--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-yokohama-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zy bundleId : - delta3zy --- # Combined ServiceNow Otto for Security Incident Response (SIR) release notes for upgrades from Yokohama to Zurich # Combined ServiceNow Otto for Security Incident Response (SIR) release notes for upgrades from Yokohama to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined ServiceNow Otto for Security Incident Response (SIR) Release Notes for Upgrades from Yokohama to Zurich This consolidated release notes document guides ServiceNow customers through the upgrade process of ServiceNow Otto for Security Incident Response (SIR) from the Yokohama release family to Zurich. It highlights important pre- and post-upgrade tasks, activation details, and changes across releases. The document is designed to help customers understand new features, changes, and any requirements impacting their ServiceNow SIR instance during this upgrade. Show full answer Show less ## Upgrade Preparation and Important Information * Before upgrading to Zurich, review and complete recommended pre- and post-upgrade tasks to ensure smooth transition. * Upgrading Now Assist plugins can activate default skills that were previously inactive if they were never configured; skills previously toggled inactive remain inactive. * The application name changed starting with version 2.0.1 from "Now Assist for Security Operations" to "ServiceNow Otto for Security Incident Response (SIR)." Upgrading to version 2.0.1 is required to access new AI-driven features. * To enable recommended actions for security incidents, ensure the AI Search application is enabled on your instance. * ServiceNow Otto for Security Incident Response (SIR) is available for installation and activation via the ServiceNow Store. ## New Features, Changes, and Updates Between Yokohama and Zurich releases, there are no new features, changes, removals, or deprecations documented for ServiceNow Otto for Security Incident Response (SIR). This means Zurich primarily maintains existing capabilities without introducing additional functionality or behavioral changes. ## Highlights from Yokohama Releases * **Yokohama Early Availability:** Introduced generative AI features such as automatic resolution note generation, recommended actions, post-incident analysis, and correlation insights to help triage security incidents efficiently. * **Yokohama Patch 1 to Patch 11:** Enhanced AI-driven support including natural language chat with AI agents to assist with resolution plans, shift handover reporting, and quality assessments of security incidents. Integration with multiple AI model providers such as Google Gemini, Anthropic Claude, Now LLM Service, and Azure OpenAI was enabled. * Additional role configurations were required for agentic workflows and AI agents included in Now Assist applications. ## Activation and Additional Requirements * Activation of ServiceNow Otto for Security Incident Response (SIR) is done by requesting the application from the ServiceNow Store. * No new browser or localization requirements have been introduced between Yokohama and Zurich releases. * There are no new accessibility or highlight considerations specific to the Zurich upgrade. ## What This Means for ServiceNow Customers Upgrading to Zurich preserves your existing ServiceNow Otto for Security Incident Response (SIR) experience without introducing new features or removing functionality. Focus on ensuring pre-upgrade tasks are completed, notably verifying AI Search enablement and understanding the activation behavior for Now Assist skills. The Zurich release maintains the powerful AI-driven capabilities introduced in Yokohama, enabling efficient security incident triage, resolution, and analysis. Consolidated page of all release notes for ServiceNow Otto for Security Incident Response (SIR) from Yokohama to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family ServiceNow Otto for Security Incident Response (SIR) release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading ServiceNow Otto for Security Incident Response (SIR) to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__2} | Release | Release notes | |-|-| | Yokohama | Upgrade information : For more information about required applications for ServiceNow Otto for Security Incident Response (SIR), see [Supporting information](https://www.servicenow.com/docs/access?context=supporting-information-now-assist-security-incident&family=yokohama&ft:locale=en-US). Note: Upgrading the Now Assist plugins activate any designated skills that were previously untouched by the customer. * If you have the plugins installed but never touched the configuration (never activated the skill nor adjusted associated roles) of a skill, any Default On skill will be activated on a per skill basis upon upgrading. * If you have previously toggled a skill from active and then back to inactive or have updated any roles for that skill, that skill remains inactive upon upgrading. * You maintain full control over deactivating individual skills at any time after activation. Starting with version 2.0.1, the name of the Now Assist for Security Operations application in ServiceNow® Store and in your ServiceNow AI Platform® instance has changed to ServiceNow Otto for Security Incident Response (SIR). You must upgrade to version 2.0.1 to access the following features: * Generate resolution notes in the Now Assist context menu. * Generate correlation insights for a security incident investigation from the Now Assist panel. The AI Search application must be enabled so that the recommended actions skill works for security incidents. To verify that AI Search is enabled on your instance, navigate to AllAI SearchAI Search Status. Contact support if the page indicates that AI Search is not enabled. | | Zurich | No updates for this release. | [ ] ## New features Between your current release family and Zurich, new features were introduced for ServiceNow Otto for Security Incident Response (SIR). {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__8} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing ServiceNow Otto for Security Incident Response (SIR) features. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__14} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Removed Between your current release family and Zurich, some ServiceNow Otto for Security Incident Response (SIR) features or functionality were removed. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__20} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some ServiceNow Otto for Security Incident Response (SIR) features or functionality were deprecated. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__26} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Activation information Review information on how to activate ServiceNow Otto for Security Incident Response (SIR). {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__32} | Release | Release notes | |-|-| | Yokohama | Activation information : Install ServiceNow Otto for Security Incident Response (SIR) by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: ServiceNow Otto for Security Incident Response (SIR) is available in ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__38} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__44} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for ServiceNow Otto for Security Incident Response (SIR), such as specific requirements or compliance levels. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__50} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__56} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for ServiceNow Otto for Security Incident Response (SIR) we have noted them here. {#dfrn3-servicenowottoforsecurityincidentresponsesir-summary__entry__62} | Release | Release notes | |-|-| | Yokohama | [Yokohama Patch 11](https://www.servicenow.com/docs/access?context=yokohama-patch-11&family=yokohama&ft:locale=en-US) * Review changes to Now Assist usage measurement. * Some Now Assist skills, agents, and agentic workflows are on by default. * Additional role configuration is required for agentic workflows and AI agents included with Now Assist applications. * Use generative AI to create a quality assessment report of a security incident. * Yokohama Patch 6Help analysts to add security incidents details to the Shift Handover report by chatting with AI agents in the Now Assist panel. * Use Google Gemini and Anthropic Claude on AWS as AI model providers for Now Assist skills and AI agents in addition to Now LLM Service and Azure OpenAI. * Yokohama Patch 3 Help your analysts to gain insight into security incident record metrics with an agentic workflow. Chat with AI agents in natural language from the Now Assist panel. Help your analysts to resolve security incidents by chatting with AI agents in the Now Assist panel where the AI agent provides a resolution plan. * Yokohama Patch 1Help your analysts to close security incidents more efficiently by chatting with AI agents in natural language from the Now Assist panel. * Yokohama early availability * Triage security incidents with long activity streams by reviewing work notes and contextual information quickly in a concise, easy-to-read format. * Automatically generate resolution notes for security incidents by using generative AI. * Generate recommended actions to resolve security incidents. * Generate a post-incident analysis. * Generate correlation insights to help you connect current incidents to past events. By identifying the affected users, configuration items (CIs), or observables (IP addresses and file hashes) from existing incidents, you can help to triage new security incidents. For more information, see [ServiceNow Otto for Security Incident Response (SIR)](https://www.servicenow.com/docs/access?context=now-assist-security-incident-landing&family=yokohama&ft:locale=en-US). | | Zurich | No updates for this release. | [ ] *[\>]: and then