--- sourceDocument: Yokohama Security Management sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/security-management Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Explore # Exploring ServiceNow Otto for Unified Security Exposure Management {#ariaid-title1} * Release version: Yokohama * * Updated January 14, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Exploring ServiceNow Otto for Unified Security Exposure Management ServiceNow Otto for Unified Security Exposure Management (SEM) leverages Now Assist skills and generative AI to help vulnerability managers, analysts, cybersecurity teams, and developers efficiently identify, assess, prioritize, and remediate security vulnerabilities within their IT environment. This solution integrates AI-driven insights, automated workflows, and contextual guidance to streamline vulnerability response and improve security posture management. Show full answer Show less ## Key Features * **AI-Generated Insights:** Provides high-impact, contextual summaries and recommendations directly in the SEM Findings view to help prioritize remediation efforts and notify relevant teams promptly. * **Agentic AI Exposure Assessment:** Assesses exposure to known and CISA-listed vulnerabilities, identifies affected assets and business impact, and creates watch topics for active monitoring. * **Smarter Remediation Guidance:** Compares remediation options based on asset context and delivers AI-recommended fixes to accelerate resolution. * **Remediation and SLA Monitoring:** Tracks remediation progress, SLA compliance, and missed targets by severity, team, and asset type, enabling better management and reporting. * **Exception Approvals with Impact Analysis:** Supports approval or rejection of exception change requests with on-demand analysis of risk and business impact for faster, consistent decision-making. * **Custom API Connector Creation:** Developers can accelerate building custom connectors within the Security Posture Control workspace using the Connector builder framework, enhancing integration capabilities. * **Duplicate Vulnerable Item Identification:** Helps identify and deduplicate host vulnerable items associated with configuration items to maintain accurate vulnerability records. ## Intended Users and Their Benefits * **Vulnerability Managers and Analysts:** Gain insights into vulnerability exposure, SLA compliance, remediation prioritization, duplicate item identification, and receive AI-driven remediation steps and recommendations. * **Developers and Cybersecurity Teams:** Obtain guidance and tools to efficiently create custom API connectors supporting security posture control integration. ## Practical Outcomes * Enhanced understanding of your organization's security posture through AI-generated insights and contextual recommendations. * Improved remediation efficiency with AI-assisted guidance and automated workflows, reducing manual efforts and accelerating vulnerability resolution. * Faster and more consistent exception approval decisions with risk and impact analysis. * Better visibility into SLA compliance and remediation progress to track performance and adjust targets. * Streamlined integration capabilities via custom API connectors to extend security management functionalities. ## Next Steps To maximize the benefits of ServiceNow Otto for Unified Security Exposure Management, customers should explore configuration and usage guides, including how to configure the application and leverage agentic workflows within Now Assist for Vulnerability Response. Get information about how your vulnerability managers, analysts, and cybersecurity teams can use Now Assist skills and AI agents with ServiceNow Otto for Unified Security Exposure Management. ## Now Assist for Vulnerability Response overview {#exploring-ai-for-now-assist-for-vulnerability-response__cf-exploring-parent-overview} With Now Assist skills provided with the ServiceNow Otto for Unified Security Exposure Management application, use generative AI to help you with the following tasks: Security Exposure Management (SEM) Important Insights : Surface AI-generated, high-impact insights directly in the SEM Findings view to help teams quickly prioritize remediation and notify affected groups. Agentic AI exposure assessment : Assess exposure to known and CISA-listed vulnerabilities, identify affected assets, understand business impact, and create watch topics. Smarter remediation guidance : Compare remediation options that are based on asset context and receive AI-recommended fixes to accelerate execution. Remediation and SLA visibility : Monitor remediation progress, SLA compliance, and missed targets by severity, team, and asset type. Exception approvals with impact analysis : Approve or reject exception change requests with on-demand analysis of risk and business impact. Create custom API connectors (Security Posture Control) : Create your own API connectors in the Security Posture Control workspace with the Connector builder framework module. Note: Security Posture Control and its supported applications are required for this generative AI feature. ## ServiceNow Otto for Unified Security Exposure Management users {#exploring-ai-for-now-assist-for-vulnerability-response__cf-exploring-parent-users} {#exploring-ai-for-now-assist-for-vulnerability-response__table_shm_ycf_r2c__entry__2} | User | Description | |-|-| | Vulnerability managers and analysts | Determine your exposure to vulnerabilities in your environment and their potential impact to your configuration items (CIs) and business services. | | Vulnerability managers and analysts | Get insights into how well you're achieving your remediation targets for vulnerabilities according to your Service Level Agreements (SLAs). | | Vulnerability managers and analysts | Provide steps for analysts to remediate vulnerable items (VITs) that are assigned to them with watch topics and remediation efforts. | | Vulnerability managers and analysts | Get clear remediation assistance for how to resolve remediation tasks that includes potential, preferred solutions, if they are available. | | Vulnerability managers and analysts | Identify and review duplicate vulnerable items that are imported by your vulnerability scanners. Identify the primary vulnerable item that is associated with a configuration item. | | Developers and cybersecurity teams | Get guidance for how to accelerate the creation of custom API connectors for the Security Posture Control workspace. | [Table 1. Users] {#exploring-ai-for-now-assist-for-vulnerability-response__table_shm_ycf_r2c} ## ServiceNow Otto for Unified Security Exposure Management benefits {#exploring-ai-for-now-assist-for-vulnerability-response__cf-exploring-parent-benefits} {#exploring-ai-for-now-assist-for-vulnerability-response__table_vhm_ycf_r2c__entry__3} | Benefit | Feature | Users | |-|-|-| | Understand your security posture with AI-generated contextual summaries, recommendations, and insights to help you prioritize critical findings and take action directly from the findings view. | SEM Insights skill | Vulnerability managers, admins, and analysts | | Enable exception and false positive approvers to make faster, more consistent decisions while reducing manual analysis effort. | Approval Recommendation skill | Vulnerability managers, admins, and analysts | | Get guidance for how to accelerate the creation of custom API connectors for the Security Posture Control workspace. | SPC Setup Connector skill | Developers and cybersecurity teams | | Identify the primary (first-found) vulnerable item for a configuration item and remove duplicate Host Vulnerable items (VITs). | Vulnerable item deduplication skill | Vulnerability managers and analysts | | Get guidance for how to resolve remediation tasks that includes available potential, preferred solutions from third-party vendors. | Recommend preferred solution for VIT skill | Vulnerability managers and analysts | | * Identify assets with Common Vulnerabilities and Exposures (CVEs). * Determine the number of active vulnerability items (VITs) that correspond to CVEs. * Identify business services with known vulnerabilities. * Create watch topics for vulnerable item (VIT) remediation based on the information provided. The AI agent can create a Remediation Effort for the active VITs associated with the watch topic. {#exploring-ai-for-now-assist-for-vulnerability-response__ul_m33_x3q_4fc} | Assess vulnerability exposure agentic workflow | Vulnerability managers and analysts | | Gain insight into the progress of your Service Level Agreement (SLA) compliance summary for the past 30 days. View Groups and Asset Types that missed SLAs to help you track and adjust targets. | Analyze vulnerability remediation status agentic workflow | Vulnerability managers and analysts | | Retrieve relevant context and details for the vulnerable items assigned to you. Analyze, plan, and create steps for remediation. | Steps for issue resolution | Vulnerability analysts | [Table 2. ServiceNow Otto for Unified Security Exposure Management benefits] {#exploring-ai-for-now-assist-for-vulnerability-response__table_vhm_ycf_r2c} ## What to explore next {#exploring-ai-for-now-assist-for-vulnerability-response__cf-exploring-parent-links} To learn more about configuring and using ServiceNow Otto for Unified Security Exposure Management, see: * [Configuring ServiceNow Otto for Unified Security Exposure Management](https://www.servicenow.com/docs/WM0aicIe0AwzeFLV3EXrWg "The ServiceNow Otto for Unified Security Exposure Management application is supported in the Now Assist panel and available on-demand.") * [Using agentic workflows in Now Assist for Vulnerability Response](https://www.servicenow.com/docs/7e6bmeL_sgzXq3o78553jA "Use the Vulnerability Response AI agents to complete your tasks autonomously.") {#exploring-ai-for-now-assist-for-vulnerability-response__ul_whm_ycf_r2c}