--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-xanadu-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zx bundleId : - delta3zx --- # Combined Security Center release notes for upgrades from Xanadu to Zurich # Combined Security Center release notes for upgrades from Xanadu to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Security Center Release Notes for Upgrades from Xanadu to Zurich This consolidated release notes document guides ServiceNow customers through the Security Center upgrades from the Xanadu release family through to Zurich. It highlights new features, changes, deprecations, activation instructions, and important upgrade considerations to help you successfully plan and implement your Security Center upgrade. Show full answer Show less ## Key Features * **Security Event Notifications (Xanadu):** Enables prompt email alerts to specified users when security policies are triggered, facilitating quicker remediation of user behavior-related security issues. * **Security Posture Dashboards (Xanadu):** Provides graphical and tabular views of key security KPIs across single and multiple instances, allowing customizable monitoring of your security health. * **Security Banner Announcements (Xanadu):** Allows ServiceNow to display urgent security-related banners to system administrators within customer instances, keeping them informed of potential threats. * **Data Classification Metrics (Xanadu):** Offers insights into sensitive data classification status through new metrics showing classifiable and classified data breakdowns. * **Security Center Version 2.0 Hardening Settings (Xanadu):** Introduces new and updated hardening configurations with recommended settings to tighten ACLs, restrict data exposure, enforce strict code signing, and apply role-based app restrictions. * **Improved Security Center Architecture (Xanadu):** Redesigned interface to simplify task identification and tool selection for administrators. * **Platform Security Tasks (Zurich):** Centralizes management of platform security tasks enabling prioritization, delegation, and progress tracking with in-app notifications. * **Updated Overview Summary Pages (Zurich):** Enhanced summary pages for tools like Security Hardening and Security Metrics provide clear indications when action is needed. * **New Information and Video Overlays (Zurich):** Introduces short, contextual videos to assist new or infrequent users in understanding and using Security Center features effectively. * **New Auditor Suite Checks (Zurich):** Adds focused checks on public knowledge bases to enhance security auditing capabilities. * **Granular Admin Role (Zurich):** Allows developers and administrators to perform Security Center configuration tasks without full admin privileges, increasing security and flexibility. * **Access Controls Console (Zurich):** Provides enhanced visibility and streamlined remediation of access control issues with task assignment and prioritization features. * **Enhanced IAM Integration (Zurich):** Integrates Identity and Access Management tools within Security Center for a unified administrative experience and simplified access to security metrics. * **Coral Theme (Zurich):** Introduces a fresh, brand-neutral default theme with a dark mode option for portals and mobile experiences, aligning Security Center UI with instance-wide theming. * **Legacy Workflow Conversion (Xanadu):** Migrates legacy workflows to modern Flow Designer workflows for better scalability, maintenance, and troubleshooting. ## Key Changes * **Auditor Suite Updates (Xanadu):** The Auditor Suite was streamlined to focus on access control checks, reducing findings to relevant security vulnerabilities. * **Security Center Theming (Zurich):** CSS and banners now conform to overall instance themes, ensuring visual consistency. * **First Time User Experience (Zurich):** Redesigned to provide clearer guidance tailored for new or infrequent users. * **Security Hardening Tool Updates (Zurich):** Updated to the latest Instance Security Hardening Settings baseline versions V6 and V7 for improved security posture. ## Deprecations and Removals * Support for Instance Security Center was ended starting with the Xanadu release on the ServiceNow AI Platform. No additional removals or deprecations were introduced in Yokohama or Zurich. * There were no features removed between Xanadu and Zurich releases. ## Activation and Upgrade Guidance * Security Center version 1.5 is installed by default with Xanadu, and version 1.6 with significant enhancements is available via the ServiceNow Store. * With Zurich, Security Center is included by default and can be updated through the ServiceNow Store for faster access to new features. * Pre- and post-upgrade tasks should be reviewed and completed to ensure smooth transition to Zurich. ## Practical Benefits for ServiceNow Customers Upgrading Security Center through these releases provides improved visibility, control, and management of your platform's security posture. You can expect enhanced alerting via notifications, centralized task management, streamlined auditing, and a more user-friendly interface with role-based administration. The integration of IAM tools and the updated hardening settings help minimize exposure and enforce compliance with security best practices. The inclusion of thematic consistency and educational overlays supports better adoption and user experience across your teams. Consolidated page of all release notes for Security Center from Xanadu to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Security Center release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Security Center to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-securitycenter-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## New features Between your current release family and Zurich, new features were introduced for Security Center. {#dfrn3-securitycenter-summary__entry__10} | Release | Release notes | |-|-| | Xanadu | [Security Event Notifications](https://www.servicenow.com/docs/access?context=security-policies&family=xanadu&ft:locale=en-US) : Receive prompt notifications on user behaviors that you specify with the Security Event Notifications tool. Users that you choose receive email notifications when a policy is triggered, enabling you to promptly remediate issues. [Security Posture Dashboards](https://www.servicenow.com/docs/access?context=scc-sec-posture-dashboard&family=xanadu&ft:locale=en-US) : Monitor the security health of all your instances with the Security posture dashboards. The single instance dashboard provides graphical widgets for key security key process indicators (KPIs). The multi-instance dashboard, only available on production instances, shows the same KPIs for all instances in a table format. The dashboards can be cloned and then fully customized. [Security banner announcements](https://www.servicenow.com/docs/access?context=scc-banner&family=xanadu&ft:locale=en-US) : Prepare for potential future security announcements from ServiceNow using the Security Banner Announcements. This feature enables ServiceNow to trigger new banners in customer instances that are visible to system administrators. These messages inform them of new and urgent potential security issues and include a link to more details. [Data Classification](https://www.servicenow.com/docs/access?context=data-classification-security-metrics&family=xanadu&ft:locale=en-US) : Monitor your sensitive data with the Data Classification metrics in the Security Metrics tool. Updates to the tool include two new metrics. Classifiable Data metrics displays the amount of data that is available for classification and what portion has been already classified. The Classified Data metrics displays the breakdown of the classified data across your classification labels. [Security Center version 2.0 introduces a new set of hardening settings](https://www.servicenow.com/docs/access?context=hardening-settings-baseline&family=xanadu&ft:locale=en-US) : Security Center version 2.0, introduced in the November store release, includes several new hardening settings, updates to existing ones, and the removal of some unnecessary settings. The new hardening settings come with recommended configurations to restrict access control lists (ACLs) for human resources apps, minimizing data exposure and enforcing the principle of least privilege. Additional settings help configure service portal widgets to reduce sensitive data exposure in tables, enforce strict code signing, and set role-based restrictions on apps. Several technical configuration names and descriptions have been updated for clarity, and outdated hardening settings have been removed. [Improved Security Center architecture](https://www.servicenow.com/docs/access?context=sec-center-v2&family=xanadu&ft:locale=en-US) : The Security Center has been redesigned to help admins understand what tasks they can accomplish with Security Center and to pick the right tools for their tasks. | | Yokohama | No updates for this release. | | Zurich | [Security Task management](https://www.servicenow.com/docs/access?context=security-task-manager&family=zurich&ft:locale=en-US) : The new Platform Security Tasks enable administrators to see and manage all their platform security tasks in one place. Use this feature to prioritize, delegate, and monitor progress for tasks related to platform security across your teams. Security tasks can be automatically generated by the platform and manually created by users. Tasks can be assigned to any user who is notified the in app Notifications. [Updated overview summary pages](https://www.servicenow.com/docs/access?context=sec-center-landing&family=zurich&ft:locale=en-US) : Use the overview pages for Security Center tools to understand whether you need to act on the security area these tools help you manage. The following overview pages have been updated. * Security Hardening * Security Scanner * Security Metrics * Best Practices [New information and video overlays](https://www.servicenow.com/docs/access?context=sec-center-landing&family=zurich&ft:locale=en-US) : Security Center has been updated to show overlays with short feature introductory videos to help users understand what the tool can do and how to use it. These overlays are tailored to assist both new and infrequent users of Security Center. [New Auditor Suite checks](https://www.servicenow.com/docs/access?context=auditor&family=zurich&ft:locale=en-US) : Added two new auditor checks: * Review Public Knowledge Bases * Review Public Knowledge Base Articles [Granular admin role for Security Center](https://www.servicenow.com/docs/access?context=granular-sc-roles&family=zurich&ft:locale=en-US) : The granular admin role enables developers and administrators to complete administrative configuration tasks for Security Center without requiring the full admin role. [\[Placeholder link text to key bundle-psec.access-controls-console\]](https://www.servicenow.com/docs/access?context=access-controls-console&family=zurich&ft:locale=en-US) : Use the new Access Controls console within Security Center to review and remediate access issues and misconfigurations. The Access Controls console provides enhanced visibility and control of your Access Analyzer findings, and streamlines remediation efforts by enabling you to track, prioritize, and resolve access issues by assigning tasks. Enhanced IAM Integration in Security Center : Use the new Identity and Access Management (IAM) section in Security Center to access to critical IAM tools. The new section provides a comprehensive view of security metrics. This integration simplifies the administrative experience by bringing essential IAM functionality directly into Security Center, reducing the need to navigate multiple separate tools. | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing Security Center features. {#dfrn3-securitycenter-summary__entry__18} | Release | Release notes | |-|-| | Xanadu | [Scan checks](https://www.servicenow.com/docs/access?context=scan-checks&family=xanadu&ft:locale=en-US) : Schedule security scans with the updated Auditor Suite to monitor access control configurations in the Security Scanner tool. The Auditor Scan suite has been streamlined to contain only access control checks and renamed to Access Control Auditor Suite. The updated access control checks generate a smaller, more focused number of findings that reflect potential security vulnerabilities according to ServiceNow security experts. [Legacy workflows have been converted to Flow Designer workflows](https://www.servicenow.com/docs/access?context=sec-center-v2&family=xanadu&ft:locale=en-US) : Legacy base system Workflows have been converted to modern Flow Designer workflows to standardize ServiceNow flows onto the modern technology. The updated low-code flows are designed to be more scalable and make updating and troubleshooting easier. | | Yokohama | No updates for this release. | | Zurich | Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. [Auditor checks](https://www.servicenow.com/docs/access?context=auditor&family=zurich&ft:locale=en-US) : The Review Public Knowledge Bases and Review Public Knowledge Base Articles checks use global API calls, so they've been added in the Global scope. [Security Center](https://www.servicenow.com/docs/access?context=sec-center-v2&family=zurich&ft:locale=en-US) Theming for Security Center : Security Center banners and Cascading Style Sheets CSS elements have been updated to conform to any instance-wide themes you apply. [Updated first time user experience](https://www.servicenow.com/docs/access?context=sec-center-landing&family=zurich&ft:locale=en-US) : Security Center has been updated to provide guidance to understand what the tool can do and how to use it. This redesign is tailored to assist both new and infrequent users of Security Center. [Hardening settings updates](https://www.servicenow.com/docs/access?context=hardening-settings-baseline&family=zurich&ft:locale=en-US) : Updated the Security Hardening tool with the latest Instance Security Hardening Settings baseline V6. [Security Hardening tool Updates](https://www.servicenow.com/docs/access?context=security-hardening-settings&family=zurich&ft:locale=en-US) : The security Hardening tool has been updated to the latest Instance Security Hardening Settings V7. | [ ] ## Removed Between your current release family and Zurich, some Security Center features or functionality were removed. {#dfrn3-securitycenter-summary__entry__26} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some Security Center features or functionality were deprecated. {#dfrn3-securitycenter-summary__entry__34} | Release | Release notes | |-|-| | Xanadu | Beginning with the ServiceNow AI Platform Xanadu release, ServiceNow will end support for Instance Security Center. For details, see the [Deprecation Process](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0867184) article (KB 0867184) in the Now Support Knowledge Base. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Activation information Review information on how to activate Security Center. {#dfrn3-securitycenter-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | Security Center v1.5 is installed by default with the Xanadu family release. Version 1.6 provides significant enhancements. To get Security Center v1,6, visit the [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/home). | | Yokohama | No updates for this release. | | Zurich | Activation information : Security Center is a ServiceNow AI Platform application that is installed by default with the Zurich release. In addition, Security Center can be updated from the ServiceNow Store in between family releases for faster adoption of new features. Important: Security Center is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Security Center we have noted them here. {#dfrn3-securitycenter-summary__entry__50} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Security Center we have noted them here. {#dfrn3-securitycenter-summary__entry__58} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Security Center, such as specific requirements or compliance levels. {#dfrn3-securitycenter-summary__entry__66} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Security Center we have noted them here. {#dfrn3-securitycenter-summary__entry__74} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Security Center we have noted them here. {#dfrn3-securitycenter-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | * Receive prompt notifications for user behaviors that you specify with the Security Event Notifications tool. * Monitor the security health of all your instances and take rapid action using the new Security posture dashboards. * Be prepared for potential future security announcements from ServiceNow with Security Banner Announcement capabilities. * Schedule security scans with the updated Auditor Suite to monitor access control configurations in the Security Scanner tool. * Use the improved Security Center version 2.0 hardening tool to minimize data exposure within your instance. See [Security Best Practices](https://www.servicenow.com/docs/access?context=security-best-practices-manager&family=xanadu&ft:locale=en-US), [Customer Actions](https://www.servicenow.com/docs/access?context=critical-updates&family=xanadu&ft:locale=en-US), and [Baseline versions](https://www.servicenow.com/docs/access?context=hardening-settings-baseline&family=xanadu&ft:locale=en-US), [Security Event Notifications](https://www.servicenow.com/docs/access?context=security-policies&family=xanadu&ft:locale=en-US), and [Data Classification](https://www.servicenow.com/docs/access?context=data-classification-security-metrics&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | No updates for this release. | | Zurich | * Use the new Identity and Access Management (IAM) section in Security Center to access IAM tools. * Use the overview summary pages for each IAM tool to get a summary of which utility each tool provides. * See all the platform security tasks that need your attention in Security Center. You can see notifications outside Security Center so that you're aware of these tasks without having to monitor the task list constantly. See [Security Center](https://www.servicenow.com/docs/access?context=sec-center-v2&family=zurich&ft:locale=en-US) for more information. | [ ]