email functionality (inbound and outbound) within ServiceNow SecOps

[ShivamM84489555]

I'm currently working on integrating email functionality (inbound and outbound) within ServiceNow SecOps and would appreciate your insights on the following:

1. What plugins or configurations are required to enable full email integration in SecOps?
2. Which of these plugins are paid and which are unpaid/out-of-the-box?
3. What email-related functionality is available out-of-the-box (OOB) in SecOps?
4. What customizations are typically required to support advanced use cases (e.g., parsing structured email content, triggering playbooks, etc.)?
5. Are there any dedicated Knowledge Articles or Community posts that walk through this setup or best practices?

[Voona Rohila]

Hi @ShivamM84489555 

This can be achieved with the Inbound actions or Inbound flows and doesn't require any seperate plugin for these 2 as inbound actions/flows are available with base module.

Take a look at below link on few examples of Security incidents created from phishing emails-https://www.servicenow.com/docs/bundle/yokohama-security-management/page/product/security-incident-r...

Also you can install the plugin in your PDI, you can take a look on what inbound actions are available OOTB.