---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Common Security Advisory Framework (CSAF)

# Common
Security Advisory Framework (CSAF) {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
When used with Vulnerability Solution Management, the Common Security Advisory Framework (CSAF) enables automation security notifications through a machine-readable JSON format.
The CSAF lets you integrate with any solution intelligence vendor using the solution management framework to import the intelligence data. The CSAF security notifications can be one of the following types.

* Security Advisories
* Vulnerability Exploitability Exchange (VEX)
* Security Incident Response
* Informational Advisory
{#csaf-overview__ul_gg4_k1d_r1c}The CSAF only supports the file imports, URL imports, and API imports of security advisories from vendors.