How did Armis find customers?

Former relationships created a development setting

Yevgeny Dibrov and Nadir Izrael began building with early employees in 2016. Insight describes the initial operational and IoT security product that year. In a 2019 interview, Dibrov said the founders worked with several former Adallom customers to develop the solution. Those relationships supplied access to relevant environments and buyers. [1][2]

[Inference] Trusted access can shorten the path to useful discovery, but it is not proof of product fit. The team still needed to identify a gap worth addressing and show that its approach worked in a setting the buyer understood. A company without those relationships would need another credible way to earn comparable evaluation access.

A customer recognized the coverage problem

Curtis Simpson’s account describes seeing internet-connected devices at Sysco grow beyond conventional agent-based protection. A mutual contact introduced him to Dibrov, and a short proof of value demonstrated broader asset visibility. Simpson later joined Armis after serving as Sysco’s global CISO, bringing firsthand customer experience into the company. [3]

[Inference] This makes the beachhead more precise than organizations that merely own devices. The relevant buyer recognizes meaningful unmanaged exposure and has a reason to question whether existing endpoint coverage is enough. Demonstrating previously unseen assets can make that problem concrete, but the commercial question remains whether the findings justify an actionable operating change.

Visibility and authority are different requirements

[Inference] The security buyer may not control every asset or the processes around it. A device in a hospital or industrial environment can have operational constraints that ordinary corporate IT does not share. A credible purchase must therefore consider deployment, ownership and the consequences of proposed action, rather than assume visibility automatically leads to remediation.

[Inference] A useful evaluation would choose one important asset class, identify its operational owner and agree what can safely change. Those are proposed criteria for understanding the buying problem, not a reconstruction of Armis’s actual sales stages. The supplied material does not verify its early CRM tools, account-executive training or complete implementation methodology.

[Inference] The next commercial step should therefore depend on a customer-owned action plan. An impressive inventory without agreed responsibilities may create urgency while leaving the practical path to value unresolved.

Customer knowledge became an internal capability

Simpson links his move to Armis with his customer experience and a desire to share practical security learning. His role illustrates a specific route from buyer insight to internal expertise. It does not establish that every later sale depended on him or supply a quantified contribution to revenue. [3]

At the announced ServiceNow transaction, Armis emphasized continuity of engineers, researchers, customer-success professionals and existing commitments. Its founder announced completion on April 20, 2026, and the partner portal subsequently directed new applications through ServiceNow’s program. These are documented organizational changes and statements of intent, not verified renewal outcomes. [4][5][6]

Broader coverage must become useful work

[Inference] Platform distribution may create additional opportunities, but integration and customer adoption remain separate tests. Expansion should connect new coverage to owned, prioritized action. Otherwise, a larger inventory can produce more findings without improving the customer’s ability to respond. The same distinction applies before and after an acquisition.

Negotiated prices, first-contract value, CAC, margin, payback and retention cohorts are not verified in this record. Nor is a specific failed early acquisition campaign established.

[Inference] Armis’s transferable lesson is to combine a concrete blind spot with credible operating knowledge. A stronger success measure would track completed risk-reduction work and customer ownership, while including deployment expertise and continued assistance in the economic assessment of each account.