The constraint in enterprise agentic AI is not capability; it is containment. Once an autonomous agent has write permissions across a workflow system, the question is what stops it from executing an action no human approved. ServiceNow CEO Bill McDermott has entered that debate directly, defending his company's relevancy in the agent era and touting a kill switch for rogue AI agents as a core part of the answer.

The control problem that creates the market

When companies deploy autonomous AI agents across enterprise workflows, those agents need real permissions to function. They update records, trigger approvals, and chain those actions together without a human in the loop at each step. The same access that makes an agent efficient makes an unchecked one a liability. McDermott's position is that ServiceNow sits at exactly the right place in the enterprise software stack to serve as the control layer, able to intercept and terminate agent activity before a bad decision propagates through connected systems.

Where ServiceNow sits in the stack

ServiceNow has historically positioned itself as the workflow orchestration layer across the enterprise, managing hand-offs between departments and systems. That position matters for the kill-switch argument. An agent that misfires inside a single application is a contained problem. An agent that misfires inside the orchestration layer touches every application that layer connects to. Placing the off switch at the orchestration level, rather than inside individual agent tools, means one intervention can halt activity across the whole chain.

What "defending relevancy" signals

McDermott's choice to frame his remarks as a defense of relevancy is worth reading carefully. It acknowledges that ServiceNow faces questions about where it fits as enterprise AI moves toward autonomous agents and away from the workflow automation categories the company built its business on. His argument, as reported, is that agent proliferation creates demand for governance infrastructure, and that ServiceNow is positioned to supply it. The kill switch is the product claim that backs the thesis.

Related reading