ServiceNow Security Operations Reviews

Name: ServiceNow Security Operations
Brand: ServiceNow
Rating: 4.0 (19 reviews)

Vendor: ServiceNow

4.0 out of 5

19 reviews
94% willing to recommend

428 followers

Post review

What is ServiceNow Security Operations?

ServiceNow Security Operations is a cutting-edge security solution designed to elevate organizations' security incident response (SIR) processes through automation and orchestration. Going beyond traditional SOAR, this comprehensive Security Operations Suite integrates seamlessly with other ServiceNow products and offers a wide array of features. Its components include Security Incident Response (SIR), which automates incident workflows and offers pre-built playbooks; Security Configuration Compliance (SCC), continuously scanning and automating compliance tasks; Vulnerability Response (VR), prioritizing and remediating vulnerabilities; Threat Intelligence (TI), aggregating threat data for proactive threat hunting; and additional features like IT Service Management integration, Machine Learning and AI, reporting, and a mobile app. The benefits span improved incident response speed, reduced mean time to resolution, increased security posture, enhanced compliance, collaborative synergy between security and IT teams, and operational cost reductions.

Get the ServiceNow Security Operations Buyer's Guide and find out what your peers are saying about ServiceNow Security Operations, VMware Carbon Black Endpoint, Exabeam and more!

ServiceNow Security Operations is the #2 ranked solution in top Security Incident Response solutions, #9 ranked solution in top Risk-Based Vulnerability Management solutions, and #10 ranked solution in SOAR tools. PeerSpot users give ServiceNow Security Operations an average rating of 8.0 out of 10. ServiceNow Security Operations is most commonly compared to VMware Carbon Black Endpoint: ServiceNow Security Operations vs VMware Carbon Black Endpoint. ServiceNow Security Operations is popular among the large enterprise segment, accounting for 74% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 20% of all views.

Buyer's Guide

ServiceNow Security Operations

January 2025

Get the report

Helped 832,138 peers since 2012

Featured reviews

KishoreKumar4

Senior QE Lead at Cognizant

If we encounter challenges while deploying, we raise incidents. These incidents are categorized by priority: high, medium, and low. We assign an incident number and notify the relevant teams to address the issue. For instance, if we experience a problem with Cloud services or any other issue, we…

Read full review

Shaik_Ahmed

Integrator at Conduent (formerly Xerox Services)

The solution can be setup very easily using the available documentation around ServiceNow Security Operations. In some cases, professionals have faced challenges in integrating the product with other tools. I would rate the initial setup a seven out of ten. The deployment duration depends on multiple factors, but in my experience, it takes around three to four weeks. The deployment can be completed in two days as well based on the dependencies, but in our company, we faced some issues so it took us longer for the complete deployment of ServiceNow Security Operations. Our company faced minor issues with the firewalls that needed to be opened in various modules.

Read full review

VinayKumar16

Senior DeliveryManager at ITC Infotech

ServiceNow Security Operations offers extensive capabilities for managing security incidents, including vulnerability management, ITSM suite integration, and proactive threat response. The scalability and flexibility, particularly in terms of threat intelligence and incident response, make it a valuable tool for shared intelligence among stakeholders. It leverages a robust orchestration engine and automation tools to streamline security incident response, improve efficiency, and reduce manual intervention. It has helped optimize security costs by consolidating multiple tools into one platform. We have utilized various integration capabilities within the product, including connectors for third-party tools like Zscaler, Palo Alto, and Tenable. I rate it an eight out of ten.

Read full review

ServiceNow Security Operations mindshare

Product category:

As of February 2025, the mindshare of ServiceNow Security Operations in the Security Incident Response category stands at 19.4%, up from 11.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Incident Response

PeerAnalyst reports

Type	Title	Date
Category	Security Incident Response	Feb 1, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 1, 2025	Download
Comparison	ServiceNow Security Operations vs VMware Carbon Black Endpoint	Feb 1, 2025	Download
Comparison	ServiceNow Security Operations vs IBM Resilient	Feb 1, 2025	Download
Comparison	ServiceNow Security Operations vs VMware Carbon Black Cloud	Feb 1, 2025	Download

Title	Rating	Mindshare	Recommending
VMware Carbon Black Endpoint	3.9	8.1%	88%	63 interviews Add to research
Exabeam	3.9	4.0%	72%	18 interviews Add to research

Valuable Features

ServiceNow Security Operations offers advanced integration with other security tools, cloud availability, application vulnerability scanning, and enhanced workflow capabilities. It supports governance, risk, and compliance, enabling efficient vulnerability response and cybersecurity efforts. Users appreciate its customization, user-friendly interface, and hybrid deployment options. The platform provides a seamless user experience with easy management of security incidents and the ability to configure workflows without coding, offering significant strategic value.

"The product's most valuable features include the no-code capability for workflows and flow design, which makes it user-friendly, and the ability to perform advanced configurations."
"Multiple projects use the ServiceNow tool because it is a low-cost and open-source tool."
"The SOAR module of ServiceNow Security Operations is the most valuable feature"

Room for Improvement

ServiceNow Security Operations users suggest improvements in customization, integration, and user interface. They report challenges with the threat intelligence dashboard and highlight a need for streamlined integration with third-party tools. Enhancements in documentation, developer support, and marketing could help users fully utilize its capabilities. Some experience limitations with security operations functionalities and encounter difficulties in understanding processes and maintaining accurate CMDB data. Faster performance and more intuitive usability are also desired.

"One area for improvement for the product is the need to tailor and alter some codes for customization, which can cause issues during upgrades. It does not support customized operations."
"The dashboard and playbook creation will need to improve"
"Customer awareness and understanding of ServiceNow's SecOps capabilities could be improved."

Pricing

ServiceNow Security Operations pricing is competitive within the industry but tends to increase over time. It offers value for money compared to competitors like IBM and Splunk, though more expensive than tools like BMC Remedy and Archer. Pricing is based on user and asset count, with additional costs for implementation and maintenance. Pricing varies by client and industry, with some organizations forming consortiums to pool buying power. The software is on a yearly subscription model.

"The product is more expensive than other solutions."
"Compared to competitor tools, ServiceNow Security Operations is more affordable"
"It is an expensive product."

Popular Use Cases

ServiceNow Security Operations is primarily used for streamlining security incident response and integration with other systems. Organizations benefit from rapid response to security events, vulnerability management, and seamless process integration with tools like Splunk and Microsoft Defender. ServiceNow Security Operations automates ticketing, helps manage vulnerabilities, and supports pen-testing tools such as Nessus and Kali Linux. It provides threat intelligence, monitors security incidents, and enables better organizational cybersecurity efforts through robust integration capabilities.

Service and Support

Customers find ServiceNow Security Operations support knowledgeable with strong security expertise. Many rate it highly, yet some experience delays and require further investigation for specific issues. Initial support is sometimes less technical, and improvement in response times is desired. While some appreciate the recommendations and new functionalities provided, others feel support lacks integration knowledge with external security solutions. Users often resolve issues themselves, although the dedicated team effectively handles operational aspects.

Deployment

ServiceNow Security Operations has a moderately complex initial setup. While it's straightforward for many, complexities can arise from custom integrations and user adaptation challenges. Deployment time varies based on team size and requirements, ranging from hours to several months. Organizations praise the available documentation for ease of installation. Staff requirements differ, typically involving a small team. Customization needs can increase the complexity, especially for those less familiar with security and infrastructure domains.

Scalability

ServiceNow Security Operations scales effectively for diverse organizational sizes. Implementation must factor in infrastructure and future needs. Many users report seamless scalability via ITSM tools and third-party integrations. With thousands of users and integration with tools like Splunk, it caters to both medium and enterprise clients. Users highlight its capability to handle significant user bases, making it highly adaptable. The platform is deemed scalable, often rated between seven and eight out of ten.

Stability

ServiceNow Security Operations is widely considered stable. Users report it functions reliably without significant bugs or crashes. Stability is noted to depend on proper configuration and external factors such as ISP issues. Some encounter minor stability challenges quickly resolvable with support. With high ratings, some describe its reliability as average but still competent. Long-time users acknowledge its endurance in the market, and regular users highlight its day-to-day dependability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our ServiceNow Security Operations Buyer's Guide for additional reliable information.