---
title: Retrieve Vulnerability and exposure data with generative AI
description: Chat with an AI agent to retrieve information about Vulnerability Response \(host\) and Application Vulnerability Response findings \(vulnerable items and application vulnerable items\).
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/retrieve-vr-data.html
release: australia
topic_type: task
last_updated: "2026-07-29"
reading_time_minutes: 4
breadcrumb: [Use, Unified Security Exposure Management, Security Operations]
---

# Retrieve Vulnerability and exposure data with generative AI

Chat with an AI agent to retrieve information about Vulnerability Response \(host\) and Application Vulnerability Response findings \(vulnerable items and application vulnerable items\).

## Before you begin

**Note:** Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. For more information, see [ServiceNow product tiers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/ai-native-sku-overview.md).

The ServiceNow Otto® panel must be activated. For more information, see [Activate the ServiceNow Otto panel standard chat](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/activate-now-assist-panel.md).

Roles required:

-   sn\_vul.remediation\_owner \(host vulnerable items \(VITs\)\)
-   sn\_vul.vulnerability\_analyst \(host vulnerable items \(VITs\)\)
-   sn\_vul.app\_sec\_manager \(application vulnerable items \(AVITs\)\)

## Procedure

1.  Log in to your ServiceNow AI Platform instance.

    The vulnerability records that you can see depend on the roles you have been assigned. Host Vulnerability Response and Application Vulnerability Response findings \(VITs, AVITs\) are supported.

    **Note:**

    You aren't required to have all of these roles assigned to chat with the AI agent. To view VITs, at a minimum, you must have either sn\_vul.remediation\_owner or sn\_vul.vulnerability\_analyst assigned. to view AVITs, at a minimum, you must have sn\_vul.app\_sec\_manager assigned.

2.  Alternatively, navigate to **Workspaces** in your ServiceNow AI Platform instance and choose one.

<table id="table_a5v_djj_shc"><thead><tr><th>

Option

</th><th>

ServiceNow AI Platform Role

</th><th>

Description

</th></tr></thead><tbody><tr><td>

**IT Remediation Workspace**

</td><td>

sn\_vul.remediation\_owner for VITs.

</td><td>

The IT Remediation owner \(legacy\) workspace is supported by versions of Vulnerability Response earlier than version 30.0.

</td></tr><tr><td>

**Vulnerability Manager Workspace**

</td><td>

sn\_vul.vulnerability\_analyst for VITs or sn\_vul.app\_sec\_manager for AVITs.

</td><td>

The Vulnerability Manager \(legacy\) workspace is supported by versions of Vulnerability Response earlier than version 30.0.

</td></tr><tr><td>

**Security Exposure Management Workspace**

</td><td>

-   sn\_vul.remediation\_owner \(host vulnerable items \(VITs\)\)
-   sn\_vul.vulnerability\_analyst \(host vulnerable items \(VITs\)\)
-   sn\_vul.app\_sec\_manager \(application vulnerable items \(AVITs\)\)


</td><td>

The Security Exposure Management Workspace is supported by Unified Security Exposure Management \(USEM\). You must have version 30.0 or later of Vulnerability Response installed to view this workspace. See [Implementing Unified Security Exposure Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/configuring-security-exposure-management.md) for more information.

</td></tr></tbody>
</table>3.  Select the ServiceNow Otto® icon \(\[Omitted image "bus-ai-otto.svg"\] Alt text:\) on the header page from anywhere in your instance.

    The ServiceNow Otto® panel is displayed. If you don't see the ServiceNow Otto® icon in the header on the page, you must activate the ServiceNow Otto® panel. For more information, see [Activate the ServiceNow Otto panel standard chat](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/activate-now-assist-panel.md).

4.  In the ServiceNow Otto® panel, select **Retrieve VR data** and enter your queries in natural language to start a conversation with the AI agent.

    **Note:**

    -   This AI agent helps you answer query-related questions about data for Vulnerability Response \(VITs\) and Application Vulnerability Response \(AVITs\) findings.
    -   Prompts that involve any sort of data analysis of the vulnerability data that might match your questions aren't supported by this AI agent.
    -   The AI agent searches for the vulnerability data that matches your question, retrieves it, and creates responses for you based on the data available.
    -   You might prefer to provide as much detail as you can for your questions to help the AI agent.

        For example, as a remediation owner, if you ask the agent a general question such as, **Retrieve all the vulnerable items with scores 5 or greater**, the AI agent's response might be, `No vulnerable items with scores 5 or greater were found. You may want to rephrase your question or adjust your criteria.`

        On findings records, there are multiple fields that might be populated by numeric values: Risk rating, Risk score, Common Vulnerability Scoring System \(CVSS\), and Exploit Prediction Scoring System \(EPSS\). Given the request for this example, the AI agent won't know which field you want unless you specify the field or provide more details. You can help the AI agent by being specific and rephrasing your question to something like, **Show me all the open VITs with Risk rating 1 - Critical**.

    -   As long as you don't close the conversation, the AI agent uses the context of the conversation for its next response. Select the plus icon \(\[Omitted image "dlp-plus-icon.png"\] Alt text: Icon that indicates you can start a new chat\) to start a new chat.
    -   Be sure to check the answers for accuracy.
5.  Enter follow up questions as needed.

    See [Sample queries for the Retrieve Vulnerability Response data agentic workflow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/now-assist-vr-retrieve-qbank.md) for a list of sample questions to help you get started.


**Parent Topic:**[Using Unified Security Exposure Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/using-unified-security-exposure-management.md)