Accelerate Vulnerability Remediation with Sonatype and ServiceNow Integration
ServiceNow’s Vulnerability Response module is now available to Sonatype Lifecycle users. This integration gives development teams a consolidated view of all open-source vulnerabilities for faster remediation and better protection against potential software breaches. Joint customers of ServiceNow and Sonatype can easily incorporate Sonatype Lifecycle’s software composition analysis and open source vulnerability scans directly into their existing workflows to help accelerate the response to application vulnerabilities, particularly in open source software components, thus, enhancing security measures and remediation efforts across enterprise environments. The free integration provides a single-pane-of-glass experience that combines software composition analysis (SCA) data from Lifecycle with SAST and DAST data from other systems.
As vulnerabilities are flagged swiftly, it allows developers to address and remediate issues quickly and reduce associated risks, while improving collaboration between development and security teams.
System Requirements:
-
Requires ServiceNow Application Vulnerability Response(AVR) version 20.0.2 and above, and Lifecycle SaaS/Private Cloud/Self-Hosted v173 or later.
-
The ServiceNow Vulnerability Response plugin must be activated.
Import Sonatype Vulnerability information about your organizations and applications into Application Vulnerability Response.
No functional changes from 1.5.1. Adds ServiceNow Zurich compatibility.
No system requirements. Must have an active Sonatype license to use this integration.
Other Requirements:
- Requires ServiceNow Application Vulnerability Response(AVR) version 20.0.2 and above, and Lifecycle SaaS/Private Cloud/Self-Hosted v173 or later.
- The ServiceNow Vulnerability Response plugin must be activated.