ServiceNow and OpenAI Link AI Agents to Enterprise Workflows and Security

ServiceNow and OpenAI announced an expanded partnership on October 28, 2026, linking OpenAI models and agents with ServiceNow workflows, ChatGPT and Codex. The agreement targets enterprise operations, cybersecurity and software development, with controls for permissions, approvals and business context built into the path from AI reasoning to action.
- OpenAI said the partnership will add a ServiceNow plugin for ChatGPT through Action Fabric on October 28, 2026.
- ServiceNow said the companies are developing security tools that use OpenAI cyber models with enterprise asset and identity data.
- OpenAI models will support Build Agent and Autonomous Engineer inside ServiceNowâs AI Workflow Factory.
What did ServiceNow and OpenAI announce?
The companies are widening an existing technology relationship into a connected enterprise system. OpenAI models and agents will work inside ServiceNow products, while ServiceNow workflows will become accessible from ChatGPT and Codex. OpenAI also plans to use ServiceNow for its own internal operations, giving the partnership a customer and supplier dimension.
OpenAI described the goal as moving businesses from AI reasoning to governed action. That means an agent can identify a task, consult company information and propose a step, while ServiceNow supplies the workflow rules needed to approve or execute it.
- The new ChatGPT connection uses ServiceNow Action Fabric, according to OpenAIâs October 28 announcement.
- ServiceNow said the arrangement will connect enterprise context, permissions and approvals to AI-assisted work.
- OpenAI and ServiceNow had already offered tools for employee assistance, summaries, writing and software development, TokenPost reported on October 29.
How will the new ChatGPT connection work?
The planned ServiceNow plugin will let ChatGPT interact with approved enterprise workflows rather than operating only as a conversational layer. A user could ask for help with an internal request, while ServiceNow applies the organizationâs access policies and routes the work through the relevant process.
The distinction matters because enterprise AI must do more than generate text. It must identify the right record, respect an employeeâs authority and create an auditable trail. ServiceNowâs Action Fabric is intended to provide that connection between external agents and internal actions.
- ServiceNowâs October 28 financial-results release called the plugin the starting point for the expanded partnership.
- OpenAI said the integration is designed to help businesses build applications, resolve IT requests and address security issues.
- ServiceNow said enhanced capabilities are planned for release by the end of 2026, according to TradingKeyâs October 29 report.
What changes for cybersecurity teams?
ServiceNow and OpenAI are developing a joint security solution that combines OpenAIâs cybersecurity capabilities with ServiceNowâs records on assets, identities, access and business operations. The proposed system would help security teams investigate vulnerabilities, rank risks and coordinate remediation across the organization.
The partnership also points toward ServiceNowâs âShift Zeroâ approach, which aims to identify and address attack paths before attackers exploit them. The companies said the intended coverage includes code, applications, workloads, networks and identities. The announcement describes a development plan, not a claim that every capability is already generally available.
- BusinessWire reported on October 28 that the tools are intended to identify, triage, validate and mitigate attack paths.
- The planned security solution will combine cyber models with ServiceNowâs asset, access and enterprise context.
- ServiceNow separately announced AI Passport on October 15 as an authority layer for controlling what agents and Model Context Protocol servers can do.
How does Codex fit into ServiceNow development?
OpenAIâs Codex will be integrated with ServiceNowâs AI Workflow Factory, giving developers access to ServiceNow business context and platform capabilities while building applications. OpenAI models will also power Build Agent and Autonomous Engineer, tools aimed at modernizing workflows and replacing fragmented legacy applications.
That combination targets a problem shared by large companies: software teams understand business needs, but the relevant rules, records and dependencies often sit across old systems. Putting coding assistance alongside ServiceNowâs workflow data could reduce the gap between writing an application and fitting it into enterprise operations.
- ServiceNow and OpenAI announced the Codex integration on October 28, 2026.
- Build Agent and Autonomous Engineer are intended to support application development and modernization, OpenAI said.
- The companies described the aim as moving customers from disconnected legacy applications to modernized ServiceNow workflows.
Why are governance and internal operations central to the deal?
Enterprise agents can take actions that affect employees, customers, systems and spending. ServiceNow is positioning governance as the operating layer that determines which agent may act, what information it can use and when a human approval is required. OpenAIâs planned use of ServiceNow internally will also test that model in daily company operations.
ServiceNowâs AI Passport announcement provides relevant background. The company said on October 15 that the product would control the authority of agents and Model Context Protocol servers at each point in a multi-agent workflow. ServiceNow also said its broader governance tools can help organizations discover active AI, control agent behavior and measure spending against outcomes.
- ServiceNowâs October 15 announcement identified runtime governance as part of its operational AI approach.
- The company said AI Passport is designed to set authorization boundaries for agents and MCP servers.
- ServiceNow and OpenAI are also exploring voice-driven governance and risk assessment for ServiceNowâs Super Intelligence Control Tower.
What happens next for customers?
The immediate next step is product integration. Customers will look for details on availability, supported workflows, security controls, data handling and pricing before deploying the connections at scale. The October 28 announcement sets out several areas of cooperation, but it does not provide a complete rollout schedule for every planned capability.
ServiceNowâs customers are likely to assess the offer against existing AI tools, internal development teams and security platforms. The strongest use cases will depend on clean enterprise records and carefully defined permissions. Without those foundations, faster automation could also make incorrect or unauthorized actions easier to perform.
- The ChatGPT plugin is the first named connection in the expanded partnership.
- Security and Risk products powered by OpenAI cyber models remain a collaboration under development.
- Codex, Build Agent and Autonomous Engineer extend the relationship into application creation and modernization.
For ServiceNow, the agreement strengthens its position as a control layer for enterprise AI. For OpenAI, it offers access to structured workflows, permissions and operational data. The commercial test will be whether businesses can turn that combination into reliable action without losing oversight.


