VR - Product Enhancement Ideas

[Matt Moerloos1]

Hello everyone,

Trying to raise visibility of some Ideas I have recently submitted to the Idea portal to enhance VR & VR Scanner Integration capabilities.

1. VR - False Positive Rules
   1. Currently we have the capability to define "exception" rules to auto-defer VITs within the system. We have had many clients who wanted a similar capability to define condition based rules to automatically mark VITs as False Positives.
   2. https://support.servicenow.com/ideas?id=view_idea&sysparm_idea_id=02b5fd40471d82d0b8a4aa25126d43b6&s... 
2. VR - Scanner Integration (ServiceNow Built) - Additional Filter Options For Scanner Provided Risk Fields.
   1. As you all may well know, most Scanner Integrations built by ServiceNow offer filtering data we ingest by Severity only. Some integrations also offer an "Advanced Filter" where we can modify outbound API Calls to include additional filters. As the industry adopts a Risk Based approach to Vulnerability Remediation, scanners such as Tenable, Qualys, Rapid7, etc have started providing their own Risk Score/Rating fields. Over the past year, most of my clients wanted to filter what was brought into ServiceNow based on these Risk fields. In most cases we could meet this requirement using Advanced Filtering, but in some cases we could not. It would be a value add to natively have the option to filter by these fields directly within the Integration Config Module or Setup Assistant via a checkbox as we currently do for Severity for ServiceNow built integrations.
   2. https://support.servicenow.com/now?id=view_idea&sysparm_idea_id=205875c8475d82d0b8a4aa25126d4340&sys... 

Thank you for your time & consideration!