USEM - Release Highlights and Upgrade Information

[andy_ojha]

IMPORTANT: For Unified Security Exposure Management (USEM) Migration Guidance refer to Essential Information: VR to USEM Upgrade Guidance

ServiceNow Unified Security Exposure Management (USEM) is the next evolution of Vulnerability Response. 

On Nov 19, 2025, we hosted a webinar, “Unleash the future of Vulnerability Management with USEM”.  We welcome you to begin your journey to USEM, by watching the recording below. 

Some of the highlights of the webinar include:  

• USEM is a significant improvement to Vulnerability Response 
• VR v30.x (USEM) will be generally available in the Q4 2025 Release, along with VR v26.x for customers not upgrading to USEM yet 
• Changes in VR with USEM, including User Experience and Core Configuration Experience 
• How reports can be built across all exposure types (VIT, AVIT, CVIT, CTR): 
  • Host VR (VIT) 
  • Application VR (AVIT) 
  • Container VR (CVIT) 
  • Configuration Compliance (CTR) 
• The USEM Migration Toolkit (via Support KB- requires log-in) that aims to make the VR to USEM Upgrade process clear and frictionless 
  

“Unleash the future of Vulnerability Management with USEM” - Recording from Nov 19, 2025 Webinar

As a point of clarification for folks that attended our live webinar on Nov 19 2025, the release date for Q4 2025 Store Applications is now Dec 11, 2025, and as such Vulnerability Response v30.x which introduces USEM functionality is planned to be released to the ServiceNow Store on Dec 11, 2025. 

We welcome you to attend the next set of Live on ServiceNow Events for SecOps including the Q4 2025 VR Roadmap webinar and Q4 2025 What’s New in SecOps webinar. Registration details can be found on the SecOps Events Page. 

For more on USEM, check out Product Docs, the hands-on USEM bootcamp, and the deep dive demo below. We will also be creating additional articles on the SecOps Community to cover USEM topics. Stay tuned for more! 

Your feedback here is welcome, please drop a comment below with feedback on the webinar, along with specific USEM Topics you’d like to see us cover in future Community posts. 

Thank you!  

SecOps Product Management 

[R_Joseph]

Amazing!! USEM looks like a major leap forward for SecOps. Excited for the december release!!

[pierregeage]

Hello, Do you have an idea if Unified Security Exposure Management will become mandatory to replace Vulnerability Response? if yes, What will be this date? thank you

[SCCBMO]

Hello Team,

We are very interested in USEM.  One feature that we have been asking for is a planned remediation date field--that remediation owners can quickly add to the record.  I see USEM has a Missed Remediation Commitment Date field.    Can you provide additional details on how that field is populated?; and is it available across module?

Best,

Shawn

[andy_ojha]

Hi @pierregeage - Thanks for calling that out. 

Please check out the refreshed Article referenced at the top of this page (Essential Information: VR to USEM Upgrade Guidance).  We have listed key dates and current guidance.

https://www.servicenow.com/community/secops-articles/essential-information-vr-to-usem-upgrade-guidan...

[andy_ojha]

@SCCBMO - Hey there, great call out.  The concept of Remediation Owners quickly setting their planning commitment date, is part of the current USEM release (VR v30.2.5).

When a user goes to a Remediation Task in the new Security Exposure Management workspace, they will advance the State of the RT forward

• First with "Start investigation" and then next with "Awaiting Implementation"

• Once you click the "Awaiting Implementation" action button, a pop-up will appear, where the user will enter in their "Remediation commitment date" and "Remediation plan" 

  • This will set the values directly onto the Remediation Task, in the fields 

    • Remediation plan (string field)

    • Remediation commitment date (date/time field)

• This is net new functionality that USEM introduces for Remediation Task records