Overview
The AWS Security Hub integration with ServiceNow Security Incident Response (SIR) automates the ingestion, prioritization, and resolution of security findings. When Security Hub detects a threat, ServiceNow SIR creates an incident, orchestrates AI-driven response workflows, and syncs resolution status back to Security Hub - all automatically. Scale your security team's capacity and respond faster with bidirectional synchronization that keeps both platforms aligned in real time.
What you get:
- Automated incident creation: AWS Security Hub findings automatically become prioritized security incidents in ServiceNow SIR
- Bidirectional sync: Updates flow automatically between platforms - change one, update both
- AI-driven workflows: Scale your security team with automated response playbooks and intelligent case routing
- Unified visibility: Manage all security incidents from one workspace with analytics-driven dashboards and comprehensive reporting
The integration uses a Security Orchestration, Automation and Response (SOAR) architecture that maps Security Hub findings to SIR incident fields, filters irrelevant findings, aggregates related findings to prevent duplicate incidents, and schedules periodic ingestion for continuous protection.
How to purchase: ServiceNow products are available on AWS Marketplace through Private Offers. Pricing is customized to your needs. This application is subject to additional third-party terms and conditions. Contact your ServiceNow Sales team for a personalized, confidential Private Offer, or reach out at servicenow.com/contact-us.
Highlights
- Bidirectional architecture keeps AWS Security Hub and ServiceNow SIR synchronized - updates in either platform flow automatically to the other
- Automated incident creation, AI-driven response workflows, and analytics dashboards help security teams respond faster and more consistently to threats
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Custom pricing options
How can we make this page better?
Legal
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
ServiceNow Support for the covered ServiceNow products and services is available to you 24/7 at the support link below, which includes links to helpful Product Documentation, our Knowledge Base, and our NOW Community of users.
https://support.servicenow.com/now
This application is subject to additional support terms.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.