with data about who or what has access to them. That includes both human users and non-human identities such as machines and AI agents.
Armis supplies asset intelligence across IT, OT, IoT, and other connected systems, while Veza provides visibility into permissions assigned to human and non-human identities. ServiceNow said that information can feed into configuration, security incident, risk, and remediation workflows.
Asset discovery is one part of that process. Armis says its OT technology uses agentless methods rather than requiring software to be installed directly on industrial devices.
Its approach combines continuous monitoring of network traffic with active queries using industrial protocols to identify and classify equipment. Armis says this can include legacy, unmanaged, and previously unidentified OT assets without requiring software agents on the devices themselves.
The resulting asset data can include more than a basic inventory. According to Armis, OT asset metadata can cover a device’s manufacturer and model, IP and MAC addresses, operating system information, software vulnerabilities, connections to other equipment, ports, protocols, services, and commands used to configure or control the device.
That information can then be associated with access permissions and risk records within ServiceNow. Veza adds visibility into access relationships and supports least-privilege controls across human and non-human identities.
ServiceNow’s AI Control Tower adds another layer for managing AI agents within enterprise workflows. According to ServiceNow, agents can be inventoried, risk-scored, and governed through access controls and audit processes.
The platform can also connect assets and permissions with the services, processes, teams, and policies that depend on them, creating a shared record for security and remediation activity.
OT requirements still shape security decisions
OT-specific security requirements remain relevant when industrial data is brought into enterprise platforms. NIST’s Guide to Operational Technology Security states that OT cybersecurity controls must account for performance, reliability, and safety because these systems interact with physical processes and equipment.
NIST’s definition of OT includes industrial control systems, building automation, transportation systems, physical access controls, and other programmable systems that monitor or change the physical environment.
ISA also treats OT-specific controls as complementary to broader enterprise information-security management. ISA/IEC 62443 focuses on cybersecurity requirements for industrial automation and control systems, while frameworks such as ISO/IEC 27001 address broader organisational information-security management.
Nadir Izrael, group vice president for cybersecurity and risk at ServiceNow, said industrial security requires asset visibility and workflow management to operate together.
“Securing industrial environments and critical operations demands a unified platform approach,” Izrael said.
The CoreX and AGN model places OT asset and access information into workflows used for risk, governance, and remediation. The companies said the aim is to connect industrial asset visibility with enterprise security processes rather than manage the functions through separate tools.
The partnership also brings asset discovery, risk management, remediation, and governance into a single engagement. CoreX and Alchemy Global Networks said this is intended to reduce the need for organisations to coordinate separate providers for OT visibility and enterprise workflow management.
OT-specific network controls remain part of the wider security model. ISA/IEC 62443-3-2 calls for industrial systems to be divided into zones and conduits as part of the security risk assessment process, with assets grouped according to common security requirements and communications between them controlled.
The partnership is targeted at organisations using ServiceNow for OT management, industrial asset governance, security operations, and critical infrastructure programs.
(Image by Sergey2025)
See also: NVIDIA opens AV reasoning model to robotaxi developers
Want to learn more about the IoT from industry leaders? Check out IoT Tech Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including AI & Big Data Expo and the Cyber Security Expo. Click here for more information.
IoT News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.