--- sourceDocument: Australia Workflow Data Fabric sourceDocumentLink: https://www.servicenow.com/docs/r/australia/integrate-applications Release : - australia ft:locale : - en-US ft:publication_title : - Australia Workflow Data Fabric ft:clusterId : - crint bundleId : - crint workflow : - Creator --- # Microsoft Security Response Center Spoke # Microsoft Security Response Center Spoke {#msrc-spoke-dec__msrc-spoke} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Microsoft Security Response Center Spoke The Microsoft Security Response Center (MSRC) Spoke enables ServiceNow customers to integrate the Microsoft Security Response Center API with their ServiceNow instance. This integration facilitates the investigation of reported security vulnerabilities affecting Microsoft products and services, helping to manage security risks and maintain system protection effectively. Show full answer Show less ## Key Features * **Integration Hub Requirement:** The spoke requires an Integration Hub subscription to function. * **Supported Versions:** Designed for Microsoft Security Response Center API version 2020, with potential compatibility with later versions. * **Dependencies:** Requires installation of dependent plugins such as IntegrationHub Action Step - REST, Complex Object, and IntegrationHub Runtime. Some plugins may require additional licensing. * **Spoke Actions:** * **Abuse Management:** Submit Abuse Report to Microsoft Computer Emergency Response Team via the Common Abuse Reporting System (CARS). * **Security Management:** Retrieve specific security update details by CVRF ID, look up all Microsoft security updates, or search updates by ID, CVE, or year. * **AI Agents:** Includes a Microsoft Security Response Center security management AI agent that retrieves security update details. Customers can create and customize AI agents within agentic workflows to automate tasks intelligently. * **Connection and Credential Management:** Utilizes Integration Hub aliases for managing connection and credential profiles efficiently across multiple environments, reducing maintenance overhead when credentials change. ## Practical Benefits for ServiceNow Customers * Streamlines and automates the handling of Microsoft security vulnerability reports directly within ServiceNow. * Enhances security risk management by providing timely access to Microsoft security updates and abuse reports. * Leverages AI agents to perform security-related tasks intelligently, increasing operational efficiency. * Reduces administrative effort through centralized credential and connection management. * Supports customization and extension of AI agents to fit specific organizational workflows. Integrate the Microsoft Security Response Center API with your ServiceNow instance to investigate all reports of security vulnerabilities affecting the Microsoft products and services, and gather information to manage security risks and keep the system protected. ## Request apps on the Store {#msrc-spoke-dec__section_sz5_jv3_z3b} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#msrc-spoke-dec__inline-send-to-store} ## Integration Hub subscription {#msrc-spoke-dec__section_ik4_xcs_xnb} This spoke requires an Integration Hub subscription. For more information, see [Legal schedules - IntegrationHub overview](https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/snc-addendum-integrationhub.pdf). ## Spoke version {#msrc-spoke-dec__section_un4_vdx_gwb} Microsoft Security Response Center spoke v1.3.0 is the latest version. For version history of the spoke, see [Microsoft Security Response Center Spoke release notes](https://www.servicenow.com/docs/r/store-release-notes/store-integrationhub-rn-ms-src.html).{#msrc-spoke-dec__ms-sec-respns-cent-ver} ## Supported versions {#msrc-spoke-dec__section_jk4_xcs_xnb} This spoke was built for Microsoft Security Response Center API version 2020, but may be compatible with later versions. ## Spoke dependencies {#msrc-spoke-dec__section_ok4_xcs_xnb} If you're having trouble installing the app, ensure that these dependent plugins are installed: * ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest) * Complex Object (com.glide.cobject) * ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime) {#msrc-spoke-dec__ul_pk4_xcs_xnb} Note: Some of these plugins are licensable features and require appropriate licenses, if used outside the spoke implementation. ## Spoke actions {#msrc-spoke-dec__section_uk4_xcs_xnb} The Microsoft Security Response Center spoke provides actions to automate tasks when events occurs in your ServiceNow instance. Available actions include: {#msrc-spoke-dec__table_vk4_xcs_xnb__entry__3} | Category | Action | Description | |-|-|-| | Abuse Management | Submit Abuse Report | Submits report to the Microsoft Computer Emergency Response Team using the Common Abuse Reporting system (CARS). | | Security Management | Get Security Update Details | Retrieves information about the specific CVRF ID. | | Security Management | Look up Security Updates | Retrieves the list of all Microsoft security updates. | | Security Management | Look up Security Updates By Key | Retrieves the list of security updates based on the provided ID, CVE, or year. | [ ] {#msrc-spoke-dec__table_vk4_xcs_xnb} ## Available AI agents {#msrc-spoke-dec__section_f33_3ds_k2c} Install Now Assist for Integration Hub and start using the available AI agents. For more information, see [ServiceNow Otto for Integration Hub](https://www.servicenow.com/docs/Y_ulHyk23rZDpUMHAIeScg "Use the ServiceNow Otto AI agents to mimic human-like intelligence by using Large Language Models (LLMs) to perform tasks that range from simple automated responses to complex problem-solving. Utilize the conversational ability of Integration Hub spoke actions."). This spoke provides standalone AI agents that mimic human-like intelligence to perform tasks in your ServiceNow instance. * In the ServiceNow agentic system, you can create an agentic workflow that comprises of a set of large language model (LLM) instructions along with one or more standalone AI agents to execute an objective. See [Create an agentic workflow](https://www.servicenow.com/docs/access?context=configure-use-case-ai-agents&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) for information about adding AI agents to create agentic workflows as per your requirement and provide the required trigger. You can also search for other available AI agents and add them to your agentic workflow. See [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) for more information. * You can create a clone of the required spoke AI agent and customize it as per your requirement. See [Duplicate an AI agent](https://www.servicenow.com/docs/access?context=clone-ai-agent&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) for more information about creating a clone. * See [AI Agent Studio (legacy)](https://www.servicenow.com/docs/access?context=na-ai-agents&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) for information about AI agents. {#msrc-spoke-dec__ul_tjz_vtr_m2c} Available AI agent is Microsoft Security Response Center security management AI agent. This AI agent retrieves details of the security updates based on the provided ID, CVE, or year. There might be AI agents installed on your instance that are not used in agentic workflows. To learn how to see all agents that are available to you, see [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US). Note: Ensure that the user running an AI agent has the required roles and permissions to access data or perform operations on data in the table that is associated with the AI agent. ## Connection and credential alias requirements {#msrc-spoke-dec__section_bl4_xcs_xnb} Integration Hub uses aliases to manage connection and credential information, and OAuth credentials. Using an alias eliminates the need to configure multiple credentials and connection information profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection. For information about setting up the spoke, see [Set up the Microsoft Security Response Center spoke](https://www.servicenow.com/docs/YyCxk1v9epAD6J_uAbbhWw "Set up an outbound integration between your ServiceNow instance and the Microsoft Security Response Center instance by setting up a connection and credential record.").