ITOM: What You're Buying and Why It Gets Expensive

ServiceNow IT Operations Management (ITOM) is one of the platform's most powerful product lines — and consistently one of the most over-purchased. Organisations regularly buy the full ITOM stack (Visibility, Discovery, Health) based on aspirational roadmaps, then find that adoption stalls at Discovery basics while Visibility and Health licences accumulate as expensive shelfware.

Understanding the functional and commercial differences between ITOM Visibility, Discovery, and Health — and the agent vs agentless licensing trade-offs — is the prerequisite for buying only what your organisation will actually use and getting full value from what you do buy.

3
Core ITOM products: Visibility, Discovery, Health
CMDB
Population is the primary driver of ITOM value — and complexity
Agent
vs Agentless discovery: cost and coverage implications differ significantly
30%
Typical ITOM adoption rate in low-maturity deployments

The ITOM Product Line Explained

ITOM Visibility
Discovery-as-a-Service

Cloud-native infrastructure visibility using agentless, pattern-based discovery. Populates the CMDB with configuration items (CIs) from cloud environments (AWS, Azure, GCP), on-premises infrastructure, and network devices. The entry-level ITOM product for organisations needing CMDB population without deep operational intelligence. Priced per managed node/CI.

ITOM Health
Operational Intelligence

Event Management, operational telemetry correlation, and AIOps capabilities. Ingests alerts from monitoring tools (Dynatrace, Datadog, Splunk, PagerDuty, etc.), correlates them against CMDB service maps, and provides alert reduction and root cause intelligence. The most expensive ITOM component — and the one most often purchased ahead of the CMDB and process maturity needed to extract value.

Licensing Models: How Each Product Is Counted

ITOM licensing is node-based or subscription-based — a fundamentally different model from the per-fulfiller user licensing that governs ITSM, CSM, and HRSD. This distinction matters because ITOM costs scale with your infrastructure footprint, not your staff headcount.

ITOM Visibility Licensing

Priced per managed cloud node or on-premises CI under management. Organisations pay for the volume of configuration items they want Visibility to discover and maintain in the CMDB. The count includes servers, VMs, network devices, and cloud resources actively managed through the platform.

ITOM Discovery Licensing

Priced per managed node — typically the number of physical servers, VMs, or devices actively being discovered and mapped. The key commercial variable is how you define "under management": every device that Discovery actively scans and maps requires a licence. Devices discovered but excluded from active management (e.g., network infrastructure not under ITSM scope) may not require full Discovery licences — this is a negotiation point, not a fixed rule.

ITOM Health Licensing

Event Management is typically priced on a per-event-source or per-node basis, depending on your contract. Organisations that integrate multiple monitoring tools generate significantly higher event volumes — and potentially higher licence requirements — than single-tool environments. Understanding your event source architecture before purchasing Health is essential for accurate cost modelling.

The CI Count Problem

Many organisations underestimate their managed CI count at contract time and face true-up exposure at renewal. Dynamic cloud environments — particularly AWS and Azure auto-scaling groups — can create and destroy CIs continuously. If your Discovery licence covers a fixed node count and your cloud footprint grows, you may be running unlicensed CIs without realising it. Negotiate a buffer or a dynamic pricing mechanism for cloud-native environments where CI count is inherently variable.

Visibility vs Discovery: The Core Difference

The most common procurement question in ITOM is whether an organisation needs both Visibility and Discovery, or whether one product serves their needs. The functional differences are meaningful:

CapabilityITOM VisibilityITOM Discovery
Primary use caseCloud infrastructure inventory and CMDB populationFull hybrid infrastructure discovery, application service mapping
Discovery methodAgentless, API-based cloud connectorsAgentless probes + MID Server; agent optional
CMDB relationship depthStandard CI attributes; cloud topologyDeep relationship mapping; application dependency mapping
On-premises coverageLimited — primarily cloud-nativeFull — on-premises, cloud, hybrid
Application service mapsBasicFull application service mapping
Typical buyerCloud-first orgs; CMDB starter use casesHybrid infrastructure; mature ITSM orgs with CMDB investment
Licence modelPer managed cloud nodePer managed node (physical/virtual/cloud)

For organisations with primarily cloud-native infrastructure and a clear use case limited to cloud CMDB population, Visibility alone may be sufficient. For any organisation with significant on-premises infrastructure, mixed environments, or a requirement for application service dependency mapping, Discovery is the correct product. Buying Visibility when you need Discovery leaves functional gaps that undermine your CMDB investment.

ITOM Health: When You Need It (and When You Don't)

ITOM Health (Event Management / AIOps) is the most frequently over-purchased ITOM component. The value proposition — correlating monitoring alerts against your CMDB service map to reduce noise and accelerate root cause analysis — is genuine and significant when the underlying prerequisites exist. Those prerequisites are:

Organisations that purchase ITOM Health before their CMDB is mature typically achieve less than 30% of potential value — and in some cases create additional operational complexity managing incomplete correlation output. If your CMDB accuracy is below 80% for in-scope services, defer Health and invest first in Discovery adoption and CMDB hygiene.

CMDB Population Requirements and Cost Implications

The CMDB is the data foundation that makes every ITOM product valuable. Without an accurate, maintained CMDB, ITOM Discovery generates data that goes stale, Visibility produces cloud topology maps that nobody trusts, and Health correlates alerts against phantom or outdated CIs.

CMDB population has its own cost implications beyond the ITOM product licences:

Agent vs Agentless Discovery: Cost and Coverage Trade-offs

ServiceNow Discovery supports both agentless (probe-based, using credentials and network access) and agent-based (lightweight agent deployed on managed nodes) discovery. Each model has different cost, coverage, and operational implications:

DimensionAgentless DiscoveryAgent-Based Discovery
Infrastructure requirementMID Servers + network access + credentialsAgent deployed on each managed node
Data richnessGood — standard CI attributes and relationshipsHigher — real-time data, process-level detail
Operational overheadCredential management; MID Server maintenanceAgent deployment and update lifecycle
Firewall/network requirementsDiscovery probes need network access to all targetsOutbound-only from agent; easier in restricted environments
Cloud-native environmentsWell-suited — API-based cloud discoveryLess practical for ephemeral cloud workloads
Cost modelIncluded in Discovery licence; MID Server infra additionalAdditional agent licences may apply depending on contract

Most enterprise deployments use a hybrid approach: agentless discovery as the primary method for cloud and network devices, agent-based for on-premises servers where richer real-time data is required. Confirm with ServiceNow whether your contract permits the agent-based model before planning architecture — agent licences are sometimes counted separately.

Avoiding Shelfware: Practical Optimisation

Negotiation Strategies

Unsure if your ITOM deployment is delivering value?

Redress Compliance assesses ITOM licence utilisation, CMDB maturity, and contract structure to identify overspend and optimisation opportunities.