Now Assist for Vulnerability Response

  • Release version: Xanadu
  • Updated April 21, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Now Assist for Vulnerability Response

    Now Assist for Vulnerability Response is an application designed to support vulnerability managers and analysts in evaluating exposure to critical vulnerabilities and understanding their Service Level Agreement (SLA) compliance for vulnerable items within ServiceNow. It enhances vulnerability response through AI-powered insights and agentic workflows.

    Show full answer Show less

    Key Features

    • AI Agentic Workflows: Configurable and activatable workflows that leverage AI agents to automate and streamline vulnerability management processes.
    • Insight into SLA Compliance: Helps users track and analyze SLA adherence related to vulnerabilities to ensure timely remediation.
    • Data Collection and Improvement: Collects inputs, outputs, and edits to improve ServiceNow’s AI models and technologies while integrating vulnerability data and CMDB configuration information.

    Important Considerations

    • Not all AI model providers or Now Assist features are available in all countries or regions due to regulatory and data center restrictions (e.g., FedRAMP, NSC DOD IL5, Australia IRAP-Protected, Regulated Markets).
    • Data processed by the application may be transferred to centralized ServiceNow environments or third-party cloud providers such as Microsoft Azure, handled according to ServiceNow’s compliance policies.
    • Customers have the option to opt-out of future data collection at any time.

    Helpful Resources

    • Security Operations Resource Library and community forums provide additional guidance and support.
    • Known Error Portal and Customer Service are available for troubleshooting and assistance.
    • ServiceNow’s CORE Compliance Portal details data handling policies related to this application.

    Use the Now Assist for Vulnerability Response application to help your vulnerability managers and analysts assess your potential exposure to critical vulnerabilities and gain insight into your Service Level Agreement (SLA) compliance for vulnerable items.

    Get started

    Important:
    • Not all model providers are available for customers with in-country SKUs, and some Now Assist products/features are currently unavailable for in-country customers. For more information, see the KB1584492 article in the Now Support Knowledge Base. Be sure to check for model provider availability updates in future releases.
    • Some Now Assist products/features are currently unavailable for customers in the FedRAMP, NSC DOD IL5, or Australia IRAP-Protected data centers, self-hosted customers, or in other restricted environments. For more information, see the KB0743854 article in the Now Support Knowledge Base. Be sure to check for availability updates in future releases.
    • Some Now Assist products/features are currently available only for customers in some regions. Be sure to check for availability updates in future releases.
    • Some AI products and skills are not available in Regulated Markets. For more information, see KB2593939: Regulated Markets AI Products/Skills Not Available. Be sure to check for availability updates in future releases.

    Helpful resources

    Some ServiceNow resources that can provide you with helpful information are:

    Data processing

    This application requires data to be transferred from ServiceNow customers' individual instances to a centralized ServiceNow environment, which may be located in a different data center region from the one where your instance is, and potentially to a third-party cloud provider, such as Microsoft Azure. This data is handled per ServiceNow's internal policies and procedures, including our policies available through our CORE Compliance Portal.

    Data collection

    ServiceNow collects and uses the inputs, outputs, and edits to outputs of this application to develop and improve ServiceNow technologies including ServiceNow models and AI products. In addition, this application will collect the vulnerability data that you import as well as information about the configuration items in your CMDB. Customers can opt out of future data collection at any time, as described in the Now Assist Opt-Out page.

    For more information, see the Now Assist documentation.