---
title: Common Security Advisory Framework \(CSAF\)
description: When used with Vulnerability Solution Management, the Common Security Advisory Framework \(CSAF\) enables automation security notifications through a machine-readable JSON format.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/csaf-overview.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Configure vulnerability solution providers, Setting up vulnerability solution providers, Configuring Vulnerability Response using the Setup Assistant, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Common Security Advisory Framework \(CSAF\)

When used with Vulnerability Solution Management, the Common Security Advisory Framework \(CSAF\) enables automation security notifications through a machine-readable JSON format.

The CSAF lets you integrate with any solution intelligence vendor using the solution management framework to import the intelligence data. The CSAF security notifications can be one of the following types.

-   Security Advisories
-   Vulnerability Exploitability Exchange \(VEX\)
-   Security Incident Response
-   Informational Advisory

The CSAF only supports the file imports, URL imports, and API imports of security advisories from vendors.