Generate insights to prioritize findings

  • Release version: Zurich
  • Updated December 8, 2025
  • 1 minute to read

    • Use the Security Exposure Management (SEM) Insights generative AI skill to provide contextual summaries and actionable recommendations in the Security Exposure Management (SEM) Workspace. Use insights based on exposure data, threat intelligence, remediation status, and asset context to surface dynamic insights for Findings views. Help admins, analysts, and vulnerability managers prioritize critical risks and take immediate remediation actions.

    Before you begin

    Important:
    This Now Assist skill is now turned on by default. The skill will be automatically available to appropriate role users for the application. The new default behavior works as follows:
    New customers
    When you install a Now Assist product, designated skills are turned on automatically.
    Existing customers who are upgrading (starting with Zurich Patch 4)
    There is no change to skills that are currently enabled and customized.

    A skill is turned on if:

    • The Now Assist plugin is installed, but the skill was never turned on.
    • An admin has never adjusted roles for the skill.
    A skill is not turned on if:
    • The skill was previously turned on, and then turned off again.
    • An admin has adjusted roles for the skill.
    For more information, see Now Assist skills, agents, and agentic workflows on by default.

    For more information about configuring this skill, see Configure a skill for Now Assist for Vulnerability Response.

    Role required: sn_vul_ai.run_sem_insights

    To generate insights in the SEM workspace, you must have the sn_vul_ai.run_sem_insights role assigned.

    Procedure

    1. Navigate to All > Workspaces > Security Exposure Management.
    2. Open the dashboard for which you would want to generate insights.
    3. Select Generate Insights to create tailored insights for the selected page.
    4. Review the generated insights displayed in the Now Assist Insights panel.
      Example:
      • 273 Critical vulnerabilities have no remediation target set – Create remediation task
      • 379 findings are unassigned – Immediate triage needed
    5. Drill down into any insight by selecting the linked numbers to open filtered records and take action directly from the workspace.

    What to do next

    • Regenerate insights after applying dashboard filters for more tailored results.
    • Provide feedback on insights using the thumbs up/down icons on each card to rate the usefulness of insights.
    • Refresh dashboard data with the refresh icon. Refresh updates data but does not regenerate insights automatically.