Now Assist for Security Incident Response

  • Release version: Zurich
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Now Assist for Security Incident Response Release

    Now Assist for Security Incident Response enhances the efficiency of security analysts by utilizing intelligent workflows and generative AI skills to resolve security incidents. This application allows security managers to quickly review incident contexts and closure notes, access post-incident analysis data, and view recommended remediation steps in a user-friendly format.

    Show full answer Show less

    Key Features

    • Intelligent Workflows: Streamlines incident resolution processes for security analysts.
    • Generative AI Skills: Assists in summarizing details and generating closure notes for incidents.
    • Concise Reporting: Provides a clear overview of incidents and recommended actions for efficient decision-making.
    • Data Handling: Transfers data to a centralized ServiceNow environment while adhering to internal policies.
    • Data Collection: Gathers inputs and outputs to improve ServiceNow technologies, with options for customers to opt-out of data collection.

    Key Outcomes

    By implementing Now Assist for Security Incident Response, customers can expect improved incident management efficiency, enhanced decision-making capabilities, and access to actionable insights. It is crucial for users to understand the limitations of AI and ensure human oversight when deploying this application, especially in critical fields such as healthcare or finance.

    Security analysts can use intelligent workflows and ServiceNow generative AI skills to help them resolve security incidents. Security managers can review the context of security incidents and closure notes quickly in a concise, easy-to-read format, view post-incident analysis data, and see recommended remediation steps with the Now Assist for Security Incident Response application.

    Get started

    Important:
    • Not all model providers are available for customers with in-country SKUs, and some Now Assist products/features are currently unavailable for in-country customers. For more information, see the KB1584492 article in the Now Support Knowledge Base. Be sure to check for model provider availability updates in future releases.
    • Some Now Assist products/features are currently unavailable for customers in the FedRAMP, NSC DOD IL5, or Australia IRAP-Protected data centers, self-hosted customers, or in other restricted environments. For more information, see the KB0743854 article in the Now Support Knowledge Base. Be sure to check for availability updates in future releases.
    • Some Now Assist products/features are currently available only for customers in some regions. Be sure to check for availability updates in future releases.
    • Some AI products and skills are not available in Regulated Markets. For more information, see KB2593939: Regulated Markets AI Products/Skills Not Available. Be sure to check for availability updates in future releases.

    Troubleshoot and get help

    AI limitations

    This application uses artificial intelligence (AI) and machine learning, which are rapidly evolving fields of study that generate predictions based on patterns in data. As a result, this application may not always produce accurate, complete, or appropriate information. Furthermore, there is no guarantee that this application has been fully trained or tested for your use case. To mitigate these issues, it is your responsibility to test and evaluate your use of this application for accuracy, harm, and appropriateness for your use case, employ human oversight of output, and refrain from relying solely on AI-generated outputs for decision-making purposes. This is especially important if you choose to deploy this application in areas with consequential impacts such as healthcare, finance, legal, employment, security, or infrastructure. You agree to abide by ServiceNow’s AI Acceptable Use Policy, which may be updated by ServiceNow.

    Data processing

    This application requires data to be transferred from ServiceNow customers' individual instances to a centralized ServiceNow environment, which may be located in a different data center region from the one where your instance is, and potentially to a third-party cloud provider, such as Microsoft Azure. This data is handled per ServiceNow's internal policies and procedures, including our policies available through our CORE Compliance Portal.

    Data collection

    ServiceNow collects and uses the inputs, outputs, and edits to outputs of this application to develop and improve ServiceNow technologies including ServiceNow models and AI products. In addition, this application will collect data from security incidents, incidents, change requests, problems, and vulnerable items. Customers can opt out of future data collection at any time, as described in the Now Assist Opt-Out page.

    For more information, see the Now Assist documentation.