Create auto-close rules

task australia Updated Sep 10, 2026 1 min read avr-create-auto-close-rules.md

Use auto-close rules to close older AVITs automatically based on the filter conditions that you set.

Before you begin

Role required: sn_vul.app_manage_auto_close_rules

Procedure

Navigate to All > Application Vulnerability Response > Administration > Auto-close rules.

The base system provides the following auto-close rules:

Application Vulnerabilities last scanned Vulnerabilities not reported within the last 90 days are transitioned to Stale state.
Select New to create a new auto-close rule.

Fill in the fields on the form.

Field	Value
Name	Name of the auto-close rule.
Active	Option to activate the rule. If activated, it closes any detections automatically that match its filter criteria.
Execution order	Unique value for the execution of the auto-close rule. This value determines the order of execution. The default value is 100.
Integration type	Application Vulnerability Integration
Description	Description of the auto-close rule.
Condition	Filter conditions used to identify detections that should be closed.

Select Submit.

The Auto-close Rules Processor scheduled job runs on a nightly basis. It identifies AVITs based on the specified conditions and transitions the matching ones to the Stale state. In cases where there are AVITs with both "Closed" and "Stale" statuses, the AVIT is closed with the sub-state set as Fixed.

Parent Topic:Application Vulnerability Response remediation tasks and task rules overview

51 lines · 2.5 KB Wrap lines

---
title: Create auto-close rules
description: Use auto-close rules to close older AVITs automatically based on the filter conditions that you set.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/avr-create-auto-close-rules.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Application Vulnerability Response remediation tasks and task rules overview, Configure Application Vulnerability Response, Configure, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Create auto-close rules

Use auto-close rules to close older AVITs automatically based on the filter conditions that you set.

## Before you begin

Role required: sn\_vul.app\_manage\_auto\_close\_rules

## Procedure

1. Navigate to **All** &gt; **Application Vulnerability Response** &gt; **Administration** &gt; **Auto-close rules**.

The base system provides the following auto-close rules:

**Application Vulnerabilities last scanned** Vulnerabilities not reported within the last 90 days are transitioned to **Stale** state.

2. Select **New** to create a new auto-close rule.

3. Fill in the fields on the form.

|Field|Value|
|-----|-----|
|Name|Name of the auto-close rule.|
|Active|Option to activate the rule. If activated, it closes any detections automatically that match its filter criteria.|
|Execution order|Unique value for the execution of the auto-close rule. This value determines the order of execution. The default value is 100.|
|Integration type|Application Vulnerability Integration|
|Description|Description of the auto-close rule.|
|Condition|Filter conditions used to identify detections that should be closed.|

4. Select **Submit**.

The **Auto-close Rules Processor** scheduled job runs on a nightly basis. It identifies AVITs based on the specified conditions and transitions the matching ones to the **Stale** state. In cases where there are AVITs with both "Closed" and "Stale" statuses, the AVIT is closed with the sub-state set as **Fixed**.

**Parent Topic:**[Application Vulnerability Response remediation tasks and task rules overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/avm-rt-rt-rules-overview.md)