---
title: Request an extension for an exception rule in Application Vulnerability Response
description: Request an extension for a deferred exception rule before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/extend-ex-rule-request-avr.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Requesting and approving an exception in Application Vulnerability Response, Exception Management in Application Vulnerability Response, Configure Application Vulnerability Response, Configure, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Request an extension for an exception rule in Application Vulnerability Response

Request an extension for a deferred exception rule before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.

## Before you begin

Roles required: App-Sec Manager sn\_vul.app\_sec\_manager, Security Champion sn\_vul.app\_security\_champion.

## About this task

On an extension rule record, you can request an extension for the **Deferred Until** date only if the rule is in the **Approved** state. You might request this extension to a rule if you find a large number of records created by the rule are not being resolved by its **Deferred until** date, the date when the remediation task stops accepting new AVIs. The extension updates the exception rule so it automatically extends the deferral date on your existing rule.

You can also request an extension from the Vulnerability Response Workspaces. For more information, see [Request an extension for a deferred vulnerable item in the Vulnerability Manager workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-manager-workspace/extend-defer-vul-item-ws.md).

## Procedure

1.  Navigate to **All** > **Application Vulnerability Response** > **Exception Rules**.

2.  Select an approved exception rule.

3.  Select **Request Extension**.

4.  Fill in the fields on the form, as appropriate.

<table id="table_s52_yvn_r6"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Extend Until

</td><td>

Select the date until when the exception rule must be extended.

</td></tr><tr><td>

Reason

</td><td>

Enter the reason for deferring the exception rule. Choices include:

-   Risk accepted
-   Awaiting maintenance window
-   Fix unavailable
-   Mitigating control in place
-   Other


</td></tr><tr><td>

Additional information

</td><td>

Enter any other relevant information.

</td></tr></tbody>
</table>5.  Select **Request Approval**.

    On approval of the request, the Deferred until, Reason and Additional information fields get updated on the exception rule and the associated remediation tasks and application vulnerable items. An email is also triggered on submission of the request and subsequent action by the approver.

    **Note:**

    -   The request goes through two levels of approval.
    -   The Request Extension button is unavailable for remediation tasks that are created as part of an exception rule.
    -   If a deferred exception rule is extended again, the extend deferral count increases in the back end.

**Parent Topic:**[Requesting and approving an exception in Application Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/avr-request-approve-exception.md)