---
title: Create auto-close rules
description: Use auto-close rules to close older AVITs automatically based on the filter conditions that you set.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/avr-create-auto-close-rules.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Application Vulnerability Response remediation tasks and task rules overview, Configure Application Vulnerability Response, Configure, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Create auto-close rules

Use auto-close rules to close older AVITs automatically based on the filter conditions that you set.

## Before you begin

Role required: sn\_vul.app\_manage\_auto\_close\_rules

## Procedure

1.  Navigate to **All** > **Application Vulnerability Response** > **Administration** > **Auto-close rules**.

    The base system provides the following auto-close rules:

    **Application Vulnerabilities last scanned** Vulnerabilities not reported within the last 90 days are transitioned to **Stale** state.

2.  Select **New** to create a new auto-close rule.

3.  Fill in the fields on the form.

    |Field|Value|
    |-----|-----|
    |Name|Name of the auto-close rule.|
    |Active|Option to activate the rule. If activated, it closes any detections automatically that match its filter criteria.|
    |Execution order|Unique value for the execution of the auto-close rule. This value determines the order of execution. The default value is 100.|
    |Integration type|Application Vulnerability Integration|
    |Description|Description of the auto-close rule.|
    |Condition|Filter conditions used to identify detections that should be closed.|

4.  Select **Submit**.

    The **Auto-close Rules Processor** scheduled job runs on a nightly basis. It identifies AVITs based on the specified conditions and transitions the matching ones to the **Stale** state. In cases where there are AVITs with both "Closed" and "Stale" statuses, the AVIT is closed with the sub-state set as **Fixed**.


**Parent Topic:**[Application Vulnerability Response remediation tasks and task rules overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/avm-rt-rt-rules-overview.md)