--- title: ServiceNow Security Operations Reviews meta_title: 'ServiceNow Security Operations Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 71 reviews by the users' company size, role or industry to find out how ServiceNow Security Operations works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 71 scale: '5' date_modified: '2026-06-17' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # ServiceNow Security Operations Reviews **Vendor:** ServiceNow **Category:** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) **Average Rating:** 4.4/5.0 **Total Reviews:** 71 ## About ServiceNow Security Operations ServiceNow Security Operations is a sophisticated software solution designed to enhance threat and vulnerability management as well as incident response for organizations. By leveraging artificial intelligence, this platform empowers security teams to operate more efficiently and effectively, allowing for streamlined collaboration across IT, security, and risk management departments. The primary goal of ServiceNow Security Operations is to simplify complex security processes while minimizing risks associated with cybersecurity threats. Targeted at security teams within organizations of various sizes, ServiceNow Security Operations addresses the need for a cohesive approach to managing security incidents and vulnerabilities. It is particularly beneficial for organizations that utilize multiple security tools, as it integrates security and vulnerability data from these existing systems. This integration enables teams to respond to threats more rapidly by automating critical workflows and processes, thus reducing the manual effort traditionally required in incident response. Key features of ServiceNow Security Operations include intelligent workflows that automate routine tasks, allowing security professionals to focus on more strategic initiatives. The platform’s AI-driven capabilities facilitate the automatic correlation of threat intelligence from diverse sources, such as the MITRE ATT&CK framework. This feature enhances situational awareness and enables teams to prioritize threats effectively based on real-time data. Additionally, the ability to take action within other security or IT management tools from a centralized console streamlines operations, ensuring that teams can respond to incidents without unnecessary delays. Moreover, the use of digital security workflows and orchestration significantly accelerates tasks such as analysis, prioritization, and remediation. By automating these processes, organizations can not only improve their response times but also enhance their overall cybersecurity posture. The integration of AI-driven automation within the ServiceNow AI Platform® further strengthens the platform's capabilities, enabling organizations to drive cyber resilience and reduce their exposure to potential threats. In summary, ServiceNow Security Operations is a comprehensive solution that addresses the complexities of modern cybersecurity challenges. By automating and simplifying threat and vulnerability management, it empowers security teams to respond more effectively, thereby enhancing the overall security framework of an organization. ## ServiceNow Security Operations Pros & Cons **What users like:** - Users value the **comprehensive integration capabilities** of ServiceNow Security Operations, simplifying security process management effectively. (9 reviews) - Users value the **comprehensive integration capabilities** of ServiceNow Security Operations, simplifying security management and enhancing productivity. (9 reviews) - Users value the **seamless integration capabilities** of ServiceNow Security Operations, streamlining security management efficiently. (8 reviews) - Users commend the **ease of use** of ServiceNow Security Operations, particularly appreciating its efficient integration and workflow capabilities. (7 reviews) - Users value the **seamless integration** of ServiceNow Security Operations, enhancing workflow efficiency and incident management. (6 reviews) - Workflow Management (6 reviews) - Automation (5 reviews) - Features (5 reviews) - Customer Support (4 reviews) - Users value the **ease of implementation** in ServiceNow Security Operations, facilitating integration and usability for large organizations. (4 reviews) **What users dislike:** - Users find the **difficult setup** process of ServiceNow Security Operations to be complex and costly, affecting integration efficiency. (4 reviews) - Users face challenges with **integration issues** , particularly in CI mapping and lack of clear documentation for initial setup. (4 reviews) - Users feel the **licensing issues** in ServiceNow Security Operations are restrictive and complicate effective remediation efforts. (3 reviews) - Users struggle with **complexity** in building playbooks and face challenges during initial setup and licensing costs. (2 reviews) - Users find **difficult customization** in ServiceNow Security Operations challenging, particularly in creating effective playbooks. (2 reviews) - Users find the **high licensing costs** of ServiceNow Security Operations to be a significant drawback in its usability. (2 reviews) - Users find the **complex licensing model** of ServiceNow Security Operations challenging compared to other large-scale products. (2 reviews) - Limitations (2 reviews) - Limited Integration (2 reviews) - Missing Features (2 reviews) ## ServiceNow Security Operations Reviews ### 1. Strong platform for centralized security operations and incident response **Rating:** 4.5/5.0 stars **Reviewed by:** Dharamveer p. | Application Security Engineer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** May 02, 2026 **What do you like best about ServiceNow Security Operations?** What I like best about ServiceNow Security Operations is how it brings everything into a single platform for managing security incidents, vulnerabilities, and workflows. It integrates well with different security tools and helps automate response processes, which reduces manual effort. The incident response and vulnerability management modules are especially useful for tracking issues, assigning tasks, and ensuring proper remediation. It also improves collaboration between security and IT teams by providing a structured workflow. **What do you dislike about ServiceNow Security Operations?** What I dislike about ServiceNow Security Operations is that it has a steep learning curve, especially during the initial setup and configuration. Customization can take time and may require experienced resources. It can also be expensive for smaller teams, and performance may depend on how well it is configured and maintained. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations solves the problem of fragmented security operations where tools and processes are disconnected. It centralizes incident management, vulnerability tracking, and response workflows into one platform. For me, it helps in improving visibility, speeding up incident response, and reducing manual coordination between teams. It also ensures better tracking and accountability for security issues. ### 2. Centralized, Automated Security Workflows with ServiceNow Security Operations **Rating:** 4.5/5.0 stars **Reviewed by:** Himanshu J. | Founder, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** May 16, 2026 **What do you like best about ServiceNow Security Operations?** ServiceNow Security Operations is useful when you want security workflows to feel less chaotic and less dependent on scattered tools or manual coordination. Incident response workflows, case management and integrations with broader ServiceNow processes are where it stands out. I liked the ability to centralize investigations and automate repetitive triage steps instead of analysts manually moving information around. **What do you dislike about ServiceNow Security Operations?** Setup complexity is the obvious downside. This isn’t something you casually deploy and immediately get value from. Workflows, integrations, playbooks and ownership models all need planning. The interface can also feel heavy for teams that just want lightweight incident tooling. Pricing also clearly targets enterprise buyers. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** It solves fragmented security operations. Instead of incidents living across email, SIEM tools, spreadsheets and chat threads, response workflows become more structured and auditable. ### 3. Centralized Vulnerability Management with Efficient Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Kalyan Chakravarthy K. | Sr. Project Manager, Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** I like how ServiceNow Security Operations integrates with Rapid7, making it easy to bring all vulnerabilities into one place. This helps the IT teams handle vulnerabilities centrally without needing to log into Rapid7 for remediation. I appreciate how it groups similar vulnerabilities, making it easier for tech teams to address them collectively. Tagging vulnerabilities to Configuration Items (CIs) and displaying them in the CMDB is another highlight for me. It helps track team workloads and monitor progress in handling incidents, service requests, changes, and vulnerabilities all in one place. **What do you dislike about ServiceNow Security Operations?** A few times when the CI's names are not matching, it becomes difficult to map the VR that comes to ServiceNow and don't link to CIs. More ease of use is needed. The visibility linked to the survey is limited and could change. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations centralizes vulnerabilities and integrates Rapid7, allowing IT teams to handle vulnerabilities in one place, making tech tasks efficient. It groups similar VRs, simplifying solutions and managing exceptions and false positives effortlessly. ### 4. Centralized Security Management, Needs Easier Integrations **Rating:** 3.5/5.0 stars **Reviewed by:** steve m. | Mid-Market (51-1000 emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** I like that the IT Security operations module in ServiceNow Security Operations introduced us to workspaces, which pushed us into using them on top of its already amazing helpful capabilities. The workspace IT Security operations is extremely helpful because it serves as a single pane of glass, eliminating the need to move from system to system or jump around the ServiceNow platform. It also helps us by consolidating data from other platforms like CrowdStrike, getting us the info we need in one place. **What do you dislike about ServiceNow Security Operations?** We could always use more information which uses more integrations. I suppose being able to integrate easier with other platforms without the extra cost included with data fabric would be nice. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations helps manage security issues by centralizing data from platforms like CrowdStrike in one place. The IT Security Operations workspace is useful as it provides a single pane of glass, reducing the need to switch between systems. ### 5. Empowers Security Management, Minor Integration Challenges **Rating:** 5.0/5.0 stars **Reviewed by:** Liz T. | ServiceNow Senior Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** It's really helpful how ServiceNow can leverage cross-product data for security operations, like using the global user data for 'affected users' in security incident reports (SIR), mapping inbound actions to reporters from the global user table, and making SIR and Vulnerability Response (VR) CMDB aware, including support group routing. This seamless integration allows one practice to leverage data maintained by another, which is extremely beneficial. **What do you dislike about ServiceNow Security Operations?** Some of the partner integrations aren't well tested and require a lot of management during patch version changes. We have had a high rate of failure during upgrades for our Tenable integration - features that work in one version break in another. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations provides consistent and visible management of security incidents and vulnerabilities, leveraging cross-product data for seamless integration. Its CMDB awareness enables security operations to efficiently route issues and leverage global user data for effective management. ### 6. Simplifies Security Operations with Ease **Rating:** 4.0/5.0 stars **Reviewed by:** Dream F. | Head of Business Process Automation and Enablement, Mid-Market (51-1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** I find ServiceNow Security Operations makes security operations easier and secure. It allows us to manage incidents and alerts effectively. I really like the intelligence and log management features because they reduce false positives and mean I don't need to have my eyes glued to the screen all the time. Integrating it with other tools like JIRA, Palo Alto, AWS, and Selenium provides a single pane of glass view, which is incredibly beneficial. The initial setup was very easy. **What do you dislike about ServiceNow Security Operations?** Managing access to AI agent **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations makes security operations easier and secure by managing incidents and alerts. I like the intelligence and log management as they reduce false positives, and I appreciate having a single pane of glass with other tools. ### 7. Seamless Threat Management with Effortless Integration **Rating:** 5.0/5.0 stars **Reviewed by:** Charbel T. | AI and LLM Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** March 18, 2026 **What do you like best about ServiceNow Security Operations?** I like the seamless integration between ServiceNow Security Operations and ITSM because it eliminates the 'silo' effect, ensuring that once a threat is identified, the ticket is routed to the right IT team automatically without anything getting lost in email chains. It makes a big difference in speeding up response by automatically routing security threats to the correct IT team. It also helps in preventing data loss by moving communication out of messy email chains and into tracked tickets. Furthermore, I enjoy how it improves visibility by breaking down organizational silos so security and IT are always aligned. Additionally, the initial setup was quite easy. **What do you dislike about ServiceNow Security Operations?** Nothing **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations to automate repetitive security tasks and solve the issue of manual hand-offs, allowing faster threat remediation. It eliminates silos through seamless ITSM integration, speeding up response, preventing data loss, and improving visibility. ### 8. Unifies IT and Security with Automated Workflows and Smarter Risk Prioritization **Rating:** 4.5/5.0 stars **Reviewed by:** Ganesh G. | Architect, Enterprise (> 1000 emp.) **Reviewed Date:** June 09, 2026 **What do you like best about ServiceNow Security Operations?** It brings IT and security together, automates response workflows, and prioritizes risks using the CMDB. It also reduces alert noise, which helps enable faster remediation and an overall improved security posture. **What do you dislike about ServiceNow Security Operations?** It’s complex and costly, heavily CMDB‑dependent, and it requires a skilled setup along with significant effort for integration and customization. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow SecOps helps address alert overload, siloed tools, and slow response times by automating workflows, connecting security with IT, and prioritizing risk. As a result, it supports faster threat resolution while improving overall visibility and control. ### 9. Easy Setup, Highly Scalable Solution for Security **Rating:** 5.0/5.0 stars **Reviewed by:** lou c. | Mid-Market (51-1000 emp.) **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** I like ServiceNow Security Operations for its ease of use, scalability, and adaptability. It allows me to tailor the platform to suit our company's unique needs. The initial setup was pretty easy, which was a plus. **What do you dislike about ServiceNow Security Operations?** I don't like the difficulty in building agents. It would be better if the process was simplified and provided with both simple and advanced options. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for securing our IT assets. It solves security and governance issues. What I like most is its ease of use, scalability, and adaptability, allowing me to tailor the platform to our company's unique needs. ### 10. Seamless Governance and Security, Needs Better Report Exports **Rating:** 4.5/5.0 stars **Reviewed by:** Shubham B. | Small-Business (50 or fewer emp.) **Reviewed Date:** June 04, 2026 **What do you like best about ServiceNow Security Operations?** I use ServiceNow Security Operations for incident tickets and the traceback of audit, which is really helpful for governance. I like the security aspect of it, and I appreciate that it offers easy access and a worklog feature. The setup was very easy, making it convenient to get started. **What do you dislike about ServiceNow Security Operations?** The export function could be better in generating reports with pie charts **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for incident tickets and traceback of audit, and it helps with governance. ### 11. A powerful One-Stop-Shop Platform, But Not Quite Plug-and-Play **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** March 25, 2026 **What do you like best about ServiceNow Security Operations?** The most helpful bit is probably the fact that it can act as a one-stop-shop - you can integrate a lot of SIEMs / detection tools and ingest everything into one place, which spares you from having to switch between a bazillion different systems. If you're already using SNOW as an ITSM solution, then you can natively link to your CMDB and other ITSM processes which is a big plus for a large enterprise. **What do you dislike about ServiceNow Security Operations?** Well, the flipside is this is not a plug & play type of tool and proper implementation and tuning might take month, so it's a heavy deployment. Aside from that, it's also reliant on the quality of your CMDB (garbage in, garbage out principle) - if your CMDB is weak, the SecOps outcomes will be poor. All in all, the truth is it requires maturity & time (+cost) investment to deliver value. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Main business problem = fragmentation (of alerts, vulns, data), so the benefit here is the capacity to centralize everything, followed by prioritizing and automating response via workflows. ### 12. Streamlined Security with Easy Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Matthew S. | Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** I like the functionality of ServiceNow Security Operations and the monitoring and notifications features. The ease of use has already saved our teams time compared to the last tool we used. It was very easy to set up. **What do you dislike about ServiceNow Security Operations?** I think some things need automated or could be so I don't know if that's the tool's fault. Specifically, tickets that need to cross teams functionality. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for governance and security approval. It eases monitoring and notifications, saving our team's time with its user-friendly interface. ### 13. Valuable for Cyber Event Privacy, Needs Better Data Security **Rating:** 4.0/5.0 stars **Reviewed by:** komal s. | Sr Modern Service Management Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** I like the ability to track trends and maintain privacy for cyber events records with ServiceNow Security Operations. I find the handling of event records and management of incidents to be quite effective. **What do you dislike about ServiceNow Security Operations?** I find that data related to problems is not private, which forces us to use other products to examine the issues. Also, the initial setup wasn't that easy. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations to keep all the information private from other ServiceNow users and track trends for continuous improvement. ### 14. SecOps at its best **Rating:** 4.0/5.0 stars **Reviewed by:** U J. | Hardware Asset Manager **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** The integration with the rest of the ServiceNow platform is excellent. Having security incidents and IT workflows in one place really helps, since it reduces the need to jump back and forth between different tools. **What do you dislike about ServiceNow Security Operations?** Initial setup takes longer than expected and requires a fair amount of ServiceNow knowledge to get things running properly.​​​​​​​​​​​​​​​​ **What problems is ServiceNow Security Operations solving and how is that benefiting you?** It solved the problem of having security and IT workflows scattered across different tools—now everything is in one place. Because of that, our response times have improved. ### 15. Empowers Risk Assessment with Seamless Integrations **Rating:** 3.5/5.0 stars **Reviewed by:** Martin J. | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** I really like the integrations with CISA and NVD. It's also helpful that it's integrated into CSDM. These integrations provide a more holistic overview of the risk. The initial setup was easy, which was a nice bonus. **What do you dislike about ServiceNow Security Operations?** I don't like that the application VR and infrastructure were saved together. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations to ensure infrastructure safety, evaluate risk with external sources, and prioritize fixes. It integrates with CISA, NVD, and CSDM, providing a holistic risk overview. ### 16. Streamlined Cyberthreat Response That Saves Time **Rating:** 5.0/5.0 stars **Reviewed by:** Angelique P. | IT Support Contractor, Mid-Market (51-1000 emp.) **Reviewed Date:** June 04, 2026 **What do you like best about ServiceNow Security Operations?** It reduces our cyberthreat response time and streamlines process. This is important for just about any business/project, including ours. **What do you dislike about ServiceNow Security Operations?** It took some effort for our team to implement. It was also costly. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** We are currently using ServiceNow Security Operations to improve security incident response, automated workflows, reduce manual effort, to increase visibility into threats and coordinate remedial activities across our IT team. ### 17. Streamlined Vulnerability Management with Easy Setup **Rating:** 4.5/5.0 stars **Reviewed by:** Sandeep G. | Developer, Enterprise (> 1000 emp.) **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** I like ServiceNow Security Operations because of its easy interface, which makes setting up and remediating tickets straightforward. It's also easy to set up with the right credentials. **What do you dislike about ServiceNow Security Operations?** Too many unclasped hardware is causing trouble for matching the tickets with CIs. It needs better discovery reach to infrastructure. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for vulnerability management, helping me find vulnerabilities, assign tickets for remediation, and I like the easy interface for setting up and resolving tickets. ### 18. Streamlined Security, Needs Better Integration **Rating:** 3.5/5.0 stars **Reviewed by:** Leung C. | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** I like using ServiceNow Security Operations because it's an all-in-one workspace with a unified UI that works well for user details. I appreciate how active it is in VR processing and resolution. The initial setup of ServiceNow Security Operations was also easy. **What do you dislike about ServiceNow Security Operations?** UI customization and performance for integration **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations helps with active vulnerability response processing and resolution. I like the all-in-one workspace and unified UI for user details. ### 19. Awesome Experience Overall **Rating:** 4.5/5.0 stars **Reviewed by:** prakash n. | SM, Mid-Market (51-1000 emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** Awesome need help in integrations though **What do you dislike about ServiceNow Security Operations?** The hudge data handling and integrations **What problems is ServiceNow Security Operations solving and how is that benefiting you?** focused on big data and analfocused on big data and analysis which helped to imprvoeysis which helped to imprvoe ### 20. Solid Security Workflow Automation for Modern SOCs” **Rating:** 3.0/5.0 stars **Reviewed by:** Davis L. | SOC Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** March 01, 2026 **What do you like best about ServiceNow Security Operations?** I appreciate how ServiceNow Security Operations automates tedious tasks and centralizes incident data. It helps the SOC react more quickly and reliably, simplifies investigations, and minimizes tool switching. **What do you dislike about ServiceNow Security Operations?** The fact that ServiceNow Security Operations can occasionally feel sluggish and complicated bothers me. Customizing modules or dashboards can be more difficult than it should be, and some workflows require an excessive number of clicks. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** ServiceNow Security Operations facilitates triage, workflow automation, and incident centralization. It makes investigations quicker and more effective by lowering manual labor, speeding up response times, and providing clearer visibility into threats. ### 21. Final review **Rating:** 4.5/5.0 stars **Reviewed by:** khalil o. **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** Workflows and our ability to customize as much as possible without any restrictions **What do you dislike about ServiceNow Security Operations?** There is no great investment in agents for security operations where we can bring AVR and cvr and I’ve together **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Auto close of remediation issues and false positives workflows Need the company to focus on how to solve for AI security vulnerabilities since it is deterministic ### 22. Great Features, But Pricing Feels Steep **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Accounting | Mid-Market (51-1000 emp.) **Reviewed Date:** June 04, 2026 **What do you like best about ServiceNow Security Operations?** the interface is user friendly and provides helpful graphics. The AI tools helps with the more complex task and it can be integrated across many applications **What do you dislike about ServiceNow Security Operations?** The pricing is a bit steep for my liking but peace of mind comes at a cost **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Before incident reports used to take a bit of time to get done even having a bit of backlog during busy seasons but with ServiceNow Security Operations incidence reports are generated faster and make threat detection easier ### 23. Seamless SecOps Integration with Stellar Support **Rating:** 4.0/5.0 stars **Reviewed by:** Shiva R. | Sr Director, Enterprise (> 1000 emp.) **Reviewed Date:** October 29, 2025 **What do you like best about ServiceNow Security Operations?** I appreciate the seamless integration of ServiceNow Security Operations with my existing CMDB and ticketing systems, which significantly enhances my workflow efficiency. The availability of comprehensive documentation and the support from ServiceNow's solution architects and dedicated customer team made the setup process smooth and hassle-free. I find the incident response playbooks feature particularly useful for building and automating workflows for various types of security incidents, contributing to a more streamlined and effective SecOps management. The integration with ITSM is a singular benefit that fosters a cohesive operational ecosystem, allowing me to tie in user workflow automation for specific incident types. This interconnectedness and the ability to customize through integration are crucial for optimizing our security posture. Furthermore, using ServiceNow Security Operations alongside Splunk provides a robust combination for managing security operations efficiently. **What do you dislike about ServiceNow Security Operations?** I find it challenging to build playbooks within the ServiceNow Security Operations tool itself. It would be beneficial if the process of building and responding with playbooks was made easier. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I find ServiceNow Security Operations integrates with ITSM and CMDB, enhancing security workflows and automating incident responses, which efficiently manages SecOps and improves organizational response to incidents. ### 24. Easy Setup, Effective Data Security **Rating:** 4.5/5.0 stars **Reviewed by:** zachary c. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** I like that ServiceNow Security Operations is easy to set up and the configurations are pretty simple. The initial setup was very easy. **What do you dislike about ServiceNow Security Operations?** I could use a bit more granular control. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for keeping our data secure, solving the problem of users having too much access to data they shouldn't. ### 25. Effortless Setup and Quick Visibility **Rating:** 4.5/5.0 stars **Reviewed by:** marcy b. | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** I like ServiceNow Security Operations because of the quick visibility it provides through dashboards. The setup and install were easy, which was a great plus for us. **What do you dislike about ServiceNow Security Operations?** nothing at this time **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for managing security vulnerabilities. It provides quick visibility with dashboards, making it easier to monitor our security posture effectively. ### 26. Good products with a great support staff **Rating:** 4.0/5.0 stars **Reviewed by:** Luis G. **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** Ability to integrate with leading products in the space. Ability to make it as broad or narrow as needed **What do you dislike about ServiceNow Security Operations?** Rapid changing of the field as a whole can be difficult to keep up with **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Ability to monitor, report, and remediate findings and security issues ### 27. Streamlines Productivity with Clear KRI Visibility **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Dairy | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** Streamlining and increasing productivity. Allowing for easy visibility of KRI's and supporting data outside of our team. **What do you dislike about ServiceNow Security Operations?** Nothing of note. It does have a learning curve for the back end and integrations but it is well worth the effort. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Better and clearer understanding of our risk picture. ### 28. SecOps **Rating:** 5.0/5.0 stars **Reviewed by:** Gokul J. **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** Threat intelligence and security incident management in the same tool with the agent involvement. **What do you dislike about ServiceNow Security Operations?** There are some seim tools with more automation capabilities than servicenow. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** SOC team managing the alerts and tracking it in excel sheet has been remediated. Everything in one place including tickets ### 29. Efficient Integration, Challenging CI Setup **Rating:** 4.0/5.0 stars **Reviewed by:** Abhishek M. **Reviewed Date:** December 03, 2025 **What do you like best about ServiceNow Security Operations?** I appreciate the comprehensive integration capabilities of ServiceNow Security Operations, especially the out-of-the-box integrations that make it easy to centralize various aspects of security operations. This feature effectively consolidates security incident response and vulnerability response, creating a single source of truth, which greatly simplifies the management of security processes. Additionally, the workload allocation functionality stands out as an effective tool for distributing tasks efficiently, which enhances overall productivity. **What do you dislike about ServiceNow Security Operations?** More integrations out-of-the-box need to be enhanced with better field mapping. The initial setup was difficult, especially when it came to CI mapping. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I use ServiceNow Security Operations for its seamless integration, unifying Security Incident and Vulnerability responses into a single source of truth, enhancing workload allocation. ### 30. Secure Platform **Rating:** 4.5/5.0 stars **Reviewed by:** Celeste G. **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** All of the tools that are available for checking access. **What do you dislike about ServiceNow Security Operations?** User criteria does not show you how many and what people are included. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Accessibility to cases and keeping our data secure. ### 31. Efficient Security Management with Seamless Integration **Rating:** 4.0/5.0 stars **Reviewed by:** Gowtham R. **Reviewed Date:** October 15, 2025 **What do you like best about ServiceNow Security Operations?** I appreciate the unified platform that ServiceNow Security Operations offers for managing security incidents. The integration capabilities with third-party tools like Splunk and Tenable are remarkable, allowing efficient data processing. The implementation guides and setup assistants make initial setup straightforward for roles and groups, enhancing productivity by reducing incident resolution time by 30%. The platform’s dashboards and integration hub significantly improve workflow and provide excellent insights. **What do you dislike about ServiceNow Security Operations?** I find the limitation based on licensing regarding playbooks for remediation in ServiceNow Security Operations somewhat restrictive. The existing setup does not include a wide range of playbooks, potentially hindering efficient remediation efforts and limiting proactive security operations. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** I find the product solves security incidents management, integrates third-party tools, and improves incident resolution time by 30%, greatly enhancing my productivity and offering unified platform benefits. ### 32. Trying to automate SIR **Rating:** 5.0/5.0 stars **Reviewed by:** Anna G. | Assistant Director of Information Technology & Digitalization Department at HEDNO **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** It allows you to fully audit the security incidents' lifecycle **What do you dislike about ServiceNow Security Operations?** It does not offer all integrations we need **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Creating a unified place for SOC and IR teams to collaborate ### 33. Seamless Scanner-to-CMDB Connectivity **Rating:** 5.0/5.0 stars **Reviewed by:** Jessica M. | Filialmitarbeiter, Small-Business (50 or fewer emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** connect scanners to cmdb, share data between security and IT **What do you dislike about ServiceNow Security Operations?** heavily rely on cmdb data quality, complex initial setup **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Prioritization of tasks, too many security management tools ### 34. Workspace: Extremely User-Friendly **Rating:** 5.0/5.0 stars **Reviewed by:** Duane v. | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** Workspace! Extremely user friendly. Intuitive **What do you dislike about ServiceNow Security Operations?** None found.. Yet... Workspace customizations still a hurdle **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Refining process for Security Incident Management ### 35. Robust Security Platform with Powerful Technology Integrations **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** A robust product with multiple technology integrations that help take your security from an alert being detected to the alert being defeated. **What do you dislike about ServiceNow Security Operations?** Not all technologies are available in ServiceNow for integrating. It would be nice to have more out-of-the-box integrations. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Unified security, centralized all in one place. ### 36. Streamlines Priv Access Requests for IT **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ServiceNow Security Operations?** I use this for Priv Acess requests for IT **What do you dislike about ServiceNow Security Operations?** The current way we need to update a request catalog; a developer is needed **What problems is ServiceNow Security Operations solving and how is that benefiting you?** It is an audit requirement and does provide many controls that could not be done manually and tracked ### 37. Streamlines and Automates Security Incident Response **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** It helps streamline and automate security incident response across the organization. **What do you dislike about ServiceNow Security Operations?** Maybe faster detection and response to vulnerabilities would help reduce manual work. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Implementation, customization, and ad performance heavily depend on how well the platform is configured and maintained. ### 38. Strong Security Features, but Role vs Assignment Group Duplication Needs Work **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Non-Profit Organization Management | Enterprise (> 1000 emp.) **Reviewed Date:** May 07, 2026 **What do you like best about ServiceNow Security Operations?** Number of features it has to maintain the security **What do you dislike about ServiceNow Security Operations?** Any duplication can be avoided in deciding the role vs assignment groups **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Maintains the access with given criteria and easy to adopt the new features ### 39. Facilitate quick security responses to alerts with high visibility. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2026 **What do you like best about ServiceNow Security Operations?** Ease of use, visibility, analytics for leadership **What do you dislike about ServiceNow Security Operations?** I would like more information on it in University. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** High visibility across the organization and quick response support ### 40. Smooth Transition from Cyber to SecOps, with Room for Improvement **Rating:** 5.0/5.0 stars **Reviewed by:** Elliott B. | Associate Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** October 15, 2025 **What do you like best about ServiceNow Security Operations?** Worked in this solution and moving from cyber to SecOps has been much better **What do you dislike about ServiceNow Security Operations?** Always areas to improve in this area but with each release it will become streamlined **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Mostly working with financial institutions that are trying to solve their issues which I am helping with ### 41. SecOps **Rating:** 4.0/5.0 stars **Reviewed by:** Rafael C. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 06, 2025 **What do you like best about ServiceNow Security Operations?** The automation, the playbooks and workflows reduce manual effort to proceed with the vulnerability resolution. **What do you dislike about ServiceNow Security Operations?** The initial set up complexity and the licensing costs, it can be expensive. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** When an organisation has too many vulneratiblities this can be somehow time consuming and RBVM based on risk context and risks not just scores allows teams to focus really on actually matters. ### 42. Very good product with many risk and data features **Rating:** 5.0/5.0 stars **Reviewed by:** Lake M. | Risk Officer, Enterprise (> 1000 emp.) **Reviewed Date:** August 06, 2025 **What do you like best about ServiceNow Security Operations?** I love ServiceNow for the features and management of data and incidents. I have used this product at my last two places of business and will always recommend their products. **What do you dislike about ServiceNow Security Operations?** ServiceNow has remediated any issues discovered over the years **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Tracking and remediating major incidents ### 43. ServiceNow Streamlines Workflows **Rating:** 5.0/5.0 stars **Reviewed by:** Travis G. | Security Administrator, Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2025 **What do you like best about ServiceNow Security Operations?** ServiceNow has vastly improved our various access request workflows. Allowing it to easily pass between key approvers before it gets executed by our IT team. Processes that could have taken weeks to go through other approval processes can be completed in as little as 30 minutes now. **What do you dislike about ServiceNow Security Operations?** There is the ability for people to edit requests after they have been approved resulting in things slipping past key approvers. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** It makes it easy to view all incidents in one place to centralize all discussions. ### 44. WWT TSA Security Platform intergrations **Rating:** 5.0/5.0 stars **Reviewed by:** Tim L. | Technical Solutions Architect, Enterprise (> 1000 emp.) **Reviewed Date:** August 07, 2025 **What do you like best about ServiceNow Security Operations?** Easy to talk to, direct answers, and showcased the ServiceNow App Store. **What do you dislike about ServiceNow Security Operations?** No dislikes to mention. I’m just typing to fill now. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Ticket automation ### 45. I have decostumize, uninstall and reinstall the whole secops module. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Consulting | Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2025 **What do you like best about ServiceNow Security Operations?** I like being able to integrate with ease most of the tools we use. **What do you dislike about ServiceNow Security Operations?** Sometimes the documentation is off and is missing some key steps in order to make the Module work as a whole in a good way. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** it is letting us see in a general view all the different security incidents and VITs we have across all the systems. before we had to check each different product or scanner when have and that is time consuming in order to do the job which is, resolve the SIRs, VITs, and Threat hunt. ### 46. Excellent to track and manage activity related to security events and incidents. **Rating:** 5.0/5.0 stars **Reviewed by:** Mark A. | Enterprise (> 1000 emp.) **Reviewed Date:** May 07, 2025 **What do you like best about ServiceNow Security Operations?** The module is great because it allows alerts to flow into a workflow and gives the Security Operations Center a method to track all activity related the event **What do you dislike about ServiceNow Security Operations?** the way it can integrate into other platforms **What problems is ServiceNow Security Operations solving and how is that benefiting you?** It solves the documentation and visibility needed for security events and incidents. ### 47. New player in the market for SecOps ! **Rating:** 4.5/5.0 stars **Reviewed by:** Sanket B. | Technical Lead, Enterprise (> 1000 emp.) **Reviewed Date:** October 01, 2024 **What do you like best about ServiceNow Security Operations?** Security Operations in ServiceNow provides Vulnerability Reponse, Security incident repsonse. It's a one stop shop for the team to look at the data, work on Vulnerabilites and work on Security incident. Servicenow provides OOB ontegration with multiple scanners available in the market. Through the guided setup it's very easy to implement modules in SecOps. **What do you dislike about ServiceNow Security Operations?** If the data volume is huge, Dashbaords are very slow but ServiceNow is working to improve the loading speed of dashboards. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Earlier, Organization has to use multiple tools to scan and analyse the vulnerabilites, store it, assign the task to appropriate teams . But with the SecOps, team can use single app to assign the task, reporting and security incidents. ### 48. ServiceNow for Risk and Security management **Rating:** 5.0/5.0 stars **Reviewed by:** Saravanakumar S. | Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2025 **What do you like best about ServiceNow Security Operations?** ServiceNow as a platform helps integrate multiple different functions like IRM, SIR , ITBM etc and other related functions which helps to keep the organization compliant **What do you dislike about ServiceNow Security Operations?** none at this point of time that I am of aware **What problems is ServiceNow Security Operations solving and how is that benefiting you?** Risk, compliance, Governance and audit functions ### 49. SecOps Excellence **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** May 08, 2025 **What do you like best about ServiceNow Security Operations?** Admin secure environment for high security incidents **What do you dislike about ServiceNow Security Operations?** Additional set up on top of normal incidents (would prefer to have a `Security Flag` for normal Incidents) **What problems is ServiceNow Security Operations solving and how is that benefiting you?** For security team we need an environment where also IT admins are not able to see information ### 50. SEC Ops **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** May 06, 2025 **What do you like best about ServiceNow Security Operations?** Integration with other tools and integration with FS model. **What do you dislike about ServiceNow Security Operations?** Some what limited on knowing all the rolls to get assigned to users who need full access to limited access. Would like to see better integration with the VR module as well. **What problems is ServiceNow Security Operations solving and how is that benefiting you?** We need to be able to tie this module to other products via API - this is a work in progress without too much customization. It does help facilitate some automation for ticket generation via API. ## ServiceNow Security Operations Discussions - [What is ServiceNow sir?](https://www.g2.com/discussions/what-is-servicenow-sir) - [What is service now in cyber security?](https://www.g2.com/discussions/what-is-service-now-in-cyber-security) - [What are the typical functions of the Security Operations Center SOC analysts?](https://www.g2.com/discussions/what-are-the-typical-functions-of-the-security-operations-center-soc-analysts) - [What can ServiceNow security operations do?](https://www.g2.com/discussions/what-can-servicenow-security-operations-do) - [View ServiceNow Security Operations pricing details and edition comparison](https://www.g2.com/products/servicenow-security-operations/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-18+01%3A58%3A57+-0500&secure%5Bsession_id%5D=ceec1aaa-28f4-41ca-9210-ec3d227c7c8a&secure%5Btoken%5D=b6849825cb1f33620f7a145c5964dd81b374c16f4730d1169a5c68aab14d3ef5&format=llm_user) ## ServiceNow Security Operations Integrations - [FireMon Asset Manager](https://www.g2.com/products/firemon-asset-manager/reviews) - [FireMon Cloud Defense](https://www.g2.com/products/firemon-cloud-defense/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) - [Microsoft Defender XDR](https://www.g2.com/products/microsoft-defender-xdr/reviews) - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) ## ServiceNow Security Operations Features **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Orchestration** - Asset Management - Security Workflow Automation - Deployment - Sandboxing **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **Automation** - Workflow Mapping - Workflow Automation - Automated Remediation - Log Monitoring **Vulnerability Assesment** - Vulnerability Scanning - Vulnerability Intelligence - Contextual Data - Dashboards **Information** - Proactive Alerts - Malware Detection - Intelligence Reports **Records** - Incident Logs - Incident Reports **Orchestration** - Security Orchestration - Data Collection - Threat Intelligence - Data Visualization **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Personalization** - Endpoint Intelligence - Security Validation - Dynamic/Code Analysis **Management** - Incident Alerts - Incident Case Management - Workflow Management **Response** - Alerting - Performance Baselin - High Availability/Disaster Recovery **Generative AI** - AI Text Summarization - Generate Attack Scenarios - Generate Threat Detection Rules - Generate Threat Summaries **Generative AI** - AI Text Generation - AI Text Summarization **Agentic AI - Threat Intelligence** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making ## Top ServiceNow Security Operations Alternatives - [Tines](https://www.g2.com/products/tines/reviews) - 4.7/5.0 (396 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) - 4.3/5.0 (390 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (403 reviews)