Understanding the Wiz Vulnerability Response Integration

  • Release version: Australia
  • Updated June 26, 2026
  • 4 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Understanding the Wiz Vulnerability Response Integration

    The Wiz Vulnerability Response Integration enables ServiceNow® AI Platform customers to import comprehensive vulnerability and compliance data from Wiz cloud security scanners. This integration enhances your cloud security posture by providing in-depth insights and supporting direct remediation actions within your ServiceNow instance. It covers a wide range of data types including assets, vulnerabilities, compliance results, containers, applications, and secrets such as passwords and tokens.

    Show full answer Show less

    Key Features

    • Multiple Data Integrations: The integration package includes several specific data imports:
      • Wiz Asset Integration
      • Wiz Container Vulnerability Response Integration
      • Wiz Host Vulnerability and Host Test Results Integrations
      • Wiz Configuration Compliance and Issues Integrations
      • Wiz Application List and SCA Findings Integrations
      • Wiz Secret Findings Integration
    • Resource Type Configuration: You can specify which asset resource types to import via the Wiz Vulnerability Integration Configuration module in ServiceNow.
    • Backfill Integration Changes in v1.1: The Missing Assets table is deprecated, and post-upgrade requires backdating primary integrations by three days. Some backfill integrations are no longer needed after upgrading.
    • Flexible Activation: Activating the Wiz Asset Integration is optional and no longer mandatory to run before other integrations.

    Benefits and Role-Based Use Cases

    • Vulnerability Managers and Analysts: Access to detailed vulnerability findings from hosts, containers, and secrets to prioritize and manage remediation.
    • AppSec Teams and Application Owners: Import application inventories and software composition analysis (SCA) findings to link vulnerabilities and compliance issues back to specific applications.
    • Cloud Security and Access Teams: Monitor cloud assets, secrets, and compliance configurations to enforce security policies effectively.
    • Vulnerability and Remediation Owners: Utilize mapped vulnerability and compliance items (VITs, CVITs, CTRs) within ServiceNow’s Vulnerability Response, Container Vulnerability Response, and Configuration Compliance applications to apply remediation steps efficiently.

    Practical Considerations

    • After upgrading to v1.1, ensure you backdate and rerun primary integrations by three days to capture missing data due to the deprecation of the Missing Assets table.
    • Backfill integrations are designed to process data not captured initially, but some are deprecated in the latest release.
    • Integration filtering options are available to tailor data imports for host vulnerabilities, container vulnerabilities, test results, issues, and host test results, allowing focused and relevant data ingestion.

    Next Steps

    To fully leverage the Wiz Vulnerability Response Integration, ServiceNow customers should explore detailed documentation on installation, configuration, and data viewing. Key configuration tasks include activating integrations, setting resource type imports, and configuring filtering for different data sets. Understanding field mappings and backfill integration processes will ensure comprehensive and accurate data synchronization.

    Import vulnerability and compliance data from Wiz scanners into your ServiceNow® AI Platform instance to help you get deeper insights into your cloud infrastructure risks. These integrations provide you with a comprehensive assessment of your overall cloud security posture and help you drive remediation actions directly from your instance.

    Integrations included with the Vulnerability Response Integration with Wiz

    The Vulnerability Response Integration with Wiz includes the following integrations that import your asset, vulnerability, compliance, container, application, and secrets (passwords, tokens and keys) data:

    • Wiz Asset Integration
    • Wiz Container Vulnerability Response Integration
    • Wiz Host Test Results Integration
    • Wiz Host Vulnerability Integration
    • Wiz Configuration Compliance (test results) Integration and Issues integration
    • Wiz Application List Integration
    • Wiz SCA Findings Integration
    • Wiz Secret Findings Integration

    Please review more information about the Wiz integration at SecOps articles on the Security Operations Community.

    Starting with v1.1, the Missing Assets [sn_vul_wiz_missing_asset] table for storing assets from the backfill integrations is deprecated. After upgrading to version 1.1, you must backdate your primary Wiz integrations by three days and run them.

    Note:

    After you upgrade to v1.1, the following backfill integrations are no longer required:

    • Host Vulnerability Backfill Integration
    • Test Results Backfill Integration
    • Host Test Results Backfill Integration
    • Issues Backfill Integration
    Note:
    The Wiz Asset and Container Vulnerability Integrations don't have backfill integrations. See Wiz Backfill Integrations for more information.

    You identify the specific Resource Types (assets) that you want to import on the Wiz Vulnerability Integration Configuration module in your ServiceNow AI Platform instance.

    Benefits and users for the integrations

    Benefit Wiz Integration Users
    Import application, Software Composition Analysis (SCA) findings data. Wiz SCA Findings Integration Vulnerability managers and analysts and AppSec teams.
    Import Secrets (passwords, tokens and keys) data Wiz Secret Findings Integration Vulnerability managers and analysts, Cloud security and access management teams.
    Import an application inventory from Wiz and create application records that vulnerability and compliance findings can be linked back to. Wiz Application List Integration Vulnerability managers and analysts, software asset managers and teams, and application owners.
    Import data about your cloud assets reported by the Wiz scanner. Create and update discovered item records for cloud assets in your ServiceNow AI Platform instance.
    Note:
    Activating the Wiz Asset Integration is optional. You are no longer required to schedule or run it so it runs before the other integrations.
    		 Wiz Asset Integration Vulnerability managers, analysts, and Cloud security teams
    Import and evaluate early detections vulnerabilities on running hosts.

    The host vulnerability integration imports findings related to virtual machines and serverless assets in your cloud environment. These findings are mapped to Host Vulnerable Items (VITs) within the Vulnerability Response application to support remediation workflows.

    		 Wiz Host Vulnerability Integration. Vulnerability managers, analysts, and Cloud security teams
    Import test results associated with the resource type, VIRTUAL MACHINE. Wiz Host Test Result Integration Vulnerability managers, analysts, and Cloud security teams
    Import and evaluate container image vulnerability data for vulnerable and non-compliant assets in your cloud infrastructure.

    Findings are mapped to container vulnerable items (CVITs) to support triage, risk prioritization, and targeted remediation workflows for container-based workloads.

    		 Wiz Container Vulnerability Integration. Vulnerability managers, analysts, and Cloud security teams
    Import and evaluate configuration test results from Wiz to detect non-compliant cloud configurations.

    Findings are mapped to cloud test results (CTRs) in the Configuration Compliance application to help you enforce security policies and standards across your cloud environment.

    		 Wiz Configuration Compliance Integration (Wiz Test Results). Vulnerability managers, analysts, and Cloud security teams
    Import Wiz Issues that identify assets involved in toxic combinations of vulnerabilities and misconfigurations.

    These findings are mapped to CTRs and labeled with Wiz Issues as the source to help you track and remediate assets that might pose complex, multi-vector risks.

    		 Wiz Issues Integration. Vulnerability managers, analysts, and Cloud security teams
    Note:
    Starting with v1.1, the Missing Assets [sn_vul_wiz_missing_asset] table for storing assets is deprecated. After upgrading to version 1.1, you must backdate and run your primary integrations by three days. See Backfill integrations and upgrading to version 1.1 for more information.
    The Wiz Backfill integrations retrieve and process data for missing assets that were not processed by the primary vulnerability and compliance integrations.    		 Wiz Backfill integrations:
    • Host Vulnerability Backfill Integration
    • Test Results Backfill Integration
    • Host Test Results Backfill Integration
    • Issues Backfill Integration
    		 Vulnerability admins
    Apply remediation steps across host vulnerable items (VITs), container vulnerable items (CVTs), cloud test results (CTRs) and CTRs labeled Wiz Issues. Vulnerability Response, Container Vulnerability Response, and the Configuration Compliance applications. Remediation owners

    What to explore next

    For more information about installing, configuring, and viewing imported data with the Wiz Vulnerability Response Integration, see: