---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Include Closed Fortify on Demand application vulnerable items

# Include Closed Fortify on Demand application vulnerable items {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
By default, Closed application vulnerable items (AVITs) are not created during Fortify Vulnerable Item integration imports. If you want to create them, you must change a system property.

## Before you begin

The Fortify Vulnerability Integration must be installed and running.

Role required: App-Sec Manager

## Procedure

1. In the left navigation Filter navigator text box, type <kbd class="ph userinput">sys_properties.list</kbd>.
2. In the Name search box for the list, enter <kbd class="ph userinput">sn_vul.create_closed</kbd>.
3. Double-click on the Value field and set to True
4. Click the green check mark icon ![green check mark icon]() to save.  
   Records in the Closed state in the next Fortify import are created as AVITs in Application Vulnerability Response.