---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configure the Application List, SCA and Secret integrations

# Configure the Wiz Application Vulnerabilities Integration {#ariaid-title1}

Release version: Australia  
Updated September 3, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Configure the Wiz Application Vulnerabilities, SCA, and Secrets Integrations.

## Before you begin

Role required: sn_vul_wiz.configure_integration

## About this task

The following table describes the benefits and users for the application vulnerability integrations.{#avr-wiz-config__avr-wiz-config-context-1}
{#avr-wiz-config__table_avr_wiz_benefits__entry__4}

| Supporting core application | Benefit | Wiz Integration | Users |
|-|-|-|-|
| Application Vulnerability Response | Import application, Software Composition Analysis (SCA) findings data. | Wiz SCA Findings Integration | Vulnerability managers and analysts and AppSec teams. |
| Application Vulnerability Response | Import Secrets (passwords, tokens and keys) data | Wiz Secret Findings Integration | Vulnerability managers and analysts, Cloud security and access management teams. |
| Application Vulnerability Response | Import an application inventory from Wiz and create application records that vulnerability and compliance findings can be linked back to. | Wiz Application List Integration | Vulnerability managers and analysts, software asset managers and teams, and application owners. |
[ ]

{#avr-wiz-config__table_avr_wiz_benefits}

## Procedure

1. Navigate to AllWiz Vulnerability IntegrationAdministrationConfiguration.
2. Select the App Vulnerabilities Configuration tab.
3. Fill in the fields.  
   {#avr-wiz-config__table_mmk_zty_43c__entry__2}

   | Field or check box | Description |
   |-|-|
   | Application List Record Count | Enter a value up to 1000 for the number of records processed at a time by the Application List Integration. |
   | Software Composition Analysis (SCA) Findings Record Count | Enter a value up to 1000 for the number of records processed at a time by the SCA Findings Integration. |
   | Manage Exceptions in ServiceNow | Choose one. Not selected. Leave the check box unselected to maintain the state of deferred findings imported from Wiz. Ignored findings (status: REJECTED) imported from Wiz are displayed as findings (application vulnerable items) in the state: Deferred reason: Risk Accepted in your ServiceNow AI Platform® instance. Selected. Select the check box if you want to process ignored findings from Wiz with the Exception Management workflow in your ServiceNow AI Platform® instance. Ignored findings (status: REJECTED) imported from Wiz are transitioned to the Open state in your instance. |
   | Secret Findings Record Count | Enter a value up to 1000 for the number of records processed at a time by the Secret Findings Integration. |
   [ ]

   {#avr-wiz-config__table_mmk_zty_43c}
4. **Optional:** Backdate the integration run.  
   See [Configure the Vulnerability Response Integration with Wiz](https://www.servicenow.com/docs/FbcsqPQ~sLsKDLREXvLhFA "Configure the integration in your Wiz service account and assign roles in your ServiceNow AI Platform instance.") for more information.
5. Select Save and test.  
   If the credentials have been saved and validated successfully a message is displayed. You can select filtering for another integration import.
   * Application List Integration - Imports applications data from Wiz to the Discovered Applications \[sn_vul_app_release\] table. Populates fields such as, Product Model, Source application ID for Wiz, and the GitHub link \[url\] for the repository.
   * SCA Findings Integration - Imports SCA data and creates a finding (AVIT) on the Application Vulnerable Items \[sn_vul_app_vulnerable_item\] table. Data includes the associated vulnerability, discovered application, and package. On the Findings tab, the Source AVIT ID is provided by Wiz. Source link points to the Wiz endpoint. The integration checks to see if a discovered application record exists, and, if one is not found, one is created.
   * Secret Findings Integration - Data includes the associated vulnerability, discovered application, and Source AVIT ID and Source severity on the Findings tab.

   {#avr-wiz-config__ul_rc4_lcz_43c}

   Data population. For more information about Application Vulnerability Response, integrations, and imported data, see [Exploring Application Vulnerability Response](https://www.servicenow.com/docs/f_ns8m5SwM0B38fyd4Ck7w "Application vulnerabilities are vulnerabilities on your custom software applications that are scanned throughout the application’s development life cycle.").

*[\>]: and then