SmartApps

Risk and Vulnerability line

Metering axis: per application, per year
Each application: $15,000 to $40,000

Applications that extend IRM with focused risk and exception capabilities.

ExceptionDebt Manager. A vulnerability and security-risk exception manager that finds stale, repeated, overbroad, or weakly justified exceptions before they become audit findings or breach root causes.
Risk Brief Builder. A board-ready risk narrative generator that turns IRM, SecOps, vulnerability, exception, and control data into concise executive briefs with source-linked evidence.
Regulatory Readiness Pulse. A cross-regulation readiness application that maps DORA, NIS2, and EU AI Act obligations to existing ServiceNow controls, incidents, suppliers, AI systems, and evidence on a recurring cadence.
SmartIRM Import Export. Entity-level import and export for IRM data, accelerating migrations, bulk updates, and environment moves.