Exposure assessment by software

---
title: Exposure assessment by software
description: Exposure assessment for zero-day vulnerabilities, when Common Vulnerabilities and Exposures \(CVEs\) for the asset or configuration item is not available. It uses the software information to assess exposure, using the software discovery model.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response-workspaces/vr-ws-exposure-assessment-software.html
release: brazil
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Exploring exposure assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Exposure assessment by software

Exposure assessment for zero-day vulnerabilities, when Common Vulnerabilities and Exposures \(CVEs\) for the asset or configuration item is not available. It uses the software information to assess exposure, using the software discovery model.

For information on assessing exposure by software, see:

-   [Add software for exposure assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/vr-ws-add-software.md)
-   [Create VIs for software for exposure assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/vr-ws-create-vis-for-software.md)
-   [Activate or deactivate software for exposure assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/vr-ws-activate-deactivate-software.md)
-   [Export impacted CIs for software in the Vulnerability Assessment workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response-workspaces/vr-ws-export-cis-software.md)