The first wave of enterprise AI was about copilots: tools that help humans write, summarize, search, and analyze. The next wave is more dangerous and more valuable: agents that can actually do work.
That shift creates a simple problem. A chatbot can be wrong and annoying. An agent can be wrong and expensive. It can file a support ticket, approve a refund, change a system setting, email a customer, open a pull request, or trigger a workflow that touches five departments.
So the bigger agents become, the more companies need a control layer above them: a place to assign permissions, route work, audit decisions, enforce policy, monitor failures, and shut down bad behavior before it spreads.
Possible 2026–2027 spend as pilots become governed deployments.
Plausible control-plane and governance software opportunity.
If autonomous enterprise work becomes a major software category.
The thesis in plain English.
AI agents will not live as random bots scattered across a company. At scale, that is chaos. They will need management. The winning platforms may become the enterprise AI control tower: the trusted layer where work is assigned, governed, observed, and improved.
Think of it like an airport control tower. Planes can move fast, but they do not decide the whole traffic system by themselves. The tower coordinates where they go, when they move, what path they take, and when they need to stop.
Unless you are flying into LaGuardia — then all bets are off.
This is not just an AI feature story. It is a workflow, security, identity, observability, and compliance story. The companies that already control those layers have a better chance of capturing value than a standalone agent startup with no enterprise trust, no workflow footprint, and no permission graph.
Why ServiceNow may be the cleanest public-market expression.
ServiceNow is already positioned as a system of action for large enterprises. It does not merely store records. It routes work. It connects departments. It tracks service requests, approvals, incidents, employee workflows, customer operations, and IT processes.
That matters because agents need somewhere to act. An agent that answers a question is useful. An agent that safely completes a workflow is more valuable. ServiceNow’s advantage is that many of the workflows AI agents would automate already pass through its platform.
The upside case is that ServiceNow turns AI agents from a productivity add-on into a platform expansion: more workflow volume, more automation, more premium AI modules, and more reason for customers to standardize around Now as the operating layer for enterprise work.
My working estimate: a $1B–$2B revenue opportunity for ServiceNow by 2030 is reasonable if agent governance becomes a real category. A $3B+ bull case is possible if the company becomes one of the default control towers for enterprise AI work.
Other companies that could benefit.
This will not be winner-take-all. Agent governance will be bundled into the platforms companies already trust. The question is which control point matters most: workflow, identity, CRM, cloud, security, or observability.
Best pure-play fit. ServiceNow can govern agents through enterprise workflows, approvals, tickets, incidents, and cross-department processes.
Microsoft can bundle agents into Office, Teams, Azure, GitHub, security, and enterprise identity. Less pure, but massively distributed.
Salesforce could benefit where agents touch sales, service, marketing, customer data, and front-office automation.
Agents need identity, access limits, and permissioning. Okta could matter if companies treat agents like managed digital workers.
Agents will fail in weird ways. Datadog could help monitor agent behavior, system impact, performance, and reliability.
Cybersecurity platforms can benefit if agent sprawl creates new attack surfaces, privilege risks, and policy-enforcement needs.
The pushback: this may get bundled.
The biggest risk to the thesis is not that agent governance is unimportant. It is that no one gets paid separately for it. Microsoft could bundle it. Salesforce could bundle it. ServiceNow could include enough governance inside broader AI SKUs that the revenue line is hard to see.
That does not kill the thesis, but it changes how investors should think about it. The value may show up as higher retention, stronger expansion, premium AI attach rates, better workflow volume, or a more durable platform multiple — not always as a clean “AI control tower” line item.
What would prove the thesis right?
- Customers move from pilots to production. Agent deployments start touching real workflows, not just demos and internal experiments.
- Governance becomes a buying requirement. CIOs and CISOs ask how agents are permissioned, audited, monitored, and shut down.
- ServiceNow shows AI monetization. AI features improve growth, retention, seat expansion, workflow volume, or net revenue retention.
- Identity and security vendors talk about agent access. Agents become managed digital identities with policies, logs, and permissions.
- Failures create urgency. A few visible agent mistakes may push enterprises toward stricter control layers.
What would weaken it?
- Agents stay narrow. If agents remain simple copilots, the control-tower need is smaller.
- Enterprises refuse autonomy. If companies keep humans fully in the loop, governance still matters but the revenue opportunity shrinks.
- Cloud platforms absorb the category. If Azure, AWS, and Google own the control layer, workflow platforms may capture less value.
- AI spend gets cut. If ROI disappoints, agent projects could stall before governance becomes a major budget.
Edge view.
The thesis is simple: companies will not let AI agents run freely through their systems without oversight.
If agents become real digital workers, enterprises will need a way to control what they can do, where they can act, when humans need to approve them, and how every action gets logged. That makes ServiceNow interesting. It is not the only company that could benefit, and the stock is not cheap. But if AI agents become part of everyday enterprise work, the platform that coordinates and governs that work could become one of the most important software control points of the next decade.