Asset Security Posture Management release notes

  • Release version: Store
  • Updated June 11, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Asset Security Posture Management release notes

    The Asset Security Posture Management (ASPM) application on the ServiceNow Store helps ServiceNow customers maintain a comprehensive inventory of enterprise assets and assess their security posture by identifying coverage gaps and vulnerabilities. It integrates with various security tools and connects asset data to vulnerability insights, enabling enhanced asset security auditing and reporting.

    Show full answer Show less

    Key Features

    • Asset Inventory and Security Gaps: Provides an enterprise-wide asset inventory highlighting security tool coverage lapses, such as missing endpoint protection agents, linked to third-party vulnerability data.
    • Policy-Based Auditing and Insights: Enables activation of built-in or custom policies to audit assets and generate custom insights via various visualizations including comparison charts, policy match counts, percentages, and trends.
    • Security Posture Control Enhancements: Support for new connectors like the Service Graph Connector for XM Cyber and Amazon Web Services (AWS) Web Application Firewall (WAF) as mitigation control sources.
    • Improved Policy Builder: Advanced filtering options such as monitoring assets reported only by specific connections, querying devices by model name, and filtering by timestamps (e.g., first seen or last logon within a specified number of days).
    • Custom Insights Organization: Ability to organize reports into groups on the Configured Insights dashboard, enhancing report management and usability.
    • Security and Platform Compliance: Updated Access Control Lists (ACLs) for CAASM tables aligned with ServiceNow Platform Security guidance to maintain security integrity during upgrades.

    Key Outcomes

    • Customers can systematically audit and monitor their enterprise assets’ security posture with granular control using built-in and custom policies.
    • Enhanced integration with third-party security tools and connectors improves the accuracy and depth of security insights.
    • Upgrades preserve customer customizations and ensure compliance with internal security directives and ServiceNow platform standards.
    • Visual dashboards and widgets enable clear, actionable reporting on asset security coverage and trends, facilitating informed risk management decisions.

    Version history for the Vulnerability Response Asset Security Posture Management application on the ServiceNow Store.

    Important:
    For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

    Version history

    Version 5.5.2 - June 2026
    • The following enhancements and changes support internal security directives. These changes are applied automatically upon upgrade and your customizations on impacted Access Control Lists (ACLs) are preserved:
      • Updated query ACLs for the Asset Security Posture Management (CAASM) tables to align with ServiceNow Platform Security guidance.
      • Renamed the read-only fix script to a per-plugin name to prevent update set conflicts with other Security Operations plugins.
    Version 5.5.1 - December 2025
    New: The Service Graph Connector for XM Cyber (XM Cyber SGC) is supported in Security Posture Control.
    Version 5.3.5 - August 2025
    Fixed: Asset profile-based filtering in custom insights.
    Version 5.3.4 - May 2025
    • New:
      • Supporting changes for Amazon Web Services (AWS) Web Application Firewall (WAF) as a mitigation controls source.
      • Supporting changes for the asset profiles feature introduced for SPC policies.
    Version 5.3.2 - February 2025
    • Fixed:
      • Retired assets are filtered out from key insights.
      • The logic for use cases on the Connectors and Dashboard pages.
      • Conditions for policies that are included with the application.
    Version 5.1.2 - December 2024
    Fixed: The "With IRM Exception" connection in policy builder now renders the properties properly.
    Version 4.0.0 - August 2024
    New: Added Groups to custom insights that organize your reports on the Configured insights dashboard.
    Version 3.0.3 - June 2024
    Fixed: The 'with-connector-data' connection filters for the applicable classes.The class filter evaluates base and child policy conditions for the list of supported classes.
    Version 3.0.2 - May 2024
    • New:
      • Improvements to the policy builder:
        • Select the Reported only by Connection to monitor assets that are reported from a few specific asset sources but not by any other sources.
        • Select the First seen timestamp with the With CMDB Metadata Connection to look for assets that were first discovered within a given timeframe.
        • Select Model name to query devices for specific model information to help you with security control coverage.
        • Select 'Within the last n days' and type in a number of days up to 30. For example, you can monitor assets with last logon data from Active Directory in last 3 days.
    Version 2.0.2 - March 2024
    • Fixed:
      • Updates to support the base policies for the Service Graph Connector for Tenable.
      • Minor issues with dashboard widgets and drill-down logic on the Home page in the Security Posture Control Workspace.
      • Staging table entries are created for policies that don't perform a CMDB query as expected.
    Version 2.0.0 - February 2024
    • New:
      • Activate policies included with the application and start auditing your assets with key use cases.
      • View your asset inventory for the enterprise on the Home page in the workspace.
      • Use your own policies or the policies included with the application to create custom insights.
      • Use the supported custom insight widgets to create the following types of visualizations on the Custom insights dashboard:
        • Comparison charts.
        • Policy Match counts.
        • Policy match percentages.
        • Policy match trends.
    Version 1.0.1 - August 2023 (Vancouver)
    Initial release: This plugin provides you with an inventory of your enterprise assets and identifies their security tool coverage gaps. Assets identified as missing endpoint protection agents, for example, are associated with vulnerability data from third-party vulnerability assessment tools to give you visibility into combinations of the high-risk security lapses on your enterprise assets.