Using generative AI skills
AI skills help vulnerability managers and analysts resolve remediation tasks within their flow of work by providing automated insights, recommendations, and data analysis.
Note: Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. For more information, see ServiceNow product tiers.
Skills in global domain reuse
By default, all skills exist in the global domain. When you use AI in a domain-separated environment, users are only able to access data in their domain. For example, if a user uses the summarization skill, AI only uses material that exists in the user's domain when generating that summary. Additionally, there is no co-mingling of data for domain-separated instances when using generative AI skills. The data resides only on the instance, and the shared services used for generative AI do not persist any requests (prompts) and responses. For more information, see Domain separation in the AI Admin Hub console. (Note that global domain is not the same as global scope. For more information, see Exploring Next Experience pickers.)
Overview of available ServiceNow Otto for Unified Security Exposure Management skills
With generative AI skills with ServiceNow Otto for Unified Security Exposure Management, your vulnerability managers and analysts have the option to use generative AI skills to help them with the following tasks. Unless otherwise noted, these generative AI skills are supported in both the legacy and Unified Security Exposure Management (USEM) workspaces.
|
Generative AI skill |
Description |
Users |
|---|---|---|
|
Evaluate vulnerability exposure data with Security Exposure 360 |
Enter questions in plain language to receive comprehensive answers about findings for host, container, and test results vulnerabilities. |
Vulnerability managers and analysts |
|
Identify finding types, understand mapped guardrails, and see why specific findings were selected for mapping. This information helps you determine which findings are already mitigated or deferred for later review. Note: Supported only in the Unified Security Exposure Management (USEM) workspace. |
Vulnerability analysts, vulnerability managers, and chief information security officers (CISOs) | |
|
Receive insights based on contextual summaries and see actionable recommendations. |
Vulnerability managers and analysts | |
|
Receive on-demand approval and false positive recommendations. |
Exception and false positive approvers | |
|
Automatically populate steps in the API Connector builder. Note: You must install and activate the required applications and ServiceNow Otto for Unified Security Exposure Management to use the generative AI skill to help you create your own API connector. |
Developers in your organization, vulnerability and security admins | |
|
Identify and group duplicate vulnerable items (VITs) created from multiple scanners. Identify the primary vulnerable item and remove (close) duplicates. |
Vulnerability managers and analysts | |
|
Identify the most appropriate preferred solution for a given vulnerable item (VIT). Requirements:
|
Vulnerability managers and analysts | |
|
Understand your security posture with AI-generated summaries and recommendations to help you prioritize and act on critical findings. |
Vulnerability managers and analysts | |
|
Streamline the approval process for exceptions and false positive requests with AI-driven recommendations. |
Vulnerability managers and analysts |
--- title: Using generative AI skills description: AI skills help vulnerability managers and analysts resolve remediation tasks within their flow of work by providing automated insights, recommendations, and data analysis. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/using-now-assist-skills-vulnerability-response.html release: australia topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 5 breadcrumb: [ServiceNow Otto for Unified Security Exposure Management, Security Operations] --- # Using generative AI skills AI skills help vulnerability managers and analysts resolve remediation tasks within their flow of work by providing automated insights, recommendations, and data analysis. **Note:** Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. For more information, see [ServiceNow product tiers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/ai-native-sku-overview.md). ## Skills in global domain reuse By default, all skills exist in the global domain. When you use AI in a domain-separated environment, users are only able to access data in their domain. For example, if a user uses the summarization skill, AI only uses material that exists in the user's domain when generating that summary. Additionally, there is no co-mingling of data for domain-separated instances when using generative AI skills. The data resides only on the instance, and the shared services used for generative AI do not persist any requests \(prompts\) and responses. For more information, see [Domain separation in the AI Admin Hub console](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/domain-separation-in-the-now-assist-admin-console.md). \(Note that global domain is not the same as global scope. For more information, see [Exploring Next Experience pickers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-user-interface/next-experience-pickers.md).\) ## Overview of available ServiceNow Otto for Unified Security Exposure Management skills With generative AI skills with ServiceNow Otto for Unified Security Exposure Management, your vulnerability managers and analysts have the option to use generative AI skills to help them with the following tasks. Unless otherwise noted, these generative AI skills are supported in both the legacy and Unified Security Exposure Management \(USEM\) workspaces. <table id="table_cw1_njt_hjc"><thead><tr><th> Generative AI skill </th><th> Description </th><th> Users </th></tr></thead><tbody><tr><td> [Evaluate vulnerability exposure data with Security Exposure 360](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/now-assist-review-vulnerability-exposure-data.md) </td><td> Enter questions in plain language to receive comprehensive answers about findings for host, container, and test results vulnerabilities. </td><td> Vulnerability managers and analysts </td></tr><tr><td> [Using the AI guardrails helper skill and agentic workflow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/ai-security-exposure-skill-agent.md) </td><td> Identify finding types, understand mapped guardrails, and see why specific findings were selected for mapping. This information helps you determine which findings are already mitigated or deferred for later review. **Note:** Supported only in the Unified Security Exposure Management \(USEM\) workspace. </td><td> Vulnerability analysts, vulnerability managers, and chief information security officers \(CISOs\) </td></tr><tr><td> [Generate vulnerability insights with generative AI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-insights-skill.md) </td><td> Receive insights based on contextual summaries and see actionable recommendations. </td><td> Vulnerability managers and analysts </td></tr><tr><td> [Get exception and false positive approval recommendations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-approval-recommendation-skill.md) </td><td> Receive on-demand approval and false positive recommendations. </td><td> Exception and false positive approvers </td></tr><tr><td> [Create an API connector with generative AI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/select-api-template.md) </td><td> Automatically populate steps in the API Connector builder. **Note:** You must install and activate [the required applications](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/using-now-assist-api-connector.md) and ServiceNow Otto for Unified Security Exposure Management to use the generative AI skill to help you create your own API connector. </td><td> Developers in your organization, vulnerability and security admins </td></tr><tr><td> [Identify duplicate vulnerable items with generative AI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/dedupe-host-vi-now-assist-vulnerability-response.md) </td><td> Identify and group duplicate vulnerable items \(VITs\) created from multiple scanners. Identify the primary vulnerable item and remove \(close\) duplicates. </td><td> Vulnerability managers and analysts </td></tr><tr><td> [Suggest vulnerability solutions with generative AI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/solutions-now-assist-vulnerability-response.md) </td><td> Identify the most appropriate preferred solution for a given vulnerable item \(VIT\). Requirements: - You must install and activate Vulnerability Solution Management \[sn\_vul\_solution\] to import and view preferred and available vulnerability solutions. This application provides you with current solutions with scheduled imports. Vulnerability Solution Management is available on the ServiceNow® Store. - This generative AI skill supports only active host vulnerable items \(VITs\). VITs must be in the **Open**, **Under Investigation**, **Awaiting Implementation**, or **In Review** states. - Current solutions that most effectively address vulnerabilities, also referred to as solutions of the highest supersedence, must be available for you to import from third-party vendors. See [Vulnerability Solution Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-solution-mgmt.md) for more information about Vulnerability Solution Management and supported integrations for more information. - The **Configuration item** field on a VIT must be populated with a value from the Configuration Item \[cmdb\_ci\] table. - The **Vulnerability** field on a VIT must be populated. </td><td> Vulnerability managers and analysts </td></tr><tr><td> [Generate vulnerability insights with generative AI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-insights-skill.md) </td><td> Understand your security posture with AI-generated summaries and recommendations to help you prioritize and act on critical findings. </td><td> Vulnerability managers and analysts </td></tr><tr><td> [Generate a recommendation for approval impact analysis](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-approval-recommendation-skill.md) </td><td> Streamline the approval process for exceptions and false positive requests with AI-driven recommendations. </td><td> Vulnerability managers and analysts </td></tr></tbody> </table>
| title | Using generative AI skills |
| description | AI skills help vulnerability managers and analysts resolve remediation tasks within their flow of work by providing automated insights, recommendations, and data analysis. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/using-now-assist-skills-vulnerability-response.html |
| release | australia |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 5 |
| breadcrumb | ServiceNow Otto for Unified Security Exposure ManagementSecurity Operations |