• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • No categories available

      Browse All Categories

      Select a category to view markets

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. ServiceNow Security Incident Response
Logo of ServiceNow Security Incident Response

ServiceNow Security Incident Response

byServiceNow
in
4.5
Market Presence: Cybersecurity Incident Response Management, Security Orchestration, Automation and Response Solutions (Transitioning to Security Information and Event Management)

Overview

Overall experience with ServiceNow Security Incident Response

Chief Information Security Officer
<50M USD, Software
FAVORABLE

“Powerful and flexible IR platform — worth it if you plan ahead”

5.0
Jun 15, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.
IT Security & Risk Management Associate
<50M USD, Banking
CRITICAL

“Convenient incident management with easy SIEM integration, but limited customization”

3.0
Jun 16, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Top ServiceNow Security Incident Response Alternatives

Logo of CrowdStrike Incident Response
1. CrowdStrike Incident Response
4.5
(35 Ratings)
Logo of Cortex XDR
2. Cortex XDR
4.3
(24 Ratings)
Logo of TheHive
3. TheHive
4.5
(22 Ratings)
View All Alternatives

About Company

Company Description

Updated 14th October 2025

ServiceNow is putting AI to work for people. We move with the pace of innovation to help customers transform organizations across every industry while upholding a trustworthy, human centered approach to deploying our products and services at scale. Our AI platform for business transformation connects people, processes, data, and devices to increase productivity and maximize business outcomes.

Company Details

Updated 14th October 2025
Company type
Public
Year Founded
2004
Head office location
Santa Clara, California, United States
Number of employees
10001+
Annual Revenue
10B-30B USD
Website
https://www.servicenow.com

Do You Manage Peer Insights at ServiceNow?

Access Vendor Portal to update and manage your profile.

Peer Discussions

ServiceNow Security Incident Response Reviews and Ratings

4.5

(19 Ratings)

Rating Distribution

5 Star
53%
4 Star
42%
3 Star
5%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?
  • Chief Information Security Officer
    <50M USD
    Software
    Review Source

    Powerful and flexible IR platform — worth it if you plan ahead

    5.0
    Jun 15, 2026
    We deployed ServiceNow Security Incident Response and overall the experience was really solid. The platform proved genuinely versatile — it adapted well to different workflows and team structures, which isn't something every SOAR-adjacent tool can claim. Incident Response and Case Management capabilities stood out from the start.
  • Chief Information Security Officer
    <50M USD
    Software
    Review Source

    Powerful and flexible IR platform — worth it if you plan ahead

    5.0
    Jun 15, 2026
    We deployed ServiceNow Security Incident Response and overall the experience was really solid. The platform proved genuinely versatile — it adapted well to different workflows and team structures, which isn't something every SOAR-adjacent tool can claim. Incident Response and Case Management capabilities stood out from the start.
  • Read All 21 Reviews

    Get unlimited access to verified peer reviews and insights

    Read unlimited Gartner-vetted product reviews
    View and share valuable product insights
    Download full product profiles
    Review products you use today

Recommended Gartner Insights

Powered by Google TranslateThis service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.

User Sentiment About ServiceNow Security Incident Response
Reviewer Insights for: ServiceNow Security Incident Response

ServiceNow Security Incident Response Likes & Dislikes

Like

What really stood out about ServiceNow SIR was how far you could push it in terms of customization. The development environment was mature enough that we could tailor workflows, playbooks, and escalation paths to fit our specific IR process without feeling like we were fighting the platform. Second, the integration ecosystem impressed us. Connecting with SIEMs, threat intel feeds, and third-party ticketing systems worked well and didn't require heroics. Third, for Incident Response and security task management specifically, the combination of structured case tracking and workflow automation put it ahead of most competitors we evaluated. The dashboards and reporting were also genuinely useful for post-incident reviews and compliance purposes.

Like

What really stood out about ServiceNow SIR was how far you could push it in terms of customization. The development environment was mature enough that we could tailor workflows, playbooks, and escalation paths to fit our specific IR process without feeling like we were fighting the platform. Second, the integration ecosystem impressed us. Connecting with SIEMs, threat intel feeds, and third-party ticketing systems worked well and didn't require heroics. Third, for Incident Response and security task management specifically, the combination of structured case tracking and workflow automation put it ahead of most competitors we evaluated. The dashboards and reporting were also genuinely useful for post-incident reviews and compliance purposes.

Like

What really stood out about ServiceNow SIR was how far you could push it in terms of customization. The development environment was mature enough that we could tailor workflows, playbooks, and escalation paths to fit our specific IR process without feeling like we were fighting the platform. Second, the integration ecosystem impressed us. Connecting with SIEMs, threat intel feeds, and third-party ticketing systems worked well and didn't require heroics. Third, for Incident Response and security task management specifically, the combination of structured case tracking and workflow automation put it ahead of most competitors we evaluated. The dashboards and reporting were also genuinely useful for post-incident reviews and compliance purposes.

Dislike

Not as customizable Unable to edit work notes in case of errors

Dislike

Not as customizable Unable to edit work notes in case of errors

Dislike

Not as customizable Unable to edit work notes in case of errors