No more typing reviews! Try our Samantha, our new voice AI agent.

ServiceNow Security Operations pros and cons

Vendor: ServiceNow

4.0 out of 5

24 reviews
95% willing to recommend

Pros & Cons summary

ServiceNow Security Operations enhances vulnerability control, allowing users to label false alarms and integrate third-party tools for enriched intelligence. It consolidates data from multiple sources for a unified experience and cost optimization by integrating with IT Service Management. Despite report generation delays, team transition challenges, and documentation gaps, ServiceNow aids digital transformation. Developer support, third-party input robustness, and accurate CMDB data need refinement for improving usability and effectiveness.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

ServiceNow Security Operations provides significant control over vulnerabilities, allowing users to mark false alarms as false positives and ignore them.

ServiceNow Security Operations collects data from various sources, presenting it in a single format for assessment and action, providing a unified user experience.

Integration with third-party tools allows ServiceNow Security Operations to offer a consolidated view of vulnerabilities, incidents, and an enriched intelligence for governance risk and compliance.

ServiceNow Security Operations optimizes security costs by consolidating multiple tools into one platform, integrating with IT Service Management, IT Operations Management, and more for digital and business transformation.

ServiceNow Security Operations is beneficial for vulnerability response, engagement purposes, and helps prevent vulnerability attacks by managing vulnerabilities effectively.

CONS

Report generation within ServiceNow can take a significant amount of time, and there are occasional issues when raising a ticket, which can also be time-consuming.

Visibility and transitions between teams present significant challenges in SecOps, indicating that substantial training is required to improve usability.

There is room for improvement in developer support and documentation.

There are limitations for third parties providing inputs, requiring increased robustness.

An area for improvement is the need to maintain correct CMDB data as inaccuracies can affect vulnerability data.

ServiceNow Security Operations Pros review quotes

Senior Consultant (Siem Admin) at IBM

May 10, 2026

ServiceNow Security Operations has helped me in getting more precise results.

Read full review

SH

Freelancer at a media company with 1,001-5,000 employees

Mar 13, 2026

These features are very seamless, and the workspace along with the unified view of the entire application is something that is very impressive.

Read full review

Service Now Developer at Bangmetric services pvt ltd

Aug 6, 2025

ServiceNow Security Operations collects data from various sources and presents it in a single, respectable format for assessment and action, providing a unified user experience where all work and fixes can be managed from one location.

Read full review

ServiceNow Security Operations

Free Report: ServiceNow Security Operations Reviews and More

Learn what your peers think about ServiceNow Security Operations. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.

908,834 professionals have used our research since 2012.

Associate Vice President at Wissen infotech

Jun 5, 2025

ServiceNow Security Operations provides significant control over vulnerabilities, allowing users to mark false alarms as false positives and ignore them, which is important because many vulnerabilities are not real but appear as such.

Read full review

DevOps Team Lead at Tata Consultancy

Feb 10, 2025

ServiceNow is a convenient platform to raise tickets, and the respective support team will contact us to resolve any issues.

Read full review

Senior DeliveryManager at ITC Infotech

May 9, 2024

It has helped optimize security costs by consolidating multiple tools into one platform.

Read full review

Integrator at Conduent (formerly Xerox Services)

May 29, 2024

The SOAR module of ServiceNow Security Operations is the most valuable feature

Read full review

End User Support at Genpact - Headstrong

Oct 26, 2023

The "follow" feature is really good. If the user is not responding, there's an option to "follow". Just click on the button, and it will automatically trigger an email to the end user.

Read full review

Solutions Architect at NEC Corporation

Aug 22, 2024

The product's most valuable features include the no-code capability for workflows and flow design, which makes it user-friendly, and the ability to perform advanced configurations.

Read full review

LuongHOang Viet

Business Analyst at FirstQA Systems Limited

Nov 28, 2023

The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product.

Read full review

Show 10 more reviews (out of 22)

ServiceNow Security Operations Cons review quotes

Senior Consultant (Siem Admin) at IBM

May 10, 2026

I would like to see new features added, particularly regarding the incident upgrading part.

Read full review

SH

Freelancer at a media company with 1,001-5,000 employees

Mar 13, 2026

I would rate technical support for ServiceNow Security Operations as a six out of ten in terms of faster resolution.

Read full review

Service Now Developer at Bangmetric services pvt ltd

Aug 6, 2025

ServiceNow Security Operations is not specifically a vulnerability management or incident tool, but rather a data aggregator.

Read full review

ServiceNow Security Operations

Free Report: ServiceNow Security Operations Reviews and More

Learn what your peers think about ServiceNow Security Operations. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.

908,834 professionals have used our research since 2012.

Associate Vice President at Wissen infotech

Jun 5, 2025

Visibility and transitions between teams present significant challenges in the SecOps space, indicating that substantial training and hand-holding are required to improve usability, which is one observation I have had.

Read full review

DevOps Team Lead at Tata Consultancy

Feb 10, 2025

Report generation within ServiceNow can take some time.

Read full review

Senior DeliveryManager at ITC Infotech

May 9, 2024

Customer awareness and understanding of ServiceNow's SecOps capabilities could be improved.

Read full review

Integrator at Conduent (formerly Xerox Services)

May 29, 2024

The dashboard and playbook creation will need to improve

Read full review

End User Support at Genpact - Headstrong

Oct 26, 2023

In future releases, I would like to add a follow-up and reminder feature. For the tickets in our queue, we could set reminders. This would help us prioritize older tickets before moving on to new ones.

Read full review

Solutions Architect at NEC Corporation

Aug 22, 2024

One area for improvement for the product is the need to tailor and alter some codes for customization, which can cause issues during upgrades. It does not support customized operations.

Read full review

LuongHOang Viet

Business Analyst at FirstQA Systems Limited

Nov 28, 2023

There is room for improvement in terms of developer support and documentation.

Read full review

Show 10 more reviews (out of 22)

Product Categories

Product Categories

Security Incident Response

Security Orchestration Automation and Response (SOAR)

Risk-Based Vulnerability Management

Popular Comparisons

Popular Comparisons

IBM Security QRadar vs ServiceNow Security Operations

Microsoft Sentinel vs ServiceNow Security Operations

Elastic Security vs ServiceNow Security Operations

Qualys VMDR vs ServiceNow Security Operations

Palo Alto Networks Cortex XSOAR vs ServiceNow Security Operations

Exabeam vs ServiceNow Security Operations

Tenable Vulnerability Management vs ServiceNow Security Operations

VMware Carbon Black Endpoint vs ServiceNow Security Operations

Stellar Cyber Open XDR vs ServiceNow Security Operations

NetWitness NDR vs ServiceNow Security Operations

Splunk SOAR vs ServiceNow Security Operations

Microsoft Defender Vulnerability Management vs ServiceNow Security Operations

Armis vs ServiceNow Security Operations

Tines vs ServiceNow Security Operations

Google Security Operations vs ServiceNow Security Operations

See all alternatives

Product Categories

Product Categories

Security Incident Response

Security Orchestration Automation and Response (SOAR)

Risk-Based Vulnerability Management

Popular Comparisons

Popular Comparisons

IBM Security QRadar vs ServiceNow Security Operations

Microsoft Sentinel vs ServiceNow Security Operations

Elastic Security vs ServiceNow Security Operations

Qualys VMDR vs ServiceNow Security Operations

Palo Alto Networks Cortex XSOAR vs ServiceNow Security Operations

Exabeam vs ServiceNow Security Operations

Tenable Vulnerability Management vs ServiceNow Security Operations

VMware Carbon Black Endpoint vs ServiceNow Security Operations

Stellar Cyber Open XDR vs ServiceNow Security Operations

NetWitness NDR vs ServiceNow Security Operations

Splunk SOAR vs ServiceNow Security Operations

Microsoft Defender Vulnerability Management vs ServiceNow Security Operations

Armis vs ServiceNow Security Operations

Tines vs ServiceNow Security Operations

Google Security Operations vs ServiceNow Security Operations

See all alternatives

Related questions

230

What are the pros and cons of internal SOC vs SOC-as-a-Service?

391

What are the Top 5 cybersecurity trends in 2022?

341

How do you decide about the alert severity in your Security Operations Center (SOC)?

159

What is the difference between cyber resilience and business continuity?

144

What is an incident response playbook and how is it used in SOAR?

132

What is the difference between mitigation and remediation in incident response?

257

What does the Log4j/Log4Shell vulnerability mean for your company?

242

What tools and solutions do you use for automated incident response in an enterprise in 2022?

108

What are the latest trends in Security Operations Center (SOC)?

111

What are the best practices for Security Operations Center (SOC)?