--- sourceDocument: Australia Security Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Integrate with other applications # Integrating Container Vulnerability Response with other applications {#ariaid-title1} * Release version: Australia * * Updated April 1, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Integrating Container Vulnerability Response with other applications Container Vulnerability Response (CVR) in ServiceNow extends its capabilities by integrating with various container security and vulnerability management applications. It collects vulnerability data for container images deployed at runtime and enriches this data with contextual runtime information, such as hosts, Kubernetes clusters, services, and namespaces. This enriched data is linked to relevant Kubernetes entities in the Configuration Management Database (CMDB) through Kubernetes discovery. CVR also provides a comprehensive dashboard for vulnerability and remediation insights. Show full answer Show less ## Key Integrations * **Palo Alto Networks Prisma Cloud Compute:** Scans container images to detect vulnerabilities and feeds this data into CVR. * **Atlassian Jira:** Supports agile issue creation within the Vulnerability Manager Workspace to track remediation of Container Vulnerability Issues and Runtime Threats. * **Tenable Vulnerability Integration:** Imports vulnerability data from Tenable products into CVR. * **AWS Integration for Security Exposure Management:** Imports container vulnerability data from AWS security services. * **Wiz Container Vulnerability Integration:** Included within the Wiz Vulnerability Response Integration to import vulnerability data. ## Integration Processing and Performance Considerations During integration, data is processed in pages via multiple import queue entries that must complete within a one-hour time limit. Large payloads may cause processing delays or timeouts. To handle this, starting from CVR version 2.1.2, the system sends periodic timestamps (heartbeats) to indicate active processing. The **Last Record Processed** field tracks progress and helps identify stuck import entries to time them out and prevent delays. Two system properties control heartbeat behavior: * **snseccmn.recordthresholdheartbeat:** Number of processed records before sending a heartbeat timestamp. * **snseccmn.maximumheartbeatdelay:** Maximum allowed delay before timing out an import queue entry. ## Practical Benefits for ServiceNow Customers * Gain a unified view of container vulnerabilities enriched with runtime and Kubernetes metadata for better context. * Track and remediate vulnerabilities efficiently by integrating with popular security tools and agile issue trackers. * Benefit from automated data processing safeguards that maintain integration reliability and prevent processing delays. * Leverage ServiceNow's reporting dashboards to monitor vulnerability trends and remediation progress comprehensively. Extend the capabilities of Container Vulnerability Response by integrating with other applications. Container Vulnerability Response integrates with container security products to pull vulnerability data for those images which are deployed to runtime. It then enriches the vulnerability data with the runtime contextual information such as hosts, Kubernetes clusters, services, and namespaces where these container images are deployed. With ServiceNow's Kubernetes discovery, you can see the references created from vulnerabilities to the relevant Kubernetes entities in your Configuration Management Database (CMDB). In addition to enriching the metadata, ServiceNow also offers a comprehensive reporting dashboard to provide insights into the vulnerability and remediation trends. Container Vulnerability Response provides integrations with the following applications: * [Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute integration](https://servicenow-prod.fluidtopics.net/feo76oCpZ9k2a_r4hRZS4Q "The Prisma Cloud Compute integration enables you to scan container images to detect vulnerabilities.") * [Understanding the Atlassian Jira integration with Vulnerability Response](https://servicenow-prod.fluidtopics.net/cmCLwGl6beN5RwzHfE0PQw "The Atlassian Jira integration with Vulnerability Response enables you to leverage different issue-tracking and agile management tools for tracking efforts of vulnerability remediation.") * [Understanding the Tenable Vulnerability Integration](https://servicenow-prod.fluidtopics.net/LBEiVzZ9snj0he1KfeiBpw "The Vulnerability Response Integration with Tenable application developed by ServiceNow engineering for the Tenable Vulnerability Integration uses data imported from the Tenable.io, Tenable.sc, and Tenable.cs products to help you prioritize and remediate vulnerabilities for your assets. The application is available with a separate subscription from the ServiceNow Store.") * Important: In the Vulnerability Manager Workspace, you can create an agile issue manually using the [list action](https://servicenow-prod.fluidtopics.net/faF33fqOIp98D_1M~4Cuiw "When a list action: Create Jira Issue is triggered, records that match the rule configuration criteria should be considered for “Create Jira Issue” and those records should be ingested into the sn_vul_agile_tool_manifest table with the mapping selected in the configuration rule.") and [form action](https://servicenow-prod.fluidtopics.net/jL2M2xkFTLVzhGd_VGVsFQ "Create an agile issue manually using form action. If the record is matched with any configuration rule condition, then a pop-up box will be populated with values that are selected in the configuration rule and if it does not match any criteria then the user will be allowed to select values for pre-defined fields.") to track the remediation of CVITs and RTs. {#integrate-cvr__ul_hwy_24p_5xb} ## Additional notes for integrations {#integrate-cvr__section_aw5_cnz_wvb} During integration execution, multiple processes are generated, and data is received in the form of pages. Each process can contain one or more import queue entries with attached data in pages. These entries must process the data within the one-hour time limit. However, if the payload size is large, the processing time may exceed one hour or get stuck, resulting in an integration timeout error. The integration continues to process the data despite the timeout error. To avoid this miscommunication, starting from version 2.1.2 of Container Vulnerability Response, timestamps (heartbeats) are sent periodically to indicate if the queue is active and processing data. The Last Record Processed field in the Import Queue Entry page is updated based on the count of records the import queue creates or updates. In case an import queue entry exceeds the one-hour time limit, the system checks the Last Record Processed field to see if it is also older than one hour. If it is, this indicates that the import queue entry is stuck, and it is timed out to prevent any further delays in processing. Note: The Last Record Processed field is updated based on what is defined in the following system properties: * sn_sec_cmn.record_threshold_heartbeat: Defines the number of processed records, after which the heartbeat (timestamp) is sent to the import queue entry. * sn_sec_cmn.maximum_heartbeat_delay: Defines the time after which the import queue entry must be timed out. {#integrate-cvr__ul_g23_sgw_dyb} * **[Exploring the AWS Integration for Security Exposure Management Container Vulnerability Integrations](https://servicenow-prod.fluidtopics.net/0DJW4xAB3F0CgjpCgbUlng)** Import container vulnerability data with the AWS Integration for Security Exposure Management application. * **[Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute integration](https://servicenow-prod.fluidtopics.net/feo76oCpZ9k2a_r4hRZS4Q)** The Prisma Cloud Compute integration enables you to scan container images to detect vulnerabilities. * **[Exploring the Wiz Container Vulnerability Integration](https://servicenow-prod.fluidtopics.net/9M6cdz~scnndUUmLqfBnVA)** Import container vulnerability data with the Wiz Container Vulnerability Integration that is included with the Wiz Vulnerability Response Integration.