Your company’s AI could delete everything in 9 seconds. ServiceNow wants to be the kill switch

It wasn’t a hypothetical. It wasn’t a cautionary tale from a decade ago. It happened recently at a real company: an AI agent gained elevated permissions and, in 9 seconds, deleted an entire production database—customer records, reservations, every backup. Gone. No attacker. No breach. Just an agent with too much access and no one watching. Bill Mc Dermott put that story in front of 25,000 people at the Venetian Convention Center in Las Vegas on Tuesday morning, and he didn’t soften it. “That’s what an AI agent can do when no one’s watching,” he said. “Governance isn’t a feature. It’s the whole ball game. Because without it, your whole company can come down.” It was a striking opening for a company that has spent the past two years riding the AI wave as hard as anyone in enterprise software. But the move was deliberate. ServiceNow, which will cross nearly $16 billion in subscription revenue this year and has projects that are doubling to $30 billion by 2030, has concluded that the next competitive frontier isn’t AI capability—it’s AI control. And it’s making that bet at precisely the moment when every other vendor is still selling capability. The blind spot Every AI pitch of the past two years has told the same story: here’s what AI can do for your business. Productivity. Innovation. Cost reduction. The gains are real, McDermott acknowledged—ServiceNow has logged them itself, saving half a billion dollars in 2025 through its own internal AI deployment. But something else is happening within enterprises that isn’t making its way into pitch decks. Six out of 10 companies have started deploying agentic AI, but only one in ten has actually built anything autonomous. Meanwhile, as Fortune famously reported in 2025, 95% of enterprises cannot measure the ROI of their AI investment at all. “AI chaos,” McDermott called it. Workers toggling between 17 open tabs, wondering