---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Wiz Vulnerability Response Integration

# Understanding the Wiz Vulnerability Response Integration {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Understanding the Wiz Vulnerability Response Integration

The Wiz Vulnerability Response Integration enables ServiceNow AI Platform customers to import comprehensive vulnerability and compliance data from Wiz scanners.
This integration provides deep insights into cloud infrastructure risks, allowing vulnerability managers, analysts, and security teams to assess cloud security posture effectively and drive remediation actions directly within their ServiceNow instance.
Show full answer Show less  

## Key Features

* **Comprehensive Data Import:** The integration imports various types of data including assets, vulnerabilities, compliance results, container image vulnerabilities, application inventories, secrets (passwords, tokens, keys), and complex multi-vector risk issues from Wiz scanners.
* **Modular Integration Components:** Specific integrations cover Software Composition Analysis (SCA) findings, secrets management, asset discovery, host vulnerabilities, container vulnerabilities, configuration compliance, and toxic combination issues. Each integration maps imported findings into corresponding ServiceNow Vulnerability Response and Configuration Compliance applications.
* **Customizable Resource Import:** Customers can select specific resource types to import via the Wiz Vulnerability Integration Configuration module, providing control over what data is synchronized.
* **Optional Asset Integration:** The Wiz Asset Integration is optional and no longer requires scheduled runs before other integrations, simplifying setup.
* **Support for Remediation Workflow:** Imported data maps to Vulnerable Items (hosts, containers) and Configuration Test Results to facilitate triage, risk prioritization, and targeted remediation actions within ServiceNow.

## Benefits and Users

* **Vulnerability Managers and Analysts:** Gain detailed views of vulnerabilities across cloud hosts, containers, applications, and secrets to support effective risk management and remediation.
* **Cloud Security and Access Management Teams:** Monitor and manage secrets and compliance data to reduce exposure to credential risks and misconfigurations.
* **Application Owners and Software Asset Managers:** Track application inventories and relate vulnerabilities to specific applications for better risk assessment.
* **Cloud Security Teams:** Assess cloud asset vulnerabilities, configuration compliance, and complex risk issues to maintain a secure cloud environment.

## What to Expect

By implementing the Wiz Vulnerability Response Integration, ServiceNow customers can expect a unified, detailed, and actionable view of their cloud security posture through automated import and mapping of Wiz scanner data. This integration supports proactive remediation workflows, enabling teams to quickly prioritize and address vulnerabilities and compliance issues directly within ServiceNow's Security Operations framework.

## Next Steps for ServiceNow Customers

* Activate and configure the Wiz Vulnerability Response Integration application in your ServiceNow AI Platform instance.
* Optionally enable the Wiz Asset Integration and select the resource types you want to import.
* Set filtering criteria to tailor vulnerability and compliance data imports for hosts, containers, applications, secrets, test results, and identified complex risk issues.
* Review field mappings to ensure imported data aligns with your internal workflows and reporting requirements.  
Import vulnerability and compliance data from Wiz scanners into your ServiceNow® AI Platform instance to help you get deeper insights into your cloud infrastructure risks. These integrations provide you with a comprehensive assessment of your overall cloud security posture and help
you drive remediation actions directly from your instance.

## Integrations included with the Vulnerability Response Integration with Wiz {#vr-wiz-exploring-host-cf__cf-exploring-parent-overview}

The Vulnerability Response Integration with Wiz includes the following integrations that import your asset, vulnerability, compliance, container, application, and secrets (passwords, tokens and keys) data.

Youn can review more information about the Vulnerability Response Integration with Wiz at [SecOps articles on the Security Operations Community](https://www.servicenow.com/community/secops-articles/announcement-wiz-integration-with-servicenow-secops/ta-p/3325055).

You identify the specific Resource Types (assets) that you want to import with the Wiz Vulnerability Integration Configuration module in your ServiceNow AI Platform instance.

## Benefits and users {#vr-wiz-exploring-host-cf__section_ssm_phh_bgc}

{#vr-wiz-exploring-host-cf__table_dhr_p3t_rfc__entry__4}

| Supporting core application | Benefit | Wiz Integration | Users |
|-|-|-|-|
| Application Vulnerability Response | Import application, Software Composition Analysis (SCA) findings data. | Wiz SCA Findings Integration | Vulnerability managers and analysts and AppSec teams. |
| Application Vulnerability Response | Import Secrets (passwords, tokens and keys) data | Wiz Secret Findings Integration | Vulnerability managers and analysts, Cloud security and access management teams. |
| Application Vulnerability Response | Import an application inventory from Wiz and create application records that vulnerability and compliance findings can be linked back to. | Wiz Application List Integration | Vulnerability managers and analysts, software asset managers and teams, and application owners. |
| Vulnerability Response | Import data about your cloud assets reported by the Wiz scanner. Create and update discovered item records for cloud assets in your ServiceNow AI Platform instance. Note: Activating the Wiz Asset Integration is optional. You are no longer required to schedule or run it so it runs before the other integrations. | Wiz Asset Integration | Vulnerability managers, analysts, and Cloud security teams |
| Vulnerability Response | Import and evaluate early detections vulnerabilities on running hosts. The host vulnerability integration imports findings related to virtual machines and serverless assets in your cloud environment. These findings are mapped to Host Vulnerable Items (VITs) within the Vulnerability Response application to support remediation workflows. | Wiz Host Vulnerability Integration. | Vulnerability managers, analysts, and Cloud security teams |
| Configuration Compliance | Import test results associated with the resource type, VIRTUAL MACHINE. | Wiz Host Test Result Integration | Vulnerability managers, analysts, and Cloud security teams |
| Container Vulnerability Response | Import and evaluate container image vulnerability data for vulnerable and non-compliant assets in your cloud infrastructure. Findings are mapped to container vulnerable items (CVITs) to support triage, risk prioritization, and targeted remediation workflows for container-based workloads. | Wiz Container Vulnerability Integration, Wiz Container Grouped Vulnerability Integration, Wiz Container Deployment Context Integration | Vulnerability managers, analysts, and Cloud security teams |
| Configuration Compliance | Import and evaluate configuration test results from Wiz to detect non-compliant cloud configurations. Findings are mapped to cloud test results (CTRs) in the Configuration Compliance application to help you enforce security policies and standards across your cloud environment. | Wiz Configuration Compliance Integration (Wiz Test Results). | Vulnerability managers, analysts, and Cloud security teams |
| Configuration Compliance | Import Wiz Issues that identify assets involved in toxic combinations of vulnerabilities and misconfigurations. These findings are mapped to CTRs and labeled with Wiz Issues as the source to help you track and remediate assets that might pose complex, multi-vector risks. | Wiz Issues Integration. | Vulnerability managers, analysts, and Cloud security teams |
| Vulnerability Response, Container Vulnerability Response, and the Configuration Compliance applications. Note: If you have installed [AI Security Exposure Management](https://www.servicenow.com/docs/YTJSoIqPDf2QJRTbwaGETA "AI Security Exposure Management is a part of the Unified Security Exposure Management product suite of applications. AI Security Exposure Management integrates with third-party AI security products to help you manage various types of potential AI exposure across your environment.") you can import cloud configuration and AI security scan findings from the as Test Results into Configuration Compliance. | Apply remediation steps across host vulnerable items (VITs), container vulnerable items (CVTs), cloud test results (CTRs) and CTRs labeled Wiz Issues. | Integrations included with the Vulnerability Response Integration with Wiz | Remediation owners |
[ ]

{#vr-wiz-exploring-host-cf__table_dhr_p3t_rfc}

## What to explore next {#vr-wiz-exploring-host-cf__cf-exploring-parent-links}

For more information about installing, configuring, and viewing imported data with the Wiz Vulnerability Response Integration, see:

* [Activate the Wiz Vulnerability Response Integration application](https://www.servicenow.com/docs/tBxdI9bw6xqit2ObOm6kcg "Activate the required application.")
* [Configure the Wiz Vulnerability Response Integration](https://www.servicenow.com/docs/UlldykAUDMZ3kvDf~rtGDA "Configure the integration in your Wiz service account and assign roles in your ServiceNow AI Platform instance.")
* [Activate the Wiz Asset Integration and identify resource types for import](https://www.servicenow.com/docs/RToeoKjISFULhdF8wPy~IQ "Activate the Wiz Asset Integration and identify only the resource types (assets) with this integration that you want to import.")
* [Set filtering for the Wiz Host Vulnerabilities Integration](https://www.servicenow.com/docs/2zOl4wUIg3GHBQ6mdEizyQ "Set the filtering values to import the host vulnerability data that you want.")
* [Set filtering for the Wiz Container Vulnerabilities Integration](https://www.servicenow.com/docs/lAxEEhQ_ncJM4PcUZMxHFA "Set the filtering values to import the container vulnerability data that you want.")
* [Runtime exposure visibility for container images](https://www.servicenow.com/docs/tQu9LxUGc~5tU7c4iiJ5ug "Chained Wiz integrations create container vulnerable items for images deployed across unlimited clusters, removing the previous 16-cluster limitation.")
* [Set filtering for the Wiz Test Results Integration](https://www.servicenow.com/docs/3xfFel9cZBV6cy3ZfmVRMA "Set the filtering values to import the cloud test results data that you want.")
* [Set filtering for the Wiz Issues Integration](https://www.servicenow.com/docs/blyFpYCfFHEwNM431AxI4w "Set the filtering values to import Wiz Issues that identify assets involved in toxic combinations of vulnerabilities and misconfigurations.")
* [Set filtering for the Wiz Host Test Results Integration](https://www.servicenow.com/docs/MCNvRS8u5j2PllzVa2eyrA "Set the filtering values to import Wiz host test results.")
* [Field mapping for the Wiz Vulnerability Response Integrations](https://www.servicenow.com/docs/Gk1hzlraeYEY2lgE_daFDA "Review source and target fields and view imported data on tables and records in your ServiceNow AI Platform instance.")
{#vr-wiz-exploring-host-cf__ul_ehr_p3t_rfc}