Operational Technology Vulnerability Response release notes

  • Release version: Store
  • Updated June 11, 2026
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Operational Technology Vulnerability Response release notes

    The Operational Technology Vulnerability Response (OTVR) application on the ServiceNow Store helps manufacturers aggregate and manage OT vulnerability data, enabling risk-based actions within the context of production processes. It integrates with ServiceNow’s Industrial Workspace and supports remediation task management, risk visualization, and vulnerability exception handling.

    Show full answer Show less

    Key Features and Enhancements

    • Integration and Compliance: Certified for multiple ServiceNow releases including Australia Patch 3, Xanadu, Washington DC, Vancouver, Utah, and Tokyo.
    • Unified Security Exposure Management (USEM): Starting version 30.0.2, OTVR consolidates with Vulnerability Response apps under USEM. Migration via the Migration Assistance Tool is required for upgrades.
    • Industrial Workspace Improvements: OT Vulnerable Items (VITs) list, Remediation Tasks list, and Vulnerability Exception Approvals list enhance visibility and management of OT vulnerabilities and remediation efforts.
    • User Interface Enhancements: Improved UI options to view solutions and vulnerable item details, along with updated OTVR dashboards for tracking vulnerable items, risk rollups by equipment model entity, and remediation progress.
    • Role and Task Management: Introduction of the OT Vulnerability Remediation Owner role to streamline remediation task management across multiple sites.
    • Support for Common Security Advisory Framework (CSAF): Enables importing solutions from multiple vendors, improving vulnerability data integration.
    • Risk Visualization: Dashboards and visualizations provide insights into risk exposure across equipment model hierarchies, helping prioritize remediation aligned with operational maintenance schedules.

    Practical Impact for ServiceNow Customers

    ServiceNow customers using OTVR can expect enhanced vulnerability management tailored for operational technology environments. The application facilitates centralized visibility into vulnerabilities, supports efficient remediation aligned with production processes, and integrates with broader security frameworks like USEM and CSAF. Upgrading to recent versions ensures compliance with certifications and access to improved dashboards and workspace features, ultimately enabling better risk-based decision-making in manufacturing and industrial contexts.

    Version history for the Operational Technology Vulnerability Response application on the ServiceNow Store.

    Important:
    For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

    Version history

    Version 31.0.0 - June 2026
    New: Certified for Australia Patch 3
    Version 3.1.0 - March 2026
    Changed: Certified for Australia
    Version 30.0.3 - March 2026
    New: Certified for Australia
    Version 30.0.2 - December 2025
    New: Operational Technology Vulnerability Response version 30.0.2 supports the Security Exposure Management Workspace (SEM Workspace) as Vulnerability Response apps are consolidated under Unified Security Exposure Management (USEM) from version 30.0.2.If you are using Operational Technology Vulnerability Response 30.0.2, you must upgrade to USEM using the Migration Assistance Tool to ensure a safe and successful upgrade.
    Version 2.0.5 - August 2025
    • New in Zurich release:
      • OT Vulnerable Items list in the Industrial Workspace to view all the vulnerable items (VITs) that have been created for your OT environment.
      • OT Remediation Tasks list in the Industrial Workspace to view all the remediation tasks that have been created for the respective VITs in your OT environment.
      • OT Vulnerability Exception Approvals list in the Industrial Workspace to view any change of state for approvals and details of requested approvals for a given exception triggered from the Industrial Workspace.
    • Changed in Zurich release: Demo data not required for Operational Technology Risk Calculator plugin
    Version 2.0.4 - February 2025
    • New:
      • Improved UI options to view solutions or details of a vulnerable item (VIT).
      • Manage your vulnerable items and Operational Technology Vulnerability Response data with the improved OTVR (PA) dashboard in the Industrial Workspace.
      • View the risk score of your OT devices at each level of the equipment model with the OT Vulnerability Risk Rollup dashboard.
    Version 2.0.3 - November 2024
    Fixed: Updated with various bug fixes.
    Version 2.0.1 - September 2024
    • New:
      • Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once
      • Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers
      • Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role
      • Mitigate controls using the Libraries module in the Industrial Workspace
      • Multiple OTVR (PA) dashboard updates
      • Certified for Xanadu
    Version 2.0.0 - August 2024
    • Change the Operational Technology Vulnerability Response (OT VR) assignment group field for multiple site records at once
    • Use the Common Security Advisory Framework (CSAF) with multiple vendor support when importing solutions from Aggregators or Trusted Providers
    • Manage remediation tasks more efficiently with the OT Vulnerability Remediation Owner (sn_otvr.remediation_owner) role
    • Mitigate controls using the Libraries module in the Industrial Workspace
    • Multiple OTVR (PA) dashboard updates
    • Certified for Xanadu
    Version 1.0.10 - February 2024
    • Vulnerability Risk Rollup by Equipment Model Entity to provide insight into greatest risk areas in the production process
    • Industrial Workspace landing page visualization to visualize risk by equipment model entity hierarchy
    • OTVR (PA) dashboard to track the volume, performance, and progress of OT vulnerable items
    • Certified for Washington DC
    Version 1.0.9 - August 2023
    Certified for Vancouver.
    Version 1.0.8 - February 2023
    New: Certified for Utah.
    Version 1.0.7 - November 2022
    Fixed: Non-functional Show Duplicate VIs UI action removed from OT remediation task form in Manufacturing Workspace.
    Version 1.0.6 - August 2022
    • New:
      • Vulnerability Risk Rollup by Equipment Model Entity to provide insight into greatest risk areas in the production process
      • Manufacturing Workspace landing page visualization to visualize risk by equipment model entity hierarchy
      • Certified for Tokyo
    Version 1.0.5 - February 2022
    • New:
      • Added ability to create Remediation Tasks for VITs by Equipment Model Entity - enabling remediation activity to align with operational maintenance schedules within an industrial environment.
      • Added visibility for Remediation Tasks in the Manufacturing Workspace and Equipment Model Manager.
    Version 1.0.3 - November 2021
    The ServiceNow Operational Technology Vulnerability Response application enables manufacturers to aggregate OT vulnerability data and take risk-based action with production process context.