---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Manually create a remediation task in Vulnerability Response

# Manually create a remediation task in Vulnerability Response {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Creating a remediation task manually is done when you want to group vulnerable items by something other than the Remediation Task Rules criteria. For example, you can create tasks for a particular manager, or for active, new
exploits, such as ransomware that include different vulnerabilities. You can also use it to group ungrouped vulnerable items.
Important:  
You can create host remediation tasks in the:

* Vulnerability Manager Workspace as a user with the sn_vul.vulnerability_analyst, or sn_vul.vulnerability_admin role.
* IT Remediation Workspace as a user with sn_vul.remediation_owner role.
{#create-vulnerability-group__ul_y5r_wrb_d2c}

## Before you begin

Role required: sn_vul.vulnerability_analyst, sn_vul.vulnerability_admin or sn_vul.admin (deprecated)

## Procedure

1. Navigate to AllVulnerability ResponseRemediation Tasks.  
   Remediation task rules work the same way that remediation task rules previously worked, and they are still available to you. However, you might prefer to leave remediation task rules inactive as
   you get used to the features that are available to your security managers and IT teams in the workspaces.
2. Select one of the categories for tasks to open the list.
3. Click New.
4. Fill in the fields on the form, as appropriate.  
   For information on specific fields, see [Remediation task form fields](https://servicenow-prod.fluidtopics.net/a059TXuI6IcaNX1WGOT6WA "Using remediation tasks, the analyst can monitor progress and drive the mediation process more efficiently.").
5. Click Submit.  
   When the task is created, using the Condition or Filter Group filter type the Vulnerable Item related list searches for and displays all matching vulnerable items.

   You can use the Related Link, Re-scan for Vulnerabilities to manually trigger a ServiceNow® - initiated scan. For information on how to configure a vulnerability scanner, see [Configure and manage Qualys vulnerability scanners and scans](https://servicenow-prod.fluidtopics.net/LHibAKAl2TYK6hcWWVuBfw#c_VulnerabilityScans "Qualys vulnerability scans can be performed to find software vulnerabilities that affect your CIs. You can initiate scans from a vulnerable item record or by creating a scan record directly for configuration items (CIs) and IP addresses.").

   For a Qualys Vulnerability Integration, a default scanner is
   pre-installed in the Vulnerability Scanners module. This
   scanner is deactivated by default. Select the Active and
   Default check boxes to activate the Qualys scanner to
   work using the Scan for Vulnerabilities related link on the
   remediation task and vulnerable item forms.

   The Update status related link displays the date and time of the last update. It rolls up information from the VIs in the remediation task. See [Remediation task form fields](https://servicenow-prod.fluidtopics.net/a059TXuI6IcaNX1WGOT6WA "Using remediation tasks, the analyst can monitor progress and drive the mediation process more efficiently.") for more information. When a task is formed based on a specific vulnerability, that vulnerability is listed on the remediation task form.

   If you open an associated vulnerable item, any associated remediation task entries appear under the Remediation Task related list tab.
{#create-vulnerability-group__steps_uv4_kky_w5}

*[\>]: and then