Security Integration Framework release notes

  • Release version: Store
  • Updated July 9, 2026
  • 4 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Security Integration Framework release notes

    The Security Integration Framework is a ServiceNow Store application that acts as a dependency for Vulnerability Response and Security Incident Response applications. It provides integrations with various security tools and platforms to support vulnerability management, mitigation controls, and security incident workflows.

    Show full answer Show less

    The release notes document the version history from 2019 through July 2026, highlighting new features, enhancements, fixes, and compatibility updates relevant to ServiceNow customers managing security integrations.

    Key Features and Enhancements

    • Support for New Integrations: Recent versions added support for Invicti Platform alongside Invicti Enterprise, SentinelOne for mitigation controls monitoring, Service Graph Connector for Netskope, and integrations with Palo Alto Networks Prisma Cloud Compute, Fortify on Demand, HCL BigFix, Microsoft SCCM, and the National Vulnerability Database (NVD).
    • Configuration Improvements: Administrators can configure parameters for multiple Invicti instances from a single unified page and select the active instance in general settings. A new CI lookup strategy field enables overriding global settings per integration to control how configuration items are created (either as CIs or Product Models).
    • Workflow Management Options: The triaging options on integration configuration pages were refined to allow managing exceptions and false positives directly in ServiceNow workflows, providing more granular control over imported data handling.
    • Security and Performance Fixes: ACL vulnerabilities were addressed to enforce proper authentication for privileged operations. Performance improvements were made related to policy execution. Usability fixes resolved duplicate tabs in admin sections and ensured configuration saving works correctly with proper scope warnings.
    • Compatibility and Certification: The framework has been certified for multiple ServiceNow releases, including Vancouver, Utah, Tokyo, and San Diego families, ensuring smooth integration within those environments.

    Practical Benefits for ServiceNow Customers

    • Enables seamless integration with a broad and evolving set of security tools, enhancing vulnerability and incident response workflows.
    • Provides flexible configuration options that allow tailoring integration behavior to organizational needs, improving accuracy in asset and vulnerability mapping.
    • Improved security and stability through ongoing fixes, making the framework reliable for enterprise use.
    • Supports manual and automated ingestion workflows, improving operational efficiency and data quality within Vulnerability Response.
    • Certification with multiple ServiceNow releases ensures compatibility and reduces upgrade risks.

    What to Expect

    Customers implementing or upgrading the Security Integration Framework can expect enhanced integration capabilities, simplified administration, and improved security posture through timely fixes and support for new security platforms. Administrators should review configuration options, especially regarding CI lookup strategies and instance selection, to optimize integration behavior. Awareness of scope warnings will help avoid configuration issues.

    Version history for the Security Integration Framework on the ServiceNow Store.

    Important:
    For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

    Version history

    Version 13.13.0 - July 2026
    • New:
      • Added support for Invicti Platform as a new integration instance, available alongside the existing Invicti Enterprise integration
      • Administrators can now configure parameters for both Invicti Platform and Enterprise instances from a unified configurations page
      • Added the ability to select which Invicti integration instance to use in general settings
      • The classifier automatically distinguishes between Invicti Platform and Enterprise instances
    Version 13.12.3 - April 2026
    • New: Administrators can now configure a Configuration Item (CI) lookup strategy at the individual integration level, overriding the global system property. A new CI Lookup Strategy field has been added to the integration form with three options: Use System Property (default, preserves existing behavior using the global sn_vul.use_product_model property), Force CI Lookup (always creates configuration items for scanned applications — required for integrations such as Tenable WAS), and Force Product Model (always creates a Product Model). All existing integrations default to Use System Property, ensuring no errors occur as a result of an upgrade.
    • Fixed:
      • Resolved an issue where the vulnerability integration related list appeared twice in the admin section of each integration, causing duplicate tabs to display in the integration implementation configuration.
      • Resolved an issue where users in Global scope could not configure or save credentials for integrations. Configuration attempts would silently fail with no indication of the problem. A scope warning is now displayed, guiding users to switch to the correct application scope before configuring the integration.
    Version 13.12.1 - December 2025
    Fixed: An issue where installing the Mitigation Controls Monitoring application unintentionally removed choice values for the integration_type field in the sn_sec_int_integration table.
    Version 13.11.3 - August 2025
    Fixed: Resolved an issue where the integration instance form related list was not displaying details specific to the integration / scanner.
    Version 13.10.8 - June 2025
    Fixed: Fixed an ACL vulnerability for privileged operations with proper authentication checks.
    Version 6.0.6 - February 2025
    • New:
      • The Service Graph Connector for Netskope is supported.
      • The SentinelOne Integration for mitigation controls monitoring is supported.
    • Fixed:
      • The child policy execution relies on base policy results. You might see performance improvement.
      • The default set of supported classes to the descendants of: 'Computer', 'Netgear', and 'Unclassed hardware'.
    Version 13.10.6 - February 2025
    Changed: Added an additional_integration_types column to the "Third Party Integrations" table to specify the additional integration type information for an integration.
    Version 13.11.0 - November 2024
    No new features or updates included with this version.
    Version 13.10.3 - May 2024
    Minor fixes for this release.
    Version 13.9.2 - February 2024
    Changes to support Invicti and Security Simulation Phishing integration.
    Version 13.8.0 - December 2023
    New: Minor changes to support "First.orgExploit Prediction Scoring System (EPSS) Integration".
    Version 13.6.1 - November 2023
    • Changed:
      • Removed the one 'Triaging in ServiceNow' option on the integration configuration pages and added the following two options to manage imported data using ServiceNow workflows:
        • 'Manage exceptions in ServiceNow' and 'Manage false positives in ServiceNow'.
        • By default, these options are set to 'true' but can be changed.
    Version 13.5.0 - August 2023
    Changed: Version 13.5.0 certified for Vancouver, Utah, and Tokyo.
    Version 13.4.1 - May 2023
    New: Added capabilities to create discovered items, vulnerable items, and detections at the parent instance level for an instance.
    Version 13.3.0 - November 2022
    Minor fixes for this release.
    Version 13.2.2 - August 2022
    New: Added changes to support manual ingestion in Vulnerability Response and other new features.
    Version 13.1.3 - March 2022
    • New:
      • Shipped new integration records for the following applications and integrations:
        • The Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute in the Vulnerability Response and Configuration Compliance for Containers application.
        • Fortify on Demand in Application Vulnerability Response.
        • HCL BigFix and Microsoft SCCM patch orchestration integrations in Vulnerability Response.
    Version 13.0.2 - February 2022
    No new features or updates are included with this version. This version ensures that features from the last release are compatible with the San Diego family release.
    Version 12.2.1 - October 2021
    Changed: Added the Operational Technology Vulnerability Integration (OTVUL) option in the Integration Type (integration_type) column of Third Party Integration table (sn_sec_int_integration), in order to support the Operational Technology (OT) Vulnerability Integration
    Version 12.1.3 - June 2021
    Fixed: Minor fixes.
    Version 12.0.1 - February 2021
    New: Added a new Vulnerability Response Integration with the National Vulnerability Database (NVD) to import data from the NIST National Vulnerability Database.
    Version 11.1.3 - December 2020
    Changed: With Key Management Framework plugin, developers will have an ability to manage keys used for Password2 fields through crypto module definition.
    Version 11.1.0 - November 2020
    This is a dependency app for Vulnerability Response and Security Incident Response applications.
    Version 11.0.2 - October 2020
    This is the Dependency App for Vulnerability Response and Security Incident Response applications.
    Version 10.3.0 - June 2020
    This is the dependency app for Vulnerability Response and Security Incident Response applications.
    Version 9.0.3 - November 2019
    This is the Dependency App for Vulnerability Response and Security Incident Response applications.
    Version 8.0.8 - June 2019
    This is the Dependency App for Vulnerability Response and Security Incident Response applications.