--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-zurich-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3bz bundleId : - delta3bz --- # Combined Now Assist for Vulnerability Response release notes for upgrades from Zurich to Brazil # Combined Now Assist for Vulnerability Response release notes for upgrades from Zurich to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 9 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Now Assist for Vulnerability Response Release Notes for Upgrades from Zurich to Brazil This consolidated release notes document assists ServiceNow customers in preparing for the upgrade of Now Assist for Vulnerability Response from the Zurich to the Brazil release. It covers new features, changes, activation guidance, and important upgrade considerations to help ensure a smooth transition and maximize the value of the product within your security operations. Show full answer Show less ## Key Features * **Generative AI Integration:** Retrieve vulnerability and exposure data using natural language queries. This includes data from both host Vulnerability Response (VR) and Application Vulnerability Response (AVR) within Unified Security Exposure Management (USEM) and legacy workspaces. * **Custom API Connectors in Security Posture Control (SPC):** Developers can use generative AI-enabled Connector builder framework to quickly create and automate API service graph connectors. This facilitates integration with security tools and improves asset data import tailored to your environment. * **Risk Prioritization Insights:** AI-generated contextual summaries and actionable recommendations in the Security Exposure Management workspace help prioritize critical risks and speed remediation efforts. * **Approval Impact Analysis:** Generative AI provides on-demand recommendations to approve or reject Exception Change Approval requests, enabling faster and more consistent decision-making. * **Granular Role Management:** New granular roles control read/write access to Remediation Compliance Insights data, with inheritance to existing vulnerability roles, improving security and operational control. * **Duplicate Vulnerable Item Identification:** AI-powered detection of duplicate host vulnerable items imported from scanners, allowing automatic closure of duplicates and consolidation of detections to primary records. * **Preferred Vulnerability Solutions:** AI analyzes remediation options from integrated third-party sources (e.g., Red Hat, Tenable) and internal systems to recommend the most viable fixes for specific configuration contexts. * **Agentic Workflows with USEM:** Vulnerability exposure assessment and remediation status analysis workflows help monitor exposure to known vulnerabilities, track SLA compliance, and identify remediation gaps by severity and assignment group. ## Important Upgrade Information * Default activation of Now Assist skills: Upgrading to Brazil will automatically activate certain Now Assist skills if they were previously unconfigured, while skills previously toggled off remain inactive. Full control to deactivate skills remains after upgrade. * Dependency management: Updating the ServiceNow Otto for Unified Security Exposure Management application automatically updates dependent applications. * Role configuration: Additional security role assignments are required for agentic workflows and AI agents to function correctly. * AI usage measurement has shifted to a 365-day burn-down model resetting at contract anniversary, affecting usage tracking and planning. ## Changes and Deprecations * The product is being prepared for future deprecation starting with Zurich Patch 12. It will no longer be installed on new instances but remains supported for existing customers. * No features or functionality were removed or deprecated specifically in the Brazil release. * Minor adjustments to usage measurement and default AI skill activation behavior were implemented starting in prior releases and continue through Brazil. ## Activation and Additional Requirements * ServiceNow Otto for Unified Security Exposure Management, including Now Assist for Vulnerability Response capabilities, is available via the ServiceNow Store. * Installation and activation instructions are provided via the ServiceNow Store and associated documentation. * No additional browser, localization, or accessibility requirements were introduced or changed in the Brazil release. ## Expected Outcomes for ServiceNow Customers * Enhanced ability to leverage generative AI for vulnerability data retrieval, risk prioritization, remediation guidance, and approval workflows. * Improved efficiency through automated API connector creation and duplicate vulnerability management. * Greater control over role-based access to AI-generated remediation insights and workflow execution. * Streamlined exposure assessment and remediation compliance monitoring with agentic workflows. * Proactive preparation for the eventual deprecation of Now Assist for Vulnerability Response, ensuring customers can plan for future transitions. Consolidated page of all release notes for Now Assist for Vulnerability Response from Zurich to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Now Assist for Vulnerability Response release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Now Assist for Vulnerability Response to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__2} | Release | Release notes | |-|-| | Zurich | Upgrade information : The following Now Assist skills for ServiceNow Otto for Unified Security Exposure Management are activated by default. * Recommend preferred solution for VIT (VR) * Vulnerable item de-duplication (VR) * Approval Recommendation (VR)(USEM) * Security Exposure Management (SEM) Insights (VR)(USEM) * SPC Setup Connector (Security Posture Control) Note: Upgrading the Now Assist plugins activate any designated skills that were previously untouched by the customer. * If you have the plugins installed but never touched the configuration (never activated the skill nor adjusted associated roles) of a skill, any Default On skill will be activated on a per skill basis upon upgrading. * If you have previously toggled a skill from active and then back to inactive or have updated any roles for that skill, that skill remains inactive upon upgrading. * You maintain full control over deactivating individual skills at any time after activation. When you update the ServiceNow Otto for Unified Security Exposure Management application, the dependency applications are automatically updated. For more information about required applications for ServiceNow Otto for Unified Security Exposure Management, see [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-vr&family=zurich&ft:locale=en-US). | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Now Assist for Vulnerability Response. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__10} | Release | Release notes | |-|-| | Zurich | [Retrieve vulnerability and exposure data with generative AI](https://www.servicenow.com/docs/access?context=retrieve-vr-data&family=zurich&ft:locale=en-US) : Chat with an AI agent using natural language to retrieve host (Vulnerability Response) and Application Vulnerability Response (AVR) data in the Unified Security Exposure Management (USEM) and legacy Vulnerability Response workspaces. [Role configuration required for agentic workflows and AI agents](https://www.servicenow.com/docs/access?context=aia-role-masking&family=zurich&ft:locale=en-US) : Agentic workflows and AI agents included with your applications require additional security configuration. If you select Users with selected roles for your user access security controls for an agentic workflow or AI agent, you must add the installed roles, or they will not execute. See the documentation for the agentic workflow or AI agent for the specific roles you must add. [Create a custom API service graph connector in the Security Posture Control (SPC) workspace](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=zurich&ft:locale=en-US) : Use generative AI to help your developers create SPC API connectors quickly with the Connector builder framework module in the SPC workspace. With a Now Assist skill that is included with the ServiceNow Otto for Unified Security Exposure Management application, your developers have the option to automate steps in the Connector builder framework. * Automate the steps for selecting API templates, populating request and header parameters, and response field mapping. * Use your custom API connector to integrate with security tools and import asset data that is based on the unique requirements of your environment. * Help your cybersecurity teams monitor your overall security posture and identify assets that are missing key security tools with the API connectors that you build. See [Creating your own API connector](https://www.servicenow.com/docs/access?context=spc-creating-sgc-template&family=zurich&ft:locale=en-US) for more information and the required applications. [Generate insights to prioritize risks](https://www.servicenow.com/docs/access?context=sem-insights-skill&family=zurich&ft:locale=en-US) : Use generative AI to provide contextual summaries, actionable recommendations, and quick links in the Security Exposure Management Workspace, helping you prioritize critical risks and accelerate remediation. [Generate recommendation for approval impact analysis](https://www.servicenow.com/docs/access?context=sem-approval-recommendation-skill&family=zurich&ft:locale=en-US) : Use generative AI to provide on-demand recommendations to approve or reject a request directly from the Exception Change Approval record. This features enables approvers to make fast, consistent decisions while reducing manual analysis effort. [Granular roles](https://www.servicenow.com/docs/access?context=now-assist-vr-acticvate-agentic-workflow&family=zurich&ft:locale=en-US) : The sn_vul_ai.write_rem_insights and sn_vul_ai.read_rem_insights granular roles have been added and are inherited by the sn_vul.vulnerability_admin and sn_vul.vulnerability_analyst roles automatically. These roles provide you with more control over read and write access for the records on the Remediation Compliance Insights \[sn_vul_ai_remediation_insights\] caching table. The VR.System role also inherits these granular roles so background job execution for the workflow can occur. [Identify duplicate vulnerable items with generative AI](https://www.servicenow.com/docs/access?context=dedupe-host-vi-now-assist-vulnerability-response&family=zurich&ft:locale=en-US) : Use generative AI to identify duplicates for your active host vulnerable items that are imported by your vulnerability scanners. Use generative AI reasoning with Now Assist to help your analysts differentiate between primary vulnerability items (VITs) and those VITs that are duplicates. Close duplicate VITs and move their associated detections automatically to the primary VIT records. [Identify preferred vulnerability solutions with ServiceNow Otto for Unified Security Exposure Management](https://www.servicenow.com/docs/access?context=solutions-now-assist-vulnerability-response&family=zurich&ft:locale=en-US) : Use generative AI to analyze available remediation options pulled from integrated third-party products like Red Hat, Tenable for Vulnerability Response, or internal solution management systems. Evaluate each option against the specific configuration item context, for example, the OS version or software version, and get recommendations for the most viable fix for implementation. [Agentic workflows with USEM](https://www.servicenow.com/docs/access?context=using-now-assist-ai-agents-vr&family=zurich&ft:locale=en-US) : The assess vulnerability exposure agentic workflow enables vulnerability managers to determine your exposure to vulnerabilities. * Determine your exposure to the most current Cybersecurity and Infrastructure Security Agency (CISA) known vulnerabilities in your environment. Assess their potential impact to your configuration items (CIs) and business services. * Identify assets with Common Vulnerabilities and Exposures (CVEs). * Determine the number of active VITs that correspond to CVEs. Create watch topics for VIT remediation. The analyze vulnerability remediation status agentic workflow helps vulnerability managers to monitor and assess remediation target compliance. * Track Service Level Agreement (SLA) compliance - Understand how effectively your organization is meeting remediation goals for vulnerabilities based on your SLAs. * Analyze missed SLAs by severity, assignment group, and configuration item (CI) class. Pinpoint gaps in remediation by categorizing overdue VITs based on severity, assignment groups, and CI classes to enable targeted interventions and smarter resource allocation. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Now Assist for Vulnerability Response features. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__18} | Release | Release notes | |-|-| | Zurich | [Changes to Now Assist usage measurement](https://www.servicenow.com/docs/access?context=monitoring-now-assist-usage&family=zurich&ft:locale=en-US) : Starting with Australia Early Access, AI usage measurement is transitioning from a 365-day look-back model to a 365-day burn-down model, with usage resetting at the contract anniversary date. For more information, refer to [KB KB2704710: AI Usage - Overview \& New Measurement Logic](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2704710). [Some generative AI skills are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=zurich&ft:locale=en-US) : The new default behavior works as follows: * New customers: When you install an AI product, designated skills are turned on automatically. * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill is turned on automatically (the skill was never configured and turned on, then turned off again). Previously configured skills that were turned on, then off, remain inactive. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some Now Assist for Vulnerability Response features or functionality were removed. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Now Assist for Vulnerability Response features or functionality were deprecated. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__34} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Now Assist for Vulnerability Response. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__42} | Release | Release notes | |-|-| | Zurich | Activation information : Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Install ServiceNow Otto for Unified Security Exposure Management by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: ServiceNow Otto for Unified Security Exposure Management is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Now Assist for Vulnerability Response we have noted them here. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Now Assist for Vulnerability Response we have noted them here. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__58} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Now Assist for Vulnerability Response, such as specific requirements or compliance levels. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__66} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Now Assist for Vulnerability Response we have noted them here. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__74} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Now Assist for Vulnerability Response we have noted them here. {#dfrn3-nowassistforvulnerabilityresponse-summary__entry__82} | Release | Release notes | |-|-| | Zurich | Starting with Zurich Patch 12, Now Assist for Vulnerability Response is being prepared for future deprecation. It will be hidden and no longer installed on new instances but will continue to be supported. For details, see the [Deprecation Process \[KB0867184\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB0867184) article in the Now Support Knowledge Base. The change is reflected in the name of ServiceNow® products, including Now Assist for Vulnerability Response which is called ServiceNow Otto for Unified Security Exposure Management with these enhancements. See [ServiceNow Otto for Unified Security Exposure Management](https://www.servicenow.com/docs/access?context=now-assist-for-usem-landing-ties&family=zurich&ft:locale=en-US) for more information. Your entitlements remain unchanged. Check your entitlements to determine your access to specific features. [Zurich Patch 5](https://www.servicenow.com/docs/access?context=zurich-patch-5&family=zurich&ft:locale=en-US) * Review changes to Now Assist usage measurement. See the "Changed in this release" section below. * Retrieve host (Vulnerability Response) and Application Vulnerability Response (AVR) data with the Retrieve VR Data agentic workflow. * The Retrieve VR Data agentic workflow is supported in the Unified Security Exposure Management (USEM) and legacy Vulnerability Response workspaces. [Zurich Patch 4](https://www.servicenow.com/docs/access?context=zurich-patch-4&family=zurich&ft:locale=en-US) * Some Now Assist skills are now turned on by default. * Use generative AI to help you build custom API connectors in the Security Posture Control workspace. * Additional role configuration required for agentic workflows and AI agents included with your applications. [Zurich Patch 1](https://www.servicenow.com/docs/access?context=zurich-patch-1&family=zurich&ft:locale=en-US) * Help analysts identify and remove duplicate host vulnerable items. * Help analysts resolve remediation tasks with preferred vulnerability solutions from third-party vendors. Zurich Early Availability: Help your vulnerability managers and analysts to resolve remediation tasks, assess your exposure to vulnerabilities, and analyze metrics for remediation targets. Chat with AI agents in natural language from the Now Assist panel. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ]