Enhance existing security workflows with high-fidelity cloud security data from Wiz in ServiceNow

Add Wiz’s cloud and container security context to your organization's ServiceNow CMDB, vulnerability response, and IT service management solutions

ServiceNow is an essential link for many IT, Configuration Management, Vulnerability Response, Compliance, and Infrastructure teams. ServiceNow customers leverage these modules as the  backbone of their IT operations. As they migrate to the cloud they face new challenges like keeping inventory updated with ephemeral workloads and ensuring prioritized security risks are presented with the cloud and container context necessary to fix critical issues. Wiz’s partnership with ServiceNow helps security teams achieve their desired cloud security outcomes using their existing workflows in ServiceNow.

To build a robust cloud security program, organizations must address several key challenges when adapting their existing ServiceNow workflows:

Inventory cloud resources accurately.Cloud workloads are dynamic and ephemeral, making it challenging to keep cloud inventory information about multi-cloud IaaS, PaaS, and serverless cloud resources updated.

Triage cloud security issues in ITSM.To get high-fidelity, clear, and actionable cloud security alerts in ServiceNow ITSM Dev, SOC, orincident responseteams have to manually stitch together security data and context from multiple cloud security tools to understand whether the issue is critical.

Prioritize and fix critical cloud security vulnerabilities.Teams get help prioritizing which cloud and container vulnerabilities to fix from the thousands or millions the Vulnerability Management they see in ServiceNow Vulnerability Response and ServiceNow Container Vulnerability Response.

Gain visibility into cloud misconfigurations.Every new cloud service introduces more misconfigurations and risks thatcloud security teamsmust fix. Prioritizing efforts based on alignment to compliance frameworks that matter to your organization is challenging when triaging from a list of hundreds or thousands of misconfigurations.

According to Gartner, by 2028, modernization efforts will culminate in 70% of workloads running in a cloud environment, up from 25% in 2023*. Maintaining ServiceNow as your go-to ITSM, CMDB, and Vulnerability Response solutions through this modernization can help infrastructure, IT, and security teams familiarize themselves with the cloud while maintaining similar workflows. To make this tactic effective, your teams must have the necessary cloud context to accomplish the organization's cloud security goals.

Wiz integrates with ServiceNow modules through multiple certified applications on the ServiceNow store to help organizations operationalize cloud security:

Vulnerabilities from Wiz get pulled intoServiceNow VRto populate detections and vulnerable cloud resources. Wiz’s enriched vulnerability fields (i.e., external exposure, vulnerability has a known exploit, etc.) help teams triage, prioritize, and fix the vulnerabilities that could have the largest business impact.

Most organizations leveraging the cloud also use containers. Wiz gives the same visibility into containers, Kubernetes, and PaaS services as it does for Virtual Machines, and scans for vulnerabilities across all these technologies. Vulnerabilities identified by Wiz across container images are pulled intoServiceNow CVR. Teams fixing container vulnerabilities will have context around the container image if it’s validated in run time with Wiz’s runtime sensor, so they can patch and resolve the vulnerability.

Cloud security posture and compliance are key elements in ensuring that cloud resources are secure. Wiz scans for misconfigurations across cloud resources and maps how data and infrastructure in the cloud maps to common compliance frameworks and regulations. Wiz cloud configuration findings and Issues across cloud services and host configuration findings on VMs are pulled intoServiceNow CC module. Teams using the CC module to fix issues receive the full spectrum of toxic combination findings, CSPM-style checks, and host configuration checks mapped to their respective compliance frameworks. An organization with custom frameworks can utilize the integration’s robust filtering to prioritize those findings.

Wiz inventory (i.e., VMs, Containers, and other resources) is pulled through aService Graph Connector(SGC) to populate the ServiceNow CMDB configuration item tables. The Wiz SGC pulls newly created cloud resources every day, relying on Wiz’s agentless approach to keep your tables updated daily. Combined with the other Wiz integrations, the Wiz SGC helps with a better matching process and ties the findings to the primary configuration item.

To ensure that the teams can work together to fix any Issue sent by Wiz, we integrate withServiceNow’s ITSMsolution. Issues proactively generate tickets with Wiz’s cloud context in your chosen table for teams to track progress and add evidence throughout the investigation and remediation process.

Integrating Wiz with ServiceNow will transform our security workflows optimized for on-premise environments to the cloud. Our vulnerability management teams can prioritize and swiftly address critical security issues in key cloud resources by leveraging Wiz's accurate cloud inventory and vulnerability findings within ServiceNow. This partnership between Wiz and ServiceNow will enhance our vulnerability response capabilities and ensure our cloud resources remain accurate and compliant with evolving regulations.

Organizations can significantly enhance their cloud security posture by integrating Wiz with ServiceNow. This partnership empowers teams to swiftly address vulnerabilities and compliance issues, ensuring a robust security posture in the ever-evolving cloud environment.

To learn more, join us for awebinarin August,Wiz & ServiceNow: Streamline Cloud Security Workflows,where we’ll give a demo and highlight how companies have benefited.

*Source: Gartner, IT Infrastructure, Operations & Cloud Strategies Conference 2023 London, Laurence Goasduff, 20 November 2023.

Wiz enables our GRC team to maximize efficiency and impact. Here's how.

Wiz was named the leader in two Summer 2024 Grid Reports, based on independent customer reviews.

Did you know that 40% of all Wiz customers are now in the Zero Critical Club? Here’s how three companies joined their ranks by eliminating critical issues in their cloud environments.

Get a personalized demo

©2026Wiz, Inc.

StatusPrivacy PolicyTerms of UseModern Slavery StatementCookie Settings