Platform security

Security is built into all levels of the Now Platform. Implement the security features that are appropriate for your organization, from managing failed logins and encrypted password protection, to access control rules and audit logs.


Feature	Description	Status	Top Tasks
Instance Security Hardening Guide	The Instance Security Hardening Guide contains detailed descriptions of the security-related system properties in the Now Platform, with suggested compliance values for each. Note: The Instance Security Hardening Guide includes many of the same settings that appear in the security-related setup topics that follow. Where applicable, each setup topic includes links to helpful security information in the Instance Security Hardening Guide.	N/A
High Security Settings	High Security Settings refer to several security options available in your instance.	Active	Request High Security Settings activation
Certificates	Your instance requires certificates to establish secure connections and validate signatures. Requires configuration before use	Active	Upload a certificate to an instance
Login and authentication security	Configure login security options to control access to your instance.	Active	Define login scenarios Make UI pages public or private
Web service security	Enforce security using basic authentication, mutual authentication, or WS-Security.	Active	Setting up mutual authentication WS-Security
Access control list rules	Rules for access control lists (ACLs) restrict access to data by requiring users to pass a set of requirements before they can interact with it.	Active	Create an ACL rule Contextual Security Manager
HTML sanitizer	Remove unwanted code and protect against security concerns such as cross-site scripting attacks by sanitizing HTML markup in HTML fields and translated HTML fields.	Active	Enable HTML sanitizer Configure HTML sanitizer
Auditing	Track record changes on auditing-enabled tables. By default, the system tracks changes to the incident, change, and problem tables, among others.	Active	Enable auditing for a table History sets
Domain separation	With domain separation you can separate data, processes, and administrative tasks into logically defined domains.	Requires a separate subscription.	Request domain separation Domain separation setup and basic administration Domain separation in Encryption Support Domain separation in Edge Encryption
Virtual Private Network (VPN)	Use a virtual private network (VPN) to integrate your instance with external data sources over the Internet.	Available by request from ServiceNow personnel.	Virtual Private Network (VPN) Request a VPN service
Encryption support	Use encryption contexts to allow or deny access to sensitive data based on user role. Requires configuration before use.	Active	Set up encryption contexts Domain separation in Encryption Support Manually encrypt and decrypt MID Server attributes
Edge Encryption	ServiceNow® Edge Encryption™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.	Requires a separate subscription.	Edge encryption installation Edge Encryption configuration Domain separation in Edge Encryption
System logs	View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine.	Active	Transaction logs Event logs
Antivirus Scanning	Use Antivirus Scanning to help protect your instance against virus infections that can be introduced by file attachments to your system records, such as incidents, problems, and stories.	Active

Platform security


Feature	Description	Status	Top Tasks
Instance Security Hardening Guide	The Instance Security Hardening Guide contains detailed descriptions of the security-related system properties in the Now Platform, with suggested compliance values for each. Note: The Instance Security Hardening Guide includes many of the same settings that appear in the security-related setup topics that follow. Where applicable, each setup topic includes links to helpful security information in the Instance Security Hardening Guide.	N/A
High Security Settings	High Security Settings refer to several security options available in your instance.	Active	Request High Security Settings activation
Certificates	Your instance requires certificates to establish secure connections and validate signatures. Requires configuration before use	Active	Upload a certificate to an instance
Login and authentication security	Configure login security options to control access to your instance.	Active	Define login scenarios Make UI pages public or private
Web service security	Enforce security using basic authentication, mutual authentication, or WS-Security.	Active	Setting up mutual authentication WS-Security
Access control list rules	Rules for access control lists (ACLs) restrict access to data by requiring users to pass a set of requirements before they can interact with it.	Active	Create an ACL rule Contextual Security Manager
HTML sanitizer	Remove unwanted code and protect against security concerns such as cross-site scripting attacks by sanitizing HTML markup in HTML fields and translated HTML fields.	Active	Enable HTML sanitizer Configure HTML sanitizer
Auditing	Track record changes on auditing-enabled tables. By default, the system tracks changes to the incident, change, and problem tables, among others.	Active	Enable auditing for a table History sets
Domain separation	With domain separation you can separate data, processes, and administrative tasks into logically defined domains.	Requires a separate subscription.	Request domain separation Domain separation setup and basic administration Domain separation in Encryption Support Domain separation in Edge Encryption
Virtual Private Network (VPN)	Use a virtual private network (VPN) to integrate your instance with external data sources over the Internet.	Available by request from ServiceNow personnel.	Virtual Private Network (VPN) Request a VPN service
Encryption support	Use encryption contexts to allow or deny access to sensitive data based on user role. Requires configuration before use.	Active	Set up encryption contexts Domain separation in Encryption Support Manually encrypt and decrypt MID Server attributes
Edge Encryption	ServiceNow® Edge Encryption™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.	Requires a separate subscription.	Edge encryption installation Edge Encryption configuration Domain separation in Edge Encryption
System logs	View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine.	Active	Transaction logs Event logs
Antivirus Scanning	Use Antivirus Scanning to help protect your instance against virus infections that can be introduced by file attachments to your system records, such as incidents, problems, and stories.	Active

How search works:

Topics are ranked in search results by how closely they match your search terms

Platform security

Platform security

On this page

Platform security

Platform security

Log in to personalize your search results and subscribe to topics