> For the complete documentation index, see [llms.txt](https://docs.snyk.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-api-web/integrations/issue-tracking/integrate-with-servicenow.md).

# Integrate with ServiceNow

How to integrate Snyk API & Web with ServiceNow

{% hint style="info" %}
**Snyk is rolling out a new navigation.** The steps on this page describe the classic interface. If your view looks different, visit [Navigate the Snyk Web UI](https://docs.snyk.io/navigate-the-snyk-web-ui#where-things-moved) to map these options to the new interface.
{% endhint %}

## Integrate with ServiceNow

This integration periodically fetches data, such as targets and findings, from the Snyk API & Web platform and includes it in your ServiceNow Application Vulnerability Response (AVR) tables. This lets you manage Snyk vulnerabilities in your ServiceNow workflow.

### Prerequisites

Ensure you have the following:

* Snyk API & Web requirements:
  * A Snyk API Key.
  * Your Snyk base URL.
  * A valid Enterprise license for the Snyk platform.
* ServiceNow version compatibility:
  * Washington DC, Xanadu, or Yokohama.
* Required ServiceNow plugins:
  * **Vulnerability Response** (version 25.0.7 or newer). You must have a Pro or Enterprise license for this plugin.
* Required ServiceNow roles:
  * You must have the **System Administrator (admin)** role in ServiceNow to install the application and configure system properties.

### Install the Snyk API & Web application in ServiceNow

First, install the Snyk API & Web application from the ServiceNow Store.

1. Navigate to the ServiceNow Store at `https://store.servicenow.com` and search for "Snyk API and Web", or access the application directly.
2. Click **Get** and enter your ServiceNow account HI credentials to add the application to your instance.
3. Log in to your ServiceNow instance as a System Administrator.
4. Navigate to **Applications > All Available Applications > All**.
5. Find the **Snyk API and Web** application and click **Install**.

### Assign required roles to users

After installation, assign the necessary roles to the users or groups who manage the integration.

1. In your ServiceNow instance, navigate to **User Administration > Users**.
2. Select the user you want to assign roles to.
3. In the user record, under the **Roles** tab, click **Edit**.
4. Search for and add the following roles:
   * **sn\_vul.app\_configure\_integrations**
   * **sn\_vul.app\_update\_state**
   * **sn\_vul.app\_write\_all**
   * **x\_snyk2\_api\_web\_vr.admin** (This is the Snyk Application Admin role)
5. Click **Save**.

### Authenticate and configure the integration

Next, connect the application to your Snyk account and configure the data filters.

1. In ServiceNow, navigate to the **Snyk API and Web** application menu and select **Authentication**.
2. Enter your Snyk base URL (if different from the default). For example, `https://api.eu.probely.com`, `https://api.us.probely.com`, and so on.
3. Paste your Snyk API Key into the corresponding field.
4. Click **Authenticate Credentials** to validate the connection.
5. After authentication is successful, expand the **Filter Configuration** section. Here you can define which assets and findings to import.
   * **Target Labels**: Filter by Snyk target labels.
   * **Finding Labels**: Filter by Snyk finding labels.
   * **Teams**: Filter by Snyk teams.
   * **Severity**: Filter by Snyk severity level (Low, Medium, High, Critical).

**Note:** Within a single filter, an **OR** logic is used (for example, selecting **High** and **Critical** imports findings with either severity). Across different filters, an **AND** logic is used (for example, selecting a target label and a severity requires a finding to match both).

1. Click **Save Filter Configuration**. If no filters are selected, the integration fetches all targets and findings by default.

### Perform the initial data import

After authentication, run the initial import to pull findings from Snyk into ServiceNow.

1. In ServiceNow, navigate to the **Snyk API and Web** application menu and click **Integrations**.
2. Select the **Snyk Findings Import** record.
3. To run the import immediately, click **Execute Now**.
4. To set up a recurring import, select the **Active** box and configure the schedule (for example, Daily, Weekly, or Monthly) as needed.

### Verify the outcome

After the integration run is complete, you can verify its success:

* **View imported targets**: Navigate to **Snyk API and Web > Targets**. You see a list of the application targets imported from Snyk.
* **View vulnerable items**: Navigate to **Snyk API and Web > Application Vulnerable Items**. This list contains all the findings from Snyk.
* **Check the dashboard**: Navigate to **Snyk API and Web > Snyk Dashboards** for a graphical overview of the imported data.

### Manage the integration

#### Retest findings

When an Application Vulnerable Item (AVIT) is closed in ServiceNow, you can trigger a retest in Snyk.

1. Navigate to **Snyk API and Web > Retest Targets**.
2. Ensure the **Scheduled Script Execution** is set to **Active**. This job periodically checks for closed AVITs and initiates a retest in Snyk.

#### Fetch labels and teams

To update the available filter options in the configuration, you can manually fetch the latest labels and teams from Snyk.

1. Navigate to **Snyk API and Web > Fetch Labels and Teams**.
2. Click **Execute Now**.

#### Advanced configuration

The integration includes default assignment rules and CI lookup rules. You can customize these to fit your company workflow by navigating to **Application Vulnerability Response > Administration**.

**Important:** Do not delete the integration record from the **Integrations** module. Doing so requires a full reinstallation of the application.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-api-web/integrations/issue-tracking/integrate-with-servicenow.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.