Configure the Wiz Application Vulnerabilities Integration

---
title: Configure the Wiz Application Vulnerabilities Integration
description: Configure the Wiz Application Vulnerabilities, SCA, and Secrets Integrations.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/avr-wiz-config.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Configure, Vulnerability Response Integration with Wiz, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Configure the Wiz Application Vulnerabilities Integration

Configure the Wiz Application Vulnerabilities, SCA, and Secrets Integrations.

## Before you begin

Role required: sn\_vul\_wiz.configure\_integration

## About this task

The following table describes the benefits and users for the application vulnerability integrations.

|Supporting core application|Benefit|Wiz Integration|Users|
|---------------------------|-------|---------------|-----|
|Application Vulnerability Response|Import application, Software Composition Analysis \(SCA\) findings data.|Wiz SCA Findings Integration|Vulnerability managers and analysts and AppSec teams.|
|Application Vulnerability Response|Import Secrets \(passwords, tokens and keys\) data|Wiz Secret Findings Integration|Vulnerability managers and analysts, Cloud security and access management teams.|
|Application Vulnerability Response|Import an application inventory from Wiz and create application records that vulnerability and compliance findings can be linked back to.|Wiz Application List Integration|Vulnerability managers and analysts, software asset managers and teams, and application owners.|

## Procedure

1.  Navigate to **All** > **Wiz Vulnerability Integration** > **Administration** > **Configuration**.

2.  Select the **App Vulnerabilities Configuration** tab.

3.  Fill in the fields.

<table id="table_mmk_zty_43c"><thead><tr><th>

Field or check box

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Application List Record Count

</td><td>

Enter a value up to 1000 for the number of records processed at a time by the Application List Integration.

</td></tr><tr><td>

Software Composition Analysis \(SCA\) Findings Record Count

</td><td>

Enter a value up to 1000 for the number of records processed at a time by the SCA Findings Integration.

</td></tr><tr><td>

Manage Exceptions in ServiceNow

</td><td>

Choose one.

 **Not selected**.

 Leave the check box unselected to maintain the state of deferred findings imported from Wiz.

 Ignored findings \(status: REJECTED\) imported from Wiz are displayed as findings \(application vulnerable items\) in the state: **Deferred** reason: **Risk Accepted** in your ServiceNow AI Platform® instance.

 **Selected**.

 Select the check box if you want to process ignored findings from Wiz with the Exception Management workflow in your ServiceNow AI Platform® instance.

 Ignored findings \(status: REJECTED\) imported from Wiz are transitioned to the **Open** state in your instance.

</td></tr><tr><td>

Secret Findings Record Count

</td><td>

Enter a value up to 1000 for the number of records processed at a time by the Secret Findings Integration.

</td></tr></tbody>
</table>4.  Backdate the integration run.

    See [Configure the Vulnerability Response Integration with Wiz](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-config-wiz-host-vuln.md) for more information.

5.  **Select Save and test**.

    If the credentials have been saved and validated successfully a message is displayed. You can select filtering for another integration import.

    -   Application List Integration - Imports applications data from Wiz to the Discovered Applications \[sn\_vul\_app\_release\] table. Populates fields such as, Product Model, Source application ID for Wiz, and the GitHub link \[url\] for the repository.
    -   SCA Findings Integration - Imports SCA data and creates a finding \(AVIT\) on the Application Vulnerable Items \[sn\_vul\_app\_vulnerable\_item\] table. Data includes the associated vulnerability, discovered application, and package. On the Findings tab, the Source AVIT ID is provided by Wiz. Source link points to the Wiz endpoint. The integration checks to see if a discovered application record exists, and, if one is not found, one is created.
    -   Secret Findings Integration - Data includes the associated vulnerability, discovered application, and Source AVIT ID and Source severity on the Findings tab.
    Data population. For more information about Application Vulnerability Response, integrations, and imported data, see [Exploring Application Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/app-vuln-mgmt.md).