Every check and article here is grounded in configuration we have verified on a real ServiceNow instance — not generated from training data. Each one carries the detection script that produced it, so you can re-run the finding yourself instead of taking our word for it.
Per-check documentation for the open-source ServiceNow security agent: what each check detects, why it matters for compliance, the attack path, remediation, and a verification Background Script.
/kb/checksLong-form articles on ACL design, API exposure, platform hardening, and the regulatory mapping behind each — with the framework citations auditors actually consume.
/kb/articlesEvery published ServiceNow advisory, synced daily, with EPSS scoring and CISA KEV status on each entry.
/servicenow-cveA free check that tells you whether your instance is patched against the advisories in the tracker — no account, no connection required.
/servicenow-cve-exposure-check