ServiceNow Security Operations Reviews & Product Details

I like how ServiceNow Security Operations offers us visibility across security incidents, affected configuration items, and remediation work in one place. The integration with the CMDB is particularly valuable, as it provides context and helps route tasks to the right teams, making ownership and progress easier to track. It significantly simplifies the management of security alerts and findings by connecting with ITSM, which really streamlines coordination compared to relying on emails and spreadsheets. I also appreciate the automation that identifies affected CIs, calculates business impact, and routes remediation tasks correctly, replacing slow, manual processes with efficiency. Overall, it provides a comprehensive overview and smooth handling of security processes, all in one integrated platform. Review collected by and hosted on G2.com.

The platform is really powerful, but the initial configuration can be demanding. Integrations, assignment rules, discovery channels, reconciliation, and remediation workflows usually need careful tuning before they work smoothly, and small changes may require admin support. Handling a high volume of security findings can be cumbersome, especially when reviewing technical details or making bulk updates. Reporting and historical trend analysis could also be more flexible without requiring additional configuration. Some integrations and customized workflows need regular administrator support, which can make small changes take longer than expected. The initial setup was not simple; it was a major undertaking, especially due to CMDB data, and required significant effort to clean up asset lists and tune automated assignment rules. Review collected by and hosted on G2.com.

I like how it keeps security incidents and vulnerabilities organized in one place. The automated workflows and integrations make tracking and resolving issues much easier. Review collected by and hosted on G2.com.

The interface can feel a bit complex at first, especially when navigating through multiple modules. Some workflows also require extra steps to complete. Review collected by and hosted on G2.com.

The strongest part of ServiceNow Security Operations for me is how clearly it exposes every stage of an incident, rather than leaving me guessing about what’s happening next. The UI keeps alerts, cases, and investigation details well organized, which makes it easier for me to understand priorities and stay focused on what matters. The AI feature also helps me correlate related events, so I spend less effort separating genuine threats from routine noise. Review collected by and hosted on G2.com.

‎I have not encountered any major drawbacks while using this software. It has been stable, reliable, and well-designed for security operations. Review collected by and hosted on G2.com.

I use ServiceNow Security Operations because it provides a single place to manage and track incidents, making it easy to assign tasks, monitor progress, and keep everything updated throughout the process. The dashboard offers a clear view of open incidents and their statuses, which helps my team stay organized and ensures nothing gets missed during investigations. We can quickly see all open incidents without having to ask for updates, allowing us to focus on high-priority issues first. Review collected by and hosted on G2.com.

I find the user interface could be improved since some tasks require multiple clicks to complete. It would be helpful if commonly used actions were easier to access and required fewer clicks. A cleaner layout and simpler navigation would make it easier for new users. Review collected by and hosted on G2.com.

I like how ServiceNow Security Operations brings security and IT responses together, making it easier for security teams to track issues from identification to investigation and remediation. The ability to track IT workflows in one place, including ownership and current status, helps manage the overall response process smoothly. I find security incident response, vulnerability response, security case management, automated workflows, and risk-based prioritization particularly useful. Automated workflows really cut down on the manual coordination needed for recurring security activities. The system is intuitive, allowing me to see where the process is and who is responsible for remediation actions, which is very beneficial. Review collected by and hosted on G2.com.

When dealing with a large volume of security incidents, ServiceNow Security Operations can become complex, as aligning the platform with an organization's existing security processes might require significant effort. For users who aren't security specialists, some of the terminology and workflows might be hard to grasp initially. Simplifying the user experience and providing more contextual guidance would be a great way to ease adoption. Additionally, a more intuitive way of presenting security risks and remediation priorities would be helpful, such as dashboards that clearly highlight the most critical vulnerabilities or assets while showing approaching deadlines to make prioritization decisions more straightforward. Review collected by and hosted on G2.com.

The best in it is that it brings all our security tools and alerting systems into one place and lets us launch automated playbooks immediately. We used to bounce between different consoles all day, but now that workload is managed much more smoothly. I can focus on real threats, and response times stay very short without all the constant switching. Review collected by and hosted on G2.com.

The initial setup is very complicated. Getting integrations dialed in takes a lot of time, and if anything is even slightly off, the whole process stalls. Review collected by and hosted on G2.com.

I really like that ServiceNow Security Operations is easy to use and saves time. It automates the task and monitors activities effectively while ensuring compliance, making our work easy and reliable. The tool is accurate and saves time when dealing with scam and fraud-related queries by automating repetitive tasks, allowing us to focus on other important details. Review collected by and hosted on G2.com.

Everything works well for me as far as I've used it, but I did notice that for a very non-tech savvy person, it gets a bit difficult to cope with all the dashboard functions as there is too much that they do not need. Review collected by and hosted on G2.com.

What I like best about ServiceNow Security Operations is how it brings security and IT teams together on a single platform. Instead of relying on disconnected tools and manual processes, it helps organizations identify, prioritize, and respond to threats more efficiently. I also appreciate its automation capabilities, which reduce repetitive work and help security teams stay focused on higher-value tasks. It's frontend is very great and user friendly which also helps us to interact. Ultimately, it helps us to increase our company's growth and performance at Price. Review collected by and hosted on G2.com.

One challenge with ServiceNow security operations is that it can have a steep learning curve, especially for the organizations that are new to the platform or have complex workflows setting it up and customizing it requires careful planning and experienced administrators. However, once it is implemented effectively, the automation, integration and visibility, it provides the initial investment of time and effort worthwhile. Review collected by and hosted on G2.com.

ServiceNow Security Operations is useful when you want security workflows to feel less chaotic and less dependent on scattered tools or manual coordination. Incident response workflows, case management and integrations with broader ServiceNow processes are where it stands out.

I liked the ability to centralize investigations and automate repetitive triage steps instead of analysts manually moving information around. Review collected by and hosted on G2.com.

Setup complexity is the obvious downside. This isn’t something you casually deploy and immediately get value from. Workflows, integrations, playbooks and ownership models all need planning.

The interface can also feel heavy for teams that just want lightweight incident tooling. Pricing also clearly targets enterprise buyers. Review collected by and hosted on G2.com.

I like how ServiceNow Security Operations integrates with Rapid7, making it easy to bring all vulnerabilities into one place. This helps the IT teams handle vulnerabilities centrally without needing to log into Rapid7 for remediation. I appreciate how it groups similar vulnerabilities, making it easier for tech teams to address them collectively. Tagging vulnerabilities to Configuration Items (CIs) and displaying them in the CMDB is another highlight for me. It helps track team workloads and monitor progress in handling incidents, service requests, changes, and vulnerabilities all in one place. Review collected by and hosted on G2.com.

A few times when the CI's names are not matching, it becomes difficult to map the VR that comes to ServiceNow and don't link to CIs. More ease of use is needed. The visibility linked to the survey is limited and could change. Review collected by and hosted on G2.com.