ServiceNow Integration

Status: A ServiceNow ticket rule can be saved and tested, but BreachSpider does not currently create ServiceNow records automatically. See How Alerts Work.

Create ServiceNow incidents automatically when critical CVEs hit your environment.

Prerequisites

• ServiceNow instance URL (e.g. yourorg.service-now.com)
• ServiceNow user credentials with rights to create incidents
• The table to write to (default: incident)

Configure in BreachSpider

1. Navigate to Integrations > Ticketing
2. Click Add Rule
3. Select destination type: ServiceNow
4. Fill in:
5. Instance URL (without https://)
6. Username
7. Password
8. Table (default: incident)
9. Click Test Connection - creates a test incident
10. Click Save Rule

Via API

rule = {
    "name": "Plant Floor ServiceNow",
    "environment_id": 3,
    "trigger_event": "kev.new",
    "severity_floor": 7.0,
    "destination_type": "servicenow",
    "servicenow_instance": "yourorg.service-now.com",
    "servicenow_user": "breachspider_integration",
    "servicenow_password": "your-password",
    "servicenow_table": "incident"
}

response = requests.post(
    "https://breachspider.com/api/v1/integrations/ticket-rules",
    headers=headers,
    json=rule
)

Incident Fields