ServiceNow Security Operations Reviews

Name: ServiceNow Security Operations
Brand: ServiceNow
Rating: 4.0 (22 reviews)

4.0 out of 5

22 reviews
95% willing to recommend

What is ServiceNow Security Operations?

ServiceNow Security Operations is a cutting-edge security solution designed to elevate organizations' security incident response (SIR) processes through automation and orchestration. Going beyond traditional SOAR, this comprehensive Security Operations Suite integrates seamlessly with other ServiceNow products and offers a wide array of features. Its components include Security Incident Response (SIR), which automates incident workflows and offers pre-built playbooks; Security Configuration Compliance (SCC), continuously scanning and automating compliance tasks; Vulnerability Response (VR), prioritizing and remediating vulnerabilities; Threat Intelligence (TI), aggregating threat data for proactive threat hunting; and additional features like IT Service Management integration, Machine Learning and AI, reporting, and a mobile app. The benefits span improved incident response speed, reduced mean time to resolution, increased security posture, enhanced compliance, collaborative synergy between security and IT teams, and operational cost reductions.

Get the ServiceNow Security Operations Buyer's Guide and find out what your peers are saying about ServiceNow Security Operations, Microsoft Sentinel, IBM Security QRadar and more!

ServiceNow Security Operations is the #1 ranked solution in top Security Incident Response solutions, #5 ranked solution in SOAR tools, and #10 ranked solution in top Risk-Based Vulnerability Management solutions. PeerSpot users give ServiceNow Security Operations an average rating of 8.0 out of 10. ServiceNow Security Operations is most commonly compared to Microsoft Sentinel: ServiceNow Security Operations vs Microsoft Sentinel. ServiceNow Security Operations is popular among the large enterprise segment, accounting for 67% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 20% of all views.

Buyer's Guide

ServiceNow Security Operations

July 2025

Get the report

Helped 865,164 peers since 2012

Featured ServiceNow Security Operations reviews

George Devasia

DevOps Team Lead at Tata Consultancy

I use ServiceNow for ticketing purposes. Specifically, I raise tickets between the support team. This is used by internal teams within the company for managing support-related tasks ServiceNow is a convenient platform to raise tickets, and the respective support team will contact us to resolve…

Read full review

Abhinay Sharma

ServiceNow Developer at Bangmetric services pvt ltd

Integration is crucial in ServiceNow Security Operations because everything must be integrated to obtain data. Without integration, the solution is not as beneficial as expected. In SecOps, real-time data is essential to avoid discrepancies between real-time events and ServiceNow data. Multiple tools integrate with ServiceNow Security Operations, with Qualys being one of them. ServiceNow Security Operations collects data from various sources and presents it in a single, respectable format for assessment and action. The main benefit is not having to access separate tools for different data. It provides a unified user experience where all work and fixes can be managed from one location.

Read full review

KishoreKumar4

Senior QE Lead at Cognizant

If we encounter challenges while deploying, we raise incidents. These incidents are categorized by priority: high, medium, and low. We assign an incident number and notify the relevant teams to address the issue. For instance, if we experience a problem with Cloud services or any other issue, we…

Read full review

ServiceNow Security Operations mindshare

Product category:

As of August 2025, the mindshare of ServiceNow Security Operations in the Security Incident Response category stands at 14.6%, down from 14.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Incident Response

PeerResearch reports based on ServiceNow Security Operations reviews

Type	Title	Date
Category	Security Incident Response	Aug 18, 2025	Download
Product	Reviews, tips, and advice from real users	Aug 18, 2025	Download
Comparison	ServiceNow Security Operations vs VMware Carbon Black Endpoint	Aug 18, 2025	Download
Comparison	ServiceNow Security Operations vs Proofpoint Threat Response	Aug 18, 2025	Download
Comparison	ServiceNow Security Operations vs IBM Resilient	Aug 18, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Sentinel	4.1	N/A	93%	98 interviews Add to research
IBM Security QRadar	4.0	N/A	91%	209 interviews Add to research

Valuable Features

ServiceNow Security Operations offers seamless integration with security tools, cloud-based flexibility, and advanced vulnerability management. Organizations appreciate the automated workflows, customization options, and comprehensive governance risk and compliance capabilities. Users value the user-friendly interface, real-time data access, and ability to manage incidents efficiently. Integration with ITSM, IT Operations, and SAM enhances overall operations. The platform facilitates simplified processes for security incident management and provides an agile, scalable environment for varied cybersecurity efforts.

"ServiceNow Security Operations collects data from various sources and presents it in a single, respectable format for assessment and action, providing a unified user experience where all work and fixes can be managed from one location."
"ServiceNow Security Operations provides significant control over vulnerabilities, allowing users to mark false alarms as false positives and ignore them, which is important because many vulnerabilities are not real but appear as such."
"I will recommend it to others as it is an enterprise application used by large companies for ticketing purposes."

Room for Improvement

ServiceNow Security Operations users find customization complex and time-consuming. They desire better dashboard integration, simplified processes, and enhanced documentation. Existing integrations with third-party tools require expansion, and the user interface should be more intuitive. Reports and ticketing functions can be slow, and visibility across teams poses challenges. Users seek improved developer support, awareness of capabilities, and an automated, plug-and-play onboarding experience. Enhanced vulnerability management features and GenAI improvements are anticipated.

"Visibility and transitions between teams present significant challenges in the SecOps space, indicating that substantial training and hand-holding are required to improve usability, which is one observation I have had."
"Report generation within ServiceNow can take some time. Additionally, there are occasional issues when raising a ticket, which can also consume time."
"Report generation within ServiceNow can take some time."

Pricing

ServiceNow Security Operations pricing is considered competitive in the industry, with costs varying by client and industry. While some users find it expensive compared to others like BMC Remedy, many believe it offers good value due to its bundled ITSM suite. Enterprises should account for additional costs beyond licensing, such as implementation, maintenance, and upgrades. Pricing is based on yearly subscriptions, considering factors like asset numbers and platform users.

"The product is more expensive than other solutions."
"Compared to competitor tools, ServiceNow Security Operations is more affordable"
"It is an expensive product."

Popular Use Cases

Organizations use ServiceNow Security Operations for integrating with existing IT systems to enhance incident response, manage vulnerabilities, and streamline security tasks. Integrations with tools like Splunk, Tenable, and Microsoft Defender facilitate the automation of processes, while the software improves efficiency in dealing with security incidents, conducting assessments, and ensuring compliance. It supports ticketing systems, manages legal structures, and adapts to both SaaS and on-premise architectures for flexible deployments.

Service and Support

ServiceNow Security Operations support receives mixed feedback. Several sources praise the support as prompt and effective, rating it highly. Others find the initial support level lacking in technical depth, particularly with integrations and specific queries requiring deeper investigation. Response times could be improved, and some report needing further exploration for technical questions. Teams note ServiceNow's ability to address issues with recommendations and improvements, leading to satisfaction.

Deployment

ServiceNow Security Operations' initial setup is generally straightforward, though complexity may arise depending on organizational needs and familiarity with related domains. Many agree it is manageable, with mature service management features and good documentation aiding the process. Setup duration varies, typically requiring a small team, with deployment times ranging from a few weeks to several months based on customization needs. Some face integration challenges and political hurdles in adapting existing processes.

Scalability

ServiceNow Security Operations is highly scalable, meeting enterprise needs. Scalability requires planning, but many organizations experience excellent adaptability, with integrations enhancing its capacity. The cloud-based platform supports extensive user bases, though some prefer integration with third-party tools. It's employed across various departments often on large scales by medium and large enterprises. Users appreciate the platform's ability to handle growth effectively and quickly. Scalability ratings often appear high, reflecting general satisfaction with its capabilities.

Stability

ServiceNow Security Operations is recognized for its stability, receiving positive feedback from users. While a few mention minor issues, these are resolved quickly with support. Users emphasize the absence of major bugs or crashes. The system is described as reliable, particularly when configured correctly. Users regularly highlight its consistent performance and resilience. Ratings frequently range from eight to nine out of ten, indicating user satisfaction with its stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our ServiceNow Security Operations Buyer's Guide for additional reliable information.