Security Operations

Overcome threats and vulnerabilities, improve cyber resilience, and speed response time.

Read Latest Release News

Hot Topics

Security Operations Resource Library
Article

Security Operations Resource Library

Welcome to the Security Operations Resource Library!...

Sarah Wood
2026 Security Operations Events
Article

2026 Security Operations Events

2026 Security Operations Events We look forward to w...

Sarah Wood
Essential Information: VR to USEM Upgrade Guidance
Article

Essential Information: VR to USEM Upgrade Guidance

USEM Launch Details USEM...

andy_ojha
Revolutionizing Security Integration: Introducing the LLM-Powered SIR In...
Article

Revolutionizing Security Integration: Introducing the LLM-Powered SIR In...

Sarah Wood
AI-Powered Optimizations for Vulnerability Management, IT Remediation, a...
Article

AI-Powered Optimizations for Vulnerability Management, IT Remediation, a...

AntonioChallita
Threat Intelligence Security Center (TISC) - Updates : Nov'2024 To June'...
blog

Threat Intelligence Security Center (TISC) - Updates : Nov'2024 To June'...

Kalyan8
The SecOps Team of Agents: Strengthening Your Response to Security Incid...
Article

The SecOps Team of Agents: Strengthening Your Response to Security Incid...

AntonioChallita
The SOC Agent Advantage: Wrap-up your Security Incidents with Ease
blog

The SOC Agent Advantage: Wrap-up your Security Incidents with Ease

Madhumitha Redd
Security Posture Control: Enabling visibility and prioritization in expo...
blog

Security Posture Control: Enabling visibility and prioritization in expo...

Gopi37
Enhancing Security Investigations with AI-Powered Correlation and Now As...
Article

Enhancing Security Investigations with AI-Powered Correlation and Now As...

Miranda Ju
What's New in Security Operations November Store Release
blog

What's New in Security Operations November Store Release

With the 2024 Q4 Store r...

lanemclaughlin
Revolutionizing Security Incident Management: Introducing November Gen A...
Article

Revolutionizing Security Incident Management: Introducing November Gen A...

Miranda Ju
What's New in Security Operations- Xanadu Release
Article

What's New in Security Operations- Xanadu Release

With the 2024 Xanadu rel...

lanemclaughlin
Threat Intelligence Security Center (TISC) updates from August and Novem...
blog

Threat Intelligence Security Center (TISC) updates from August and Novem...

Kalyan8

Getting Started

Welcome Guide

Major Security Incident Management Welcome Guide

Product Checklist (SIR)

Product Checklist (VR)

Quick Start (Setting up section)

FAQ

Measure and Grow

Measuring Success

Product Docs

Performance and Measurement

Value Measurement

Connect at events

Office Hours: Unified Security Exposure Management (USEM) - Migra...

Online 01/15/26

Get Started with Security Operations Applications

Online 01/20/26

ServiceNow Exchange: Security Operations Applications Office Hour...

Online 01/27/26

Live on ServiceNow: Security Operations Applications Office Hours

Online 01/27/26

On Demand Events

Live on ServiceNow: What's New f...
Event

Live on ServiceNow: What's New f...

08/06/2025

Abigail Lavadia
Live on ServiceNow: Optimizing S...
Event

Live on ServiceNow: Optimizing S...

07/22/2025

Lolita Honkpo
Get Started With Security Operat...
Event

Get Started With Security Operat...

07/15/2025

Lolita Honkpo
On Demand Webinar: AI-driven thr...
Event

On Demand Webinar: AI-driven thr...

06/05/2025

Megan Le
What's New for Security Operations
Event

What's New for Security Operations

05/21/2025

Lolita Honkpo
"Success with VR" webinar series
Article

"Success with VR" webinar series

For those of you which have joined the "Success with...

Eliz Skogquist
"Success with SIR" webinar series
Article

"Success with SIR" webinar series

For those of you which have joined the "Success with...

Eliz Skogquist
Webinar: Empower the CISO’s orga...
Event

Webinar: Empower the CISO’s orga...

03/26/2025

Megan Le
Understanding Vulnerability Response and Configuration Compliance for Co...
Article

Understanding Vulnerability Response and Configuration Compliance for Co...

Eliz Skogquist
Leveraging the Cybersecurity Executive Dashboard
Article

Leveraging the Cybersecurity Executive Dashboard

Andy Ojha, Principal Out...

Eliz Skogquist
On Demand Webinar: Learn how AI ...
Event

On Demand Webinar: Learn how AI ...

09/25/2024

Megan Le
"Success with SIR" webinar: Understanding SI task types, Security KBs an...
Article

"Success with SIR" webinar: Understanding SI task types, Security KBs an...

Eliz Skogquist
Understand Threat Intelligence Security Center's Value to your Organizat...
Article

Understand Threat Intelligence Security Center's Value to your Organizat...

Eliz Skogquist
Take a look at the Major Security Incident Management Bootcamp
Article

Take a look at the Major Security Incident Management Bootcamp

Eliz Skogquist

Resources

What's New Blog

Release Notes

Entitlements

Store

SecOps roadmap

This is a private group

SecOps roadmap

Activity in SecOps

Ask a Question

Question status: Question status:

Sorted by:

Featured Essential Information: VR to USEM Upgrade Guidance

USEM Launch Details USEM - Unified Security Exposure Management - is the next evolution of Vulnerability Response (VR) USEM features are made available in Vulnerability Response v30x Vulnerability Response v30x was officially launched and released...

Article
USEM
USEM Upgrade
VR v30x

Featured From Manual to Magical: How AI Elevates Security Incident Quality Assessments

In the ever-evolving world of cybersecurity, speed and consistency of investigation aren’t just advantages but essentials. It’s common for Security Operation Centers (SOCs) at large organizations to encounter over 1,000 security incidents per month. ...

Article
Quality Assessment

Featured USEM - Release Highlights and Upgrade Information

IMPORTANT: For Unified Security Exposure Management (USEM) Migration Guidance refer to Essential Information: VR to USEM Upgrade Guidance ServiceNow Unified Security Exposure Management (USEM) is the next evolution of Vulnerability Response. ...

Article
Unified Security Exposure Management
USEM
VR
Vulnerability Response

Featured Revolutionizing Security Integration: Introducing the LLM-Powered SIR Integration Builder 🚀

Transform Integration Building from Weeks to Hours!We're thrilled to announce a game-changing innovation that will revolutionize how security integrations are built: the LLM-Powered Security Incident Response (SIR) Integration Builder. This groundbre...

Article
Gen AI
Integrations
Now Assist for SecOps
Now Assist for SIR
SecOps
Security Incident Response

Featured Recommended Training for Security Operations

ServiceNow training and certification sets you and your business up for success, which is why it’s critical to make training an essential part of your ServiceNow program. By building the right skills, you can deliver more value more quickly, increase...

Article
Application Vulnerability Response
Configuration Compliance
Container Vulnerability Response
DLP
MSIM
Now Assist for SecOps
Now Assist for SIR
Now Assist for VR
SBOM
SecOps
Security Incident Response
Security Operations

Montreal Learning Lab: AI-Powered Security Exposure Management [USEM]

Looking to get hands-on with ServiceNow? Save the date for our ServiceNow Learning Lab! Save the date! Join our experts the day prior to the ServiceNow AI Summit Calgary on March 4. This one-day workshop is designed to bring together customers...

Event

Calgary Learning Lab: AI-Powered Security Exposure Management [USEM]

Event

Charlotte Learning Lab: AI-Powered Security Exposure Management [USEM]

Looking to get hands-on with ServiceNow? Save the date for our ServiceNow Learning Lab! Save the date! Join our experts the day prior to the ServiceNow AI Summit Charlotte on February 23. This one-day workshop is designed to bring together cus...

Event

VR Remediation Efforts for Remediation Tasks

As a Vuln Response Analyst or Manager, I want to use Remediation Efforts not only to group Items on Watchlists, but I also want to group Rem Tasks into one larger effort. Is there a way to do that or has someone leveraged Efforts for this use?

Question
Application Vulnerability Response
Container Vulnerability Response
Vulnerability Response

Invicti - ServiceNow Application Vulnerable item source severity change by SecCommon System user

When AVIT is created from Invicti, the source severity was High. But then it shows user SecCommon System updated Risk Score and Risk Rating from High to Medium. When checked we could see changes in Vulnerability table sn_vul_app_vul_entry. It too sho...

Question
Application Vulnerability Response
Security Operations

Establishing Vulnerability Response Calculator Rule for Credential scan host coming from Tenable

Hello Community! I am reaching out to get some assistance with establishing Vulnerability response calculator rule to calculate weighted average score from the severity of the identified credential host from Tenable to ServiceNow.I want to use this f...

Question

2026 Security Operations Events

2026 Security Operations Events We look forward to welcoming you at our 2026 Security Operations events! Check out the links below to register and please be sure to bookmark this page as we will be updating the list regularly. UPCOMING EVENTS: J...

Article
Best Practices
Security Incident Response
Security Operations
Unified Security Exposure Management
Vulnerability Response
Webinars

Get Started with Security Operations Applications

Kick off your SecOps journey with our product team! Join us for a practical overview of ServiceNow Security Operations designed to help you get started and succeed with your SecOps implementation. Discover actionable guidance and explore resources to...

Event
Best Practices
Now Assist for SIR
Now Assist for VR
Security Incident Response
Security Operations
Threat Intelligence
Vulnerability Response

Office Hours: Unified Security Exposure Management (USEM) - Migration and Adoption

NEW Office Hours: Unified Security Exposure Management (USEM) - Migration and Adoption Join the ServiceNow Security Operations product team for a live, drop‑in forum dedicated to Unified Security Exposure Management (USEM) upgrade and migration. Br...

Event
Unified Security Exposure Management

Office Hours: Unified Security Exposure Management (USEM) - Migration and Adoption

Event
Unified Security Exposure Management

Office Hours: Unified Security Exposure Management (USEM) - Migration and Adoption

Event
Unified Security Exposure Management

Office Hours: Unified Security Exposure Management (USEM) - Migration and Adoption

Event
Unified Security Exposure Management

Office Hours: Unified Security Exposure Management (USEM) - Migration and Adoption

Event
Unified Security Exposure Management

How to resolve Form Sections duplication while moving update set to other instance

The duplicate form section are generated while committed the update set to test instance. Even Try with creating new form View but facing the same problem.Need Help how can be resolve this?

Question
Security Incident Response

(White Paper) Incomplete IP Identified Devices and what to do with them

I have put down my thoughts on how to handle Incomplete IP Identified Devices. I would like to hear your ideas on this topic. How is your organization handling them? (See Attachment)

Question

Ask a Question

Top Helpful Authors

User

Count

Unanswered questions

Subject

Author

Posted

VR and Prisma Registry - Using the Auto-Close Rule...

2 weeks ago

Please upvote idea portal submission regarding mul...

3 weeks ago

Knowledge base for SIR workspace

3 weeks ago

security incident response

4 weeks ago

Scheduled Reports with sn_vul_vulnerability table ...

a month ago

Connect at events

Office Hours: Unified Security Exposure Management (USEM) - Migra...

Online 01/15/26

Get Started with Security Operations Applications

Online 01/20/26

ServiceNow Exchange: Security Operations Applications Office Hour...

Online 01/27/26

Live on ServiceNow: Security Operations Applications Office Hours

Online 01/27/26

Let's connect together

Join us to make our over 900K member community even better. Create your free account and make the world work better for everyone.

Join the Community

Security Operations

Hot Topics

Security Operations Resource Library

Sarah Wood

2026 Security Operations Events

Sarah Wood

Essential Information: VR to USEM Upgrade Guidance

andy_ojha

Revolutionizing Security Integration: Introducing the LLM-Powered SIR In...

Sarah Wood

AI-Powered Optimizations for Vulnerability Management, IT Remediation, a...

AntonioChallita

Threat Intelligence Security Center (TISC) - Updates : Nov'2024 To June'...

Kalyan8

The SecOps Team of Agents: Strengthening Your Response to Security Incid...

AntonioChallita

The SOC Agent Advantage: Wrap-up your Security Incidents with Ease

Madhumitha Redd

Security Posture Control: Enabling visibility and prioritization in expo...

Gopi37

Enhancing Security Investigations with AI-Powered Correlation and Now As...

Miranda Ju

What's New in Security Operations November Store Release

lanemclaughlin

Revolutionizing Security Incident Management: Introducing November Gen A...

Miranda Ju

What's New in Security Operations- Xanadu Release

lanemclaughlin

Threat Intelligence Security Center (TISC) updates from August and Novem...

Kalyan8

Getting Started

Welcome Guide

Major Security Incident Management Welcome Guide

Product Checklist (SIR)

Product Checklist (VR)

Quick Start (Setting up section)

FAQ

Measure and Grow

Measuring Success

Product Docs

Performance and Measurement

Value Measurement

Office Hours: Unified Security Exposure Management (USEM) - Migra...

Get Started with Security Operations Applications

ServiceNow Exchange: Security Operations Applications Office Hour...

Live on ServiceNow: Security Operations Applications Office Hours

On Demand Events

Live on ServiceNow: What's New f...

Abigail Lavadia

Live on ServiceNow: Optimizing S...

Lolita Honkpo

Get Started With Security Operat...

Lolita Honkpo

On Demand Webinar: AI-driven thr...

Megan Le

What's New for Security Operations

Lolita Honkpo

"Success with VR" webinar series

Eliz Skogquist

"Success with SIR" webinar series

Eliz Skogquist

Webinar: Empower the CISO’s orga...

Megan Le

Understanding Vulnerability Response and Configuration Compliance for Co...

Eliz Skogquist

Leveraging the Cybersecurity Executive Dashboard

Eliz Skogquist

On Demand Webinar: Learn how AI ...

Megan Le

"Success with SIR" webinar: Understanding SI task types, Security KBs an...

Eliz Skogquist

Understand Threat Intelligence Security Center's Value to your Organizat...

Eliz Skogquist

Take a look at the Major Security Incident Management Bootcamp

Eliz Skogquist

Resources

What's New Blog

Release Notes

Entitlements

Store