--- title: Container Vulnerability Response description: The ServiceNow Container Vulnerability Response application imports container vulnerable items \(CVITs\) and according to the rules enables you to remediate container vulnerabilities. Vulnerability data is pulled from internal and external sources, such as the National Vulnerability Database \(NVD\) or third-party integrations. locale: en-US canonical_url: https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/cvr-landing.html release: brazil product: Container Vulnerability Response classification: container-vulnerability-response topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 4 breadcrumb: [Unified Security Exposure Management, Security Operations] --- # Container Vulnerability Response The ServiceNow® Container Vulnerability Response application imports container vulnerable items \(CVITs\) and according to the rules enables you to remediate container vulnerabilities. Vulnerability data is pulled from internal and external sources, such as the National Vulnerability Database \(NVD\) or third-party integrations. ## Request apps on the Store Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html). ## Benefits The Container Vulnerability Response application provides the following benefits: - Integrates with third-party container security products, like Prisma Cloud Compute from Palo Alto Networks. - Imports vulnerability data for the images that are deployed to runtime, and enriches the vulnerability data with runtime contextual information \(hosts, Kubernetes clusters, services, and namespaces\). - Provides a list of the references created from vulnerabilities to the relevant Kubernetes entities in the Configuration Management Database \(CMDB\) using ServiceNow Kubernetes Discovery. - Offers a comprehensive reporting dashboard, providing insights into the vulnerability and remediation trends. ## Key features The Container Vulnerability Response application manages vulnerabilities detected in the containers. It provides the following features: - Point to source Docker Image from CVITs instead of running containers. - Configure granularity of CVITs to track at image, Kubernetes cluster, namespace, or service level. - Track new image versions to identify fixed vulnerabilities. Any vulnerabilities reported in older versions are automatically resolved in ServiceNow when new image versions are deployed at runtime. - Track CVITs in Base images separately from Application images to enable independent remediation. - Raise exception requests or false positive requests, which can be reviewed through a multi-level approver process. - Define exception rules to defer CVITs automatically. ## What's new To learn more about what's new and what's changed in Brazil, see the Brazil release notes. ## Get started - For an overview about Security Operations in your ServiceNow AI Platform instance, see [Understanding Security Operations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/understanding-secops.md). - For information about all the Security Operations applications available for download from the ServiceNow Store, see [Security Operations and the ServiceNow Store](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/secops-and-store.md).