--- sourceDocument: australia Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/australia/delta-xanadu-australia Release : - australia ft:locale : - en-US ft:publication_title : - australia Combined Product Files ft:clusterId : - delta3ax bundleId : - delta3ax --- # Combined ServiceNow Otto for Security Incident Response (SIR) release notes for upgrades from Xanadu to Australia # Combined ServiceNow Otto for Security Incident Response (SIR) release notes for upgrades from Xanadu to Australia {#ariaid-title1} Release version: Australia Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 6 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined ServiceNow Otto for Security Incident Response (SIR) Release Notes for Upgrades from Xanadu to Australia This consolidated release notes document provides ServiceNow customers with a comprehensive view of all relevant updates, changes, and important upgrade information for ServiceNow Otto for Security Incident Response (SIR) between the Xanadu and Australia releases. It is designed to help you prepare effectively for your upgrade by highlighting what to expect and the required pre- and post-upgrade tasks. Show full answer Show less ## Key Upgrade Information * **Upgrade Preparation:** Review pre- and post-upgrade tasks carefully to ensure a smooth transition to the Australia release. * **Plugin Behavior:** Upgrading the Now Assist plugins will activate any Default On skills that were previously inactive unless you had explicitly deactivated them. You retain full control to deactivate these skills after upgrade. * **Application Renaming:** Starting with version 2.0.1, the "Now Assist for Security Operations" application is renamed to "ServiceNow Otto for Security Incident Response (SIR)." Upgrading to this version is necessary to access new AI-powered features. * **AI Search Requirement:** The AI Search application must be enabled on your instance for recommended action skills to work. Verify via *All \> AI Search \> AI Search Status*, and contact support if it is not enabled. ## New Features and Enhancements No new features were introduced specifically in the Australia release or between Xanadu and Australia for ServiceNow Otto for Security Incident Response (SIR). ## Feature Changes, Removals, and Deprecations There were no changes, removals, or deprecations in ServiceNow Otto for Security Incident Response (SIR) features between Xanadu and Australia. ## Activation and Installation * ServiceNow Otto for Security Incident Response (SIR) is available for installation via the ServiceNow Store. * Customers should request the application from the ServiceNow Store and refer to the store's version history for cumulative release notes. ## Additional Considerations * No updates related to browser requirements, accessibility, localization, or additional technical requirements were made in this upgrade cycle. ## Highlighted Improvements in Yokohama Releases (Relevant to Upgrades) * Improved Now Assist usage measurement and default activation of some AI skills and agentic workflows, with added role configuration requirements. * Introduction of generative AI capabilities such as creating quality assessment reports and shift handover reports through AI agents. * Support for multiple AI model providers including Google Gemini, Anthropic Claude, Now LLM Service, and Azure OpenAI. * Enhanced analyst productivity features like natural language chat with AI agents for incident triage, resolution planning, and incident closure. * Automated generation of resolution notes, recommended actions, post-incident analysis, and correlation insights to improve incident investigation and triage efficiency. ## What This Means for You By upgrading to the Australia release and at least version 2.0.1 of ServiceNow Otto for Security Incident Response (SIR), your security operations team will gain access to enhanced AI-driven assistance embedded in workflows. This includes improved incident triage, resolution, and analysis capabilities powered by generative AI, helping your analysts respond faster and with better context. The upgrade also ensures you have the latest application naming and plugin activation behaviors aligned with ServiceNow's evolving AI platform. Consolidated page of all release notes for ServiceNow Otto for Security Incident Response (SIR) from Xanadu to Australia. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family ServiceNow Otto for Security Incident Response (SIR) release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Australia. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading ServiceNow Otto for Security Incident Response (SIR) to Australia Before you upgrade to Australia, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | Upgrade information : For more information about required applications for ServiceNow Otto for Security Incident Response (SIR), see [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-security-incident&family=yokohama&ft:locale=en-US). Note: Upgrading the Now Assist plugins activate any designated skills that were previously untouched by the customer. * If you have the plugins installed but never touched the configuration (never activated the skill nor adjusted associated roles) of a skill, any Default On skill will be activated on a per skill basis upon upgrading. * If you have previously toggled a skill from active and then back to inactive or have updated any roles for that skill, that skill remains inactive upon upgrading. * You maintain full control over deactivating individual skills at any time after activation. Starting with version 2.0.1, the name of the Now Assist for Security Operations application in ServiceNow® Store and in your ServiceNow AI Platform® instance has changed to ServiceNow Otto for Security Incident Response (SIR). You must upgrade to version 2.0.1 to access the following features: * Generate resolution notes in the Now Assist context menu. * Generate correlation insights for a security incident investigation from the Now Assist panel. The AI Search application must be enabled so that the recommended actions skill works for security incidents. To verify that AI Search is enabled on your instance, navigate to AllAI SearchAI Search Status. Contact support if the page indicates that AI Search is not enabled. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## New features Between your current release family and Australia, new features were introduced for ServiceNow Otto for Security Incident Response (SIR). {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__12} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Changes Between your current release family and Australia, some changes were made to existing ServiceNow Otto for Security Incident Response (SIR) features. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__22} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Removed Between your current release family and Australia, some ServiceNow Otto for Security Incident Response (SIR) features or functionality were removed. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Deprecations Between your current release family and Australia, some ServiceNow Otto for Security Incident Response (SIR) features or functionality were deprecated. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Activation information Review information on how to activate ServiceNow Otto for Security Incident Response (SIR). {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__52} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | Activation information : Install ServiceNow Otto for Security Incident Response (SIR) by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: ServiceNow Otto for Security Incident Response (SIR) is available in ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__72} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for ServiceNow Otto for Security Incident Response (SIR), such as specific requirements or compliance levels. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__92} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__102} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | [Yokohama Patch 11](https://www.servicenow.com/docs/access?context=yokohama-patch-11&family=yokohama&ft:locale=en-US) * Review changes to Now Assist usage measurement. * Some Now Assist skills, agents, and agentic workflows are on by default. * Additional role configuration is required for agentic workflows and AI agents included with Now Assist applications. * Use generative AI to create a quality assessment report of a security incident. * Yokohama Patch 6Help analysts to add security incidents details to the Shift Handover report by chatting with AI agents in the Now Assist panel. * Use Google Gemini and Anthropic Claude on AWS as AI model providers for Now Assist skills and AI agents in addition to Now LLM Service and Azure OpenAI. * Yokohama Patch 3 Help your analysts to gain insight into security incident record metrics with an agentic workflow. Chat with AI agents in natural language from the Now Assist panel. Help your analysts to resolve security incidents by chatting with AI agents in the Now Assist panel where the AI agent provides a resolution plan. * Yokohama Patch 1Help your analysts to close security incidents more efficiently by chatting with AI agents in natural language from the Now Assist panel. * Yokohama early availability * Triage security incidents with long activity streams by reviewing work notes and contextual information quickly in a concise, easy-to-read format. * Automatically generate resolution notes for security incidents by using generative AI. * Generate recommended actions to resolve security incidents. * Generate a post-incident analysis. * Generate correlation insights to help you connect current incidents to past events. By identifying the affected users, configuration items (CIs), or observables (IP addresses and file hashes) from existing incidents, you can help to triage new security incidents. For more information, see [ServiceNow Otto for Security Incident Response (SIR)](https://www.servicenow.com/docs/access?context=now-assist-security-incident-landing&family=yokohama&ft:locale=en-US). | | Zurich | No updates for this release. | | Australia | No updates for this release. | [ ] *[\>]: and then