Secure ServiceNow integrations, permissions & KB widgets with Obsidian Security

ServiceNow’s access control and integration complexity creates posture gaps

Manually reviewing ticketing, communications, reporting, third-party apps, custom integrations, and external data leaves serious risks undetected.

  • Weak controls let low-privileged users access sensitive data from unauthorized tables 
  • Shadow public tables without defined access controls can allow unauthorized access 
  • Misconfigured Knowledge Base widgets allows unauthorized access to sensitive content (e.g. employee comp plans accidentally shown in Company Benefits knowledge base article)

Audit and monitor every access point across ServiceNow

  • Identify widgets that bypass allowlist system properties, unintentionally exposing data to the public
  • Revoke dormant accounts and unnecessary access permissions
  • Audit access controls for ServiceNow assigned roles, groups, and ACLs across Dev, Staging, and Production
  • Enforce Read and Cannot Read user and guest criteria at the article level