---
title: Patch orchestration with the Vulnerability Response Workspaces
description: You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/vr-ws-patch-orch-overview.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 4
breadcrumb: [Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Patch orchestration with the Vulnerability Response Workspaces

You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response.

## Patch orchestration in the Workspaces

Patch orchestration with the Vulnerability Response application uses scheduled imports from third-party solution integrations, patch vendors, and vulnerability scanners.

Patch orchestration with the Vulnerability Response application is supported in both the classic environment and the Vulnerability Response workspaces. Correlated data is rolled up and displayed in both the workspaces and the classic environment. For an overview about the features, requirements, and information about patch orchestration in the classic environment, see [Patch orchestration with Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/patch-orch-legacy-overview.md).

-   For more information about the supported integrations with patch vendors, see [Understanding the HCL BigFix patch orchestration integration with Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-bigfix-integration.md) and [Vulnerability Response patch orchestration integration with Microsoft SCCM](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/mspatch-integration.md).
-   For information about how to schedule patches form records in the workspaces, see [Schedule patches with the Microsoft SCCM integration with Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-mspatch-schedule-patch.md) and [Schedule patches with the Vulnerability Response patch orchestration integration HCL BigFix](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-bigfix-schedule-patch.md).
-   For information about scheduling a patch deployment from a remediation task with Change Request approval, see [Schedule a patch deployment with Change Request approval](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-ws-patch-schedule-change-request.md).

## Available versions of applications and dependencies required for the patch orchestration integration

To view patch Orchestration data and available updates \(patches\) in the workspaces in Vulnerability Response, the following applications are required. All applications listed are available in the ServiceNow® Store. Some applications require separate subscriptions. See [Patch orchestration with Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/patch-orch-legacy-overview.md).

## Roles required

In addition to the sn\_vul.vulnerability\_analyst or sn\_vul.vulnerability\_admin roles required for the Vulnerability Response Workspaces, users need roles that are specific to the patch orchestration integrations you are using to view data and schedule patches. See the following supported integrations for more information about these roles.

See [Understanding the HCL BigFix patch orchestration integration with Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-bigfix-integration.md) and [Vulnerability Response patch orchestration integration with Microsoft SCCM](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/mspatch-integration.md).

## Patch data in the Vulnerability Response Workspaces

In the [IT Remediation Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/it-remediation-workspace/vr-ws-itro-wkspce.md), you can view patch data in the workspaces:

-   On the Home view, click scorecards to view records for Preferred solutions on VIs, Vulnerable CIs, and Preferred Patches on VIs.
-   On the List view, view all the Patch Update records \(VPUs\) and the vulnerable items that are assigned to you that have patches from the available links.

You can schedule patches from the following records:

-   Patch Update \(VPU\)
-   Remediation task \(RT\)
-   Discovered Item \(SDI\)

In the [Vulnerability Manager Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-manager-workspace/exploring-vuln-mgr-workspace.md), you can view patches:

-   From the Home view on watch topics on the Vulnerable Items tab, you can view preferred and potential patches, Patch scheduled dates, and other information.
-   From the List view on remediation effort records, you can view patch data on VIT records on the Vulnerable Items tab.