ServiceNow Integration

Create ServiceNow incidents automatically when critical CVEs hit your environment.

Prerequisites

• ServiceNow instance URL (e.g. yourorg.service-now.com)
• ServiceNow user credentials with rights to create incidents
• The table to write to (default: incident)

Configure in BreachSpider

1. Navigate to Integrations > Ticketing
2. Click Add Rule
3. Select destination type: ServiceNow
4. Fill in:
5. Instance URL (without https://)
6. Username
7. Password
8. Table (default: incident)
9. Click Test Connection - creates a test incident
10. Click Save Rule

Via API

rule = {
    "name": "Plant Floor ServiceNow",
    "environment_id": 3,
    "trigger_event": "kev.new",
    "severity_floor": 7.0,
    "destination_type": "servicenow",
    "servicenow_instance": "yourorg.service-now.com",
    "servicenow_user": "breachspider_integration",
    "servicenow_password": "your-password",
    "servicenow_table": "incident"
}

response = requests.post(
    "https://breachspider.com/api/v1/integrations/ticket-rules",
    headers=headers,
    json=rule
)

Incident Fields