Skip to content
Talk to Us

Blocks.ai publishes this comparison and sells in this market. Every claim about another product links to a public source.

ServiceNow AI Control Tower vs Zenity

ServiceNow AI Control Tower

What ServiceNow calls a central hub to discover, secure, govern, observe, and measure AI

Zenity AI Agent Security & Governance Platform

Security and governance platform for AI agents, aimed at security teams

Short answer

ServiceNow calls AI Control Tower a central hub to discover, secure, govern, observe, and measure AI; Zenity is a SaaS AI agent security platform.⁠Source 1, Source 2 ServiceNow says it ties AI assets to your configuration management database (CMDB); Zenity says it can block actions on Copilot Studio, Microsoft Foundry, and coding agents.⁠Source 1, Source 3

By Blocks.ai teamLast checked

Where each one sits

Six layers of running AI agents at a company, and what each product’s own public sources say it covers.

Public sources · checked 2 October 2026
  • Offered
  • Not publicly documented

ServiceNow AI Control Tower

  • Build agents: Not publicly documented
  • Host and run agents: Not publicly documented
  • Identity and access: OfferedScoped OAuth tokens (community docs)⁠Source 4
  • Registry and governance: OfferedAI inventory tied to CMDB⁠Source 1
  • Traffic between agents, tools, and models: OfferedAI Gateway (community docs)⁠Source 5
  • Agents across organizations: Not publicly documented

Zenity

  • Build agents: Not publicly documented
  • Host and run agents: Not publicly documented
  • Identity and access: Not publicly documented
  • Registry and governance: OfferedAI Observability agent inventory⁠Source 6
  • Traffic between agents, tools, and models: OfferedTool-call blocking for coding agents⁠Source 7
  • Agents across organizations: Not publicly documented

At a glance

TopicServiceNow AI Control TowerZenity
Who it’s forServiceNow’s community documentation names AI Stewards, risk and compliance teams, and AI asset owners.⁠Source 8Security teams that need to discover and inventory agents, enforce policies, and reduce unmanaged risk, per Zenity.⁠Source 9
Agents it coversServiceNow says it inventories agents, models, and MCP servers from ServiceNow or third parties.⁠Source 1 Its community docs list discovery across AWS Bedrock, Azure AI Foundry, GCP Vertex AI, and Copilot Studio, among others.⁠Source 10Zenity says it covers agents in Microsoft Copilot Studio, ChatGPT Enterprise, and Salesforce Agentforce; homegrown agents on Azure AI Foundry, AWS Bedrock, or Google Vertex AI; and coding agents such as Cursor.⁠Source 6, Source 7
Where it runsServiceNow says it runs on the ServiceNow AI Platform.⁠Source 1 Data moves from your instance to a central ServiceNow environment, possibly in another region.⁠Source 11Software as a service, deployed on AWS, per its AWS Marketplace listing.⁠Source 2
Pricing modelServiceNow says to contact it for pricing.⁠Source 1 Included in its Foundation, Advanced, and Prime product tiers.⁠Source 12Custom pricing by private offer on its main AWS Marketplace listing; a separate Security Hub Extended listing shows list prices.⁠Source 2, Source 13
Available sinceServiceNow announced general availability on 6 May 2025.⁠Source 14Zenity announced Azure Marketplace (now Microsoft Marketplace) availability in March 2025 and AWS in January 2026.⁠Source 15, Source 16, Source 17

What each one is

ServiceNow AI Control Tower

ServiceNow describes AI Control Tower as a central hub to discover, secure, govern, observe, and measure AI across an enterprise.⁠Source 1 ServiceNow says it inventories agents, models, and MCP servers from ServiceNow and third parties, tied to your configuration management database (CMDB).⁠Source 1

Zenity AI Agent Security & Governance Platform

Zenity is a SaaS security platform for AI agents, which it aims at security teams.⁠Source 2, Source 9 Zenity describes three layers: Surface maps what an agent can reach and how it’s configured, Enforce lets safe actions through and stops unsafe ones, and Protect catches what slips through.⁠Source 9

The differences that matter

  1. How agents get into the inventory

    ServiceNow AI Control Tower

    Connectors discover AI assets on external platforms with credentials you supply, and sync them into an inventory ServiceNow says is tied to the CMDB.⁠Source 1, Source 18, Source 19

    Zenity

    Zenity says AI Observability scans the environment, catalogs agents with their permissions and tool access, and flags agents outside sanctioned deployment channels.⁠Source 6

    ServiceNow’s community documentation says only Managed assets get governance workflows.⁠Source 8 Whether employees or agents can search Zenity’s inventory isn’t in Zenity’s public docs.

  2. Where policy is enforced

    ServiceNow AI Control Tower

    ServiceNow’s community documentation says AI Gateway lets agents connect only to approved, active MCP servers, with tool policies by role, department, or data classification.⁠Source 4, Source 20

    Zenity

    Zenity says its Runtime Boundaries can check agent actions in real time and let them through, block them, or shut the agent down.⁠Source 21

    ServiceNow’s community documentation says AI Gateway supports only remotely hosted MCP servers; Zenity says it blocks only where it runs inline, elsewhere offering detection and posture.⁠Source 3, Source 20

  3. Risk reviews and threat detection

    ServiceNow AI Control Tower

    ServiceNow’s community documentation says AI Stewards approve AI systems, manage risk assessments, and can require approval before builders use an MCP server.⁠Source 8, Source 10

    Zenity

    Zenity says it pairs rules mapped to OWASP LLM and MITRE ATLAS with LLM-based detections, and findings can reach SIEM or SOAR via API.⁠Source 22

    ServiceNow’s community documentation says that, at present, anyone with the AI Steward role sees all AI Control Tower content.⁠Source 23 Role-based access to Zenity’s console isn’t in Zenity’s public docs.

For security teams

What a security review asks, answered from each vendor’s public documentation.

TopicServiceNow AI Control TowerZenity
Network exposureDiscovery authenticates to external platforms with credentials you supply.⁠Source 19 Ports and egress requirements are not publicly documented.Delivered as SaaS on AWS, per its AWS Marketplace listing.⁠Source 2 Monitored agents’ network needs aren’t in Zenity’s public docs.
IdentityServiceNow’s community documentation says AI Gateway issues scoped, short-lived OAuth 2.1 tokens for MCP connections through it.⁠Source 4Zenity says runtime rules can check Okta attributes such as active status, role, department, and job title.⁠Source 21
Access changes and revocationServiceNow says its kill switch can immediately contain a managed agent and revoke all its active credentials across connected systems.⁠Source 24, Source 25Zenity says its kill switch immediately disables an agent’s tool and data access.⁠Source 21 It says rules can shut agents down.⁠Source 21
Audit trailKill-switch containments and some settings changes are logged.⁠Source 24, Source 26 Traces come via trace connections or SDK instrumentation.⁠Source 27Zenity says it logs agent messages and tool calls, and can stream audit log events to Splunk or Microsoft Sentinel.⁠Source 6, Source 28
ComplianceServiceNow says the company has undertaken an annual SOC 2 Type 2 attestation since 2013 and holds ISO/IEC 42001.⁠Source 29Zenity says it has SOC 2 Type II, is ISO 27001 compliant, and announced FedRAMP “In Process” in March 2026.⁠Source 30, Source 31

Full comparison

18 criteria in five groups. Every cell links to its source, or says no public source answers it.

ServiceNow AI Control Tower and Zenity compared on 18 criteria
ServiceNow AI Control TowerZenity
What it is
What it is and who it’s forServiceNow describes it as a central hub to discover, secure, govern, observe, and measure AI across an enterprise, on the ServiceNow AI Platform.⁠Source 1Zenity says it covers agent decisions before, during, and after they happen, across SaaS, homegrown cloud platforms, and end-user devices, for security teams.⁠Source 2, Source 9
MaturityServiceNow announced general availability on 6 May 2025.⁠Source 14 ServiceNow’s community documentation says AI Gateway became generally available on 10 September 2026.⁠Source 32Zenity announced Azure Marketplace (now Microsoft Marketplace) availability in March 2025 and AWS in January 2026.⁠Source 15, Source 16, Source 17
Control
Agent registry and discoveryServiceNow says it auto-discovers agents, models, MCP servers, and datasets into one inventory tied to the CMDB.⁠Source 1 Connectors reach external platforms.⁠Source 18Zenity says AI Observability scans and catalogs agents in SaaS platforms, custom builds, and on laptops, with their permissions and tool access.⁠Source 6
Identity and access controlServiceNow’s community documentation says AI Gateway verifies agent identity and issues scoped, short-lived OAuth 2.1 tokens for MCP connections through it.⁠Source 4Zenity says Boundaries rules can reference Okta attributes such as active status, role, and department.⁠Source 21 Issuing agent identities isn’t in Zenity’s public docs.
Ownership, policy, and revocationServiceNow says AI assets can carry ownership.⁠Source 1 The kill switch covers agents on ServiceNow and four connected platforms.⁠Source 33Zenity says rules can allow an action, block it, or shut the agent down, but it blocks inline only on Copilot Studio, Microsoft Foundry, and coding agents.⁠Source 3, Source 21
Audit log and observabilityTraces come via trace connections or SDK instrumentation.⁠Source 27 Audit logs show some configuration changes.⁠Source 26 Each kill-switch containment is audited.⁠Source 24Zenity says it logs agent messages, tool calls, retrievals, and handoffs.⁠Source 6 It says its audit log events can stream to Splunk or Microsoft Sentinel.⁠Source 28
Connection
How agents connectServiceNow’s community documentation says agents using AI Gateway call a ServiceNow-hosted URL, not the MCP server, which must be remote.⁠Source 5, Source 20Zenity says OpenTelemetry agents can connect, with an Evaluate API for enforcement; coding agents can use hooks.⁠Source 7, Source 28 Network needs: not in Zenity’s public docs.
Agents across organizationsSystems like Microsoft Agent 365 can discover publishable agents via an open API.⁠Source 34 Bringing in agents another organization controls: not publicly documented.Not in Zenity’s public docs; its product docs require a login (checked 2 October 2026)⁠Source 35
Protocol supportIts community docs call AI Gateway its MCP enforcement layer.⁠Source 4 ServiceNow’s separate AI Agent Studio can connect external agents over A2A.⁠Source 36Zenity says OpenTelemetry agents can connect; its detection shows requests and responses between agents.⁠Source 22, Source 28 Whether Zenity supports A2A isn’t publicly documented.
Frameworks, models, and clouds supportedServiceNow says it inventories agents, models, and MCP servers from ServiceNow or third parties.⁠Source 1 Outside platforms need connectors you set up.⁠Source 18, Source 19Zenity says it blocks inline on Copilot Studio, Microsoft Foundry, and coding agents; elsewhere, such as Agentforce, it offers detection and posture only.⁠Source 3
Operations
Deployment options and data residencyServiceNow says it runs on the ServiceNow AI Platform.⁠Source 1 Data may go to a central ServiceNow environment in another region or a third-party cloud.⁠Source 11Software as a service, deployed on AWS per its AWS Marketplace listing.⁠Source 2 Hosting regions and self-hosting aren’t in Zenity’s public docs.
Compliance attestationsServiceNow says the company has undertaken an annual SOC 2 Type 2 attestation since 2013.⁠Source 29 It says the company holds ISO/IEC 42001 certification.⁠Source 29Zenity says the company holds SOC 2 Type II certification and is ISO 27001 compliant.⁠Source 30 It announced FedRAMP “In Process” status in March 2026.⁠Source 31
Support and SLAServiceNow’s company-wide Customer Support Addendum states a 99.8% availability SLA for production instances.⁠Source 37 Its community docs point to Now Support.⁠Source 10Zenity’s terms commit to at least 99.9% monthly uptime, with commercially reasonable efforts.⁠Source 38 Support requests go through Zendesk in business hours.⁠Source 38
Time and effort to get runningInitial setup uses a Guided Setup widget.⁠Source 39 Discovering outside agents needs a connector and credentials you supply.⁠Source 18, Source 19 Features depend on your license.⁠Source 40Zenity describes step-by-step guides for connecting custom agents via Cribl, LiteLLM, and Kong; its Cursor plugin installs in Cursor desktop.⁠Source 28, Source 41
Pricing model and public pricesIncluded in every tier; full management of external AI needs a separate license.⁠Source 12 ServiceNow’s community documentation says usage-based costs may apply.⁠Source 20, Source 23Main AWS Marketplace listing: custom pricing by private offer.⁠Source 2 Security Hub Extended listing: $130 per resource a month for Observability.⁠Source 13
Building
Agent building toolsServiceNow’s separate AI Agent Studio creates, configures, and deploys agents.⁠Source 42 Creating new custom agents is supported only in the Prime tier.⁠Source 12Not in Zenity’s public docs; its product docs require a login (checked 2 October 2026)⁠Source 35
Model accessAI model provider settings cover ServiceNow-supported providers, such as Now LLM Service, and providers your organization configures.⁠Source 26Zenity says its threat detection pairs rules mapped to OWASP LLM and MITRE ATLAS with LLM-based detections.⁠Source 22 The models it uses aren’t in Zenity’s public docs.
Integrations and ecosystemServiceNow’s community documentation names discovery connectors for Databricks, Snowflake, and Hugging Face, and says connectors can also be custom-built.⁠Source 8, Source 10Zenity says it integrates with Microsoft Agent 365 and the Extended plan for AWS Security Hub.⁠Source 43, Source 44 It announced a ServiceNow SecOps partnership in March 2026.⁠Source 45

Which to choose

Choose ServiceNow AI Control Tower if

  • Your ServiceNow tier already includes AI Control Tower, which ServiceNow says ties AI assets to your CMDB.⁠Source 1, Source 12
  • You want one inventory that ServiceNow says covers agents, models, MCP servers, and datasets, with connectors to platforms outside ServiceNow.⁠Source 1, Source 18
  • You want a kill switch that can contain a managed agent and revoke all of its active credentials, with an audit trail.⁠Source 24, Source 25
  • You want AI compliance content: ServiceNow’s pack covers the EU AI Act, NIST AI RMF, California SB 53, and Colorado’s AI Act.⁠Source 46

Choose Zenity if

  • You need coding agents such as Claude Code and Cursor covered; Zenity says it covers them and can block dangerous tool calls.⁠Source 7
  • You want the rule checks Zenity says it runs on agent actions, blocking inline on Copilot Studio, Microsoft Foundry, and coding agents.⁠Source 3, Source 21
  • You want what Zenity says it offers: agents found by scanning, including on laptops, with each agent’s permissions and tool access attached.⁠Source 6
  • You want what Zenity says it offers: audit log events in Splunk or Microsoft Sentinel, or findings in AWS Security Hub Extended.⁠Source 28, Source 44

Questions buyers ask

Does Zenity partner with ServiceNow?

Zenity announced a partnership with ServiceNow in March 2026: as a Build Partner, Zenity is to bring agent security, posture management, and vulnerability assessment into ServiceNow Security Operations (SecOps).⁠Source 45 ServiceNow’s docs say its separate AI Security Exposure Management imports AI posture findings from Zenity.⁠Source 47

How is each one priced?

ServiceNow says to contact it for pricing; every tier includes AI Control Tower.⁠Source 1, Source 12 ServiceNow’s community documentation says usage-based costs may apply.⁠Source 20, Source 23 Zenity’s main AWS Marketplace listing is by private offer; a Security Hub Extended listing shows $130 per resource monthly for Observability.⁠Source 2, Source 13

Do they support MCP and A2A?

ServiceNow says AI Control Tower inventories MCP servers; per its community documentation, AI Gateway governs MCP connections.⁠Source 1, Source 4 A2A is documented for ServiceNow’s separate AI Agent Studio.⁠Source 36 Zenity says its Cursor plugin maps Cursor agents to their MCP endpoints.⁠Source 41 Whether Zenity supports A2A isn’t publicly documented.

Can either one shut down an agent?

ServiceNow says its kill switch can immediately contain a managed agent and revoke all of its active credentials across connected systems.⁠Source 24, Source 25 Zenity says its kill switch immediately disables an agent’s tool and data access, and rules can shut an agent down.⁠Source 21

How we compare

Read the full method

Every claim on this page links to a public source. Where none answers a question, the page says so.

We re-check every fact at least every 90 days. This page was last checked .

Something wrong or out of date? Tell us and we’ll correct it.

Sources

52 public sources, each with the date we checked it. Every one opens in a new tab.

  1. Source 1: AI Control Tower - ServiceNow (product page) ServiceNow · checked Back:abcdefghijklmnopqr

  2. Source 2: AWS Marketplace: Zenity Zenity · checked Back:abcdefghi

  3. Source 3: Zenity's Coverage of the 2026 OWASP Top 10 for LLM Apps Zenity · checked Back:abcde

  4. Source 4: What's new in AI Gateway v3.4 - September 2026 release (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back:abcdef

  5. Source 5: AI Gateway Implementation Guide (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back:ab

  6. Source 6: AI Observability | See Every Agent, Know What it Touches | Zenity Zenity · checked Back:abcdefg

  7. Source 7: Coding and Personal Agents | Zenity Zenity · checked Back:abcd

  8. Source 8: AI Control Tower: What's new in the June 2026 release (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back:abcd

  9. Source 9: Platform | AI Agent Security & Governance Platform | Zenity Zenity · checked Back:abcd

  10. Source 10: AI Control Tower Welcome Guide (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back:abcd

  11. Source 11: AI Control Tower (ServiceNow product documentation, Australia release) ServiceNow · checked Back:ab

  12. Source 12: ServiceNow product tiers (ServiceNow product documentation, Australia release) ServiceNow · checked Back:abcde

  13. Source 13: AWS Marketplace: Zenity AI Security & Governance Platform for Security Hub Extended Zenity · checked Back:abc

  14. Source 14: ServiceNow Launches AI Control Tower, a Centralized Command Center to Govern, Manage, Secure, and Realize Value From Any AI Agent, Model, and Workflow (ServiceNow news release, investor relations PDF) ServiceNow · checked Back:ab

  15. Source 15: Zenity Now Available in the Microsoft Azure Marketplace Zenity · checked Back:ab

  16. Source 16: Introducing Microsoft Marketplace - Thousands of solutions. Millions of customers. One Marketplace. - The Official Microsoft Blog Zenity · checked Back:ab

  17. Source 17: Zenity Now Available on AWS Marketplace, Bringing End-to-End Security to Amazon Bedrock AgentCore and Enterprise AI Agents Everywhere Zenity · checked Back:ab

  18. Source 18: Discovering AI assets through connectors (ServiceNow product documentation, Australia release) ServiceNow · checked Back:abcde

  19. Source 19: Configuring connectors (ServiceNow product documentation, Australia release) ServiceNow · checked Back:abcd

  20. Source 20: AI Gateway FAQ (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back:abcde

  21. Source 21: Runtime Boundaries | The Runtime Boundary for Autonomous AI | Zenity Zenity · checked Back:abcdefgh

  22. Source 22: AI Detection and Response (AIDR) | See the Threat, Stop the Action | Zenity Zenity · checked Back:abc

  23. Source 23: AI Control Tower Observability & Monitoring FAQ (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back:abc

  24. Source 24: AI agent containment using kill switch protocol manually (ServiceNow product documentation, Australia release) ServiceNow · checked Back:abcde

  25. Source 25: Configure AI agent containment using kill switch protocol manually (ServiceNow product documentation, Australia release) ServiceNow · checked Back:abc

  26. Source 26: AI model providers (ServiceNow product documentation, Australia release) ServiceNow · checked Back:abc

  27. Source 27: Configuring trace connections (ServiceNow product documentation, Australia release) ServiceNow · checked Back:ab

  28. Source 28: From Triage to Full Coverage: The Shift AI Agent Security Took in August Zenity · checked Back:abcdef

  29. Source 29: Compliance - ServiceNow Trust ServiceNow · checked Back:abc

  30. Source 30: Zenity Trust Center Zenity · checked Back:ab

  31. Source 31: Zenity Achieves FedRAMP “In Process” Status for AI Agent Security Zenity · checked Back:ab

  32. Source 32: What's new in AI Control Tower for August & September 2026 (ServiceNow Community, AI Control Tower articles) ServiceNow · checked Back to text

  33. Source 33: Control enforcement points (ServiceNow product documentation, Australia release) ServiceNow · checked Back to text

  34. Source 34: External Registries (ServiceNow product documentation, Australia release) ServiceNow · checked Back to text

  35. Source 35: Zenity Documentation (login) Zenity · checked Back:ab

  36. Source 36: Integrating external AI agents (ServiceNow product documentation, Australia release) ServiceNow · checked Back:ab

  37. Source 37: Customer Support Addendum (ServiceNow legal schedules, Version 12MAR2025) ServiceNow · checked Back to text

  38. Source 38: Zenity Subscription Terms and Conditions (EULA linked from Zenity's AWS Marketplace listings) Zenity · checked Back:ab

  39. Source 39: AI Control Tower release notes (ServiceNow product documentation, Australia release) ServiceNow · checked Back to text

  40. Source 40: Activating AI Control Tower (ServiceNow product documentation, Australia release) ServiceNow · checked Back to text

  41. Source 41: Seeing Every MCP Connection: Zenity Joins the Cursor Marketplace Zenity · checked Back:ab

  42. Source 42: AI Agent Studio (ServiceNow product documentation, Australia release) ServiceNow · checked Back to text

  43. Source 43: Zenity Now Integrates with Microsoft Agent 365 Zenity · checked Back to text

  44. Source 44: Zenity Selected for AWS Security Hub Extended to Secure Enterprise AI Agents Zenity · checked Back:ab

  45. Source 45: Zenity Announces Partnership with ServiceNow to Operationalize AI Agent Risk Reduction in SecOps Zenity · checked Back:ab

  46. Source 46: AI Risk and Compliance Content Pack (ServiceNow product documentation, Australia release, Governance, Risk, and Compliance) ServiceNow · checked Back to text

  47. Source 47: Resolve tasks for AI assets in Employee Center (ServiceNow product documentation, Australia release) ServiceNow · checked Back to text

  48. Source 48: Your company's private network Blocks.ai · checked Back to text

  49. Source 49: Network requirements Blocks.ai · checked Back to text

  50. Source 50: Solutions: Agent sprawl Blocks.ai · checked Back to text

  51. Source 51: Solutions: Partner networks Blocks.ai · checked Back to text

  52. Source 52: Pricing Blocks.ai · checked Back to text