Using agentic workflows

Use AI agents to complete your tasks autonomously.

To view and use the generative AI skills agentic workflows in the Unified Security Exposure Management you must upgrade to Unified Security Exposure Management. See Unified Security Exposure Management release notes for more information.

Table 1. Available agentic workflows for AI agents for Vulnerability Response

Agentic workflow name	Description	Available AI agents	Supported workspaces
Security Exposure 360	Evaluate vulnerability exposure data with Security Exposure 360. Vulnerability analysts and remediation owners can enter questions in plain language and receive comprehensive answers about all types of findings that include host, container, and test results vulnerabilities.	Data Analysis AI Agent	Legacy and Unified Security Exposure Management (USEM)
Guardrails detector agentic workflow	Manage potential AI exposures Use the AI agent to ask about the guardrails that were identified by the AI skill component in the AI Guardrails Helper, automatically defer findings with existing mitigations in the form of guardrails, or create exception rules to auto-defer future findings.	Guardrails detector agentic workflow	Unified Security Exposure Management (USEM)
Assess vulnerability exposure	Assess your vulnerability exposure Determine if your configuration items (CIs) and business services are exposed to known vulnerabilities. Determine the potential impact that a specific vulnerability might have throughout your environment. Check CIs for any new Cybersecurity and Infrastructure Security Agency (CISA) exploitable (zero-day) vulnerabilities. Create watch topics in the Vulnerability Manager workspace to remediate vulnerable items.	CISA vulnerability analysis AI agent Vulnerability exposure analysis AI agent Watch topic creation AI agent	Legacy and Unified Security Exposure Management (USEM)
Retrieve vulnerability and exposure data	Retrieve Vulnerability and exposure data with generative AI. Ask questions in natural language to help you quickly retrieve vulnerability and exposure data across legacy sources and Unified Security Exposure Management (USEM).	Retrieve VR data agent	Legacy and Unified Security Exposure Management (USEM)
Analyze vulnerability remediation status	Analyze vulnerability remediation status Gain insights into your compliance metrics and statistics for how well you're meeting remediation target dates on vulnerable item (VIT) records. View your monthly VIT record remediation totals and identify missed targets. Break down remediation data on VITs by Severity, Assignment group, Configuration item, and Vulnerability for your monthly Service Level Agreement (SLA) compliance reviews.	Remediation compliance analysis AI Agent	Legacy and Unified Security Exposure Management (USEM)

Important:

By default, all agentic workflows and AI agent records are read-only.

To modify an agentic workflow, you must first duplicate the agentic workflow, and then proceed with the following steps:

• Activate the agentic workflow. The Now Assist for Vulnerability Response AI agents included with the application are activated by default.
• If required, you can add a trigger to invoke the agentic workflow automatically.
• See Configure an agentic workflow for more information.

Looking for an AI agent?

• There might be AI agents installed with the Now Assist application that are not used in agentic workflows. To learn how to see all agents that are available on your instance, see Find AI agents.
• To find agents that might not be installed on your instance, visit the AI Agent Marketplace on the ServiceNow Store.