KNOWLEDGE BASE

ServiceNow security, verified against a live instance

Every check and article here is grounded in configuration we have verified on a real ServiceNow instance — not generated from training data. Each one carries the detection script that produced it, so you can re-run the finding yourself instead of taking our word for it.

Instance Scan Pack — check catalog

Per-check documentation for the open-source ServiceNow security agent: what each check detects, why it matters for compliance, the attack path, remediation, and a verification Background Script.

Security articles

Long-form articles on ACL design, API exposure, platform hardening, and the regulatory mapping behind each — with the framework citations auditors actually consume.

Advisories & CVEs

The ServiceNow advisory tracker, synced daily, with a free exposure check that tells you whether your instance is patched.