Both sides look healthy. The seam between them is where value leaks.
Vulnerability Response, HAM and SAM are all scored off the CI. ServiceNow gives you health tooling for CIs, for assets and for sources — CMDB Doctor completes the picture, watching whether asset and CI still agree across your entire population, and telling you the week they start to drift.
Installs in minutes · Writes nothing to your CMDB · No data leaves your instance
Why it matters
Each dashboard scores its own domain — nothing scores the relationships between them
Vulnerabilities you never see
When a scanner is bound to a record that was retired or merged away, the findings land on a corpse and close themselves. The machine is still on your network, still exposed, and reports clean.
Licences you're overpaying for
Asset entitlement counts are computed from data you assume is right. Misclassified hardware bills at the wrong rate, and the overspend renews quietly every year until somebody measures it.
Evidence you can't produce
Audit and compliance ask what your data quality is and when it changed. Without a measured history, the honest answer is a guess — and a guess is not evidence.
What you look at
Findings with a measured population and the direction they're heading — last run today, compared with last week
| Severity | What was found | Records | 7-day | Status |
|---|---|---|---|---|
| High | Assets and CIs linked in one direction only | 1,644 | ▲ growing | Awaiting owner decision |
| High | Scanner findings landing on retired records | 2,171 | ▲ growing | Awaiting owner decision |
| High | Identity fields disagreeing across the pair | 418 | — steady | Under review |
| Medium | Hardware parked on a placeholder model | 8,368 | ▼ falling | Remediation in progress |
| Low | Unexplained bulk changes to configuration items | 3 | ▲ new | Needs an actor |
How it works
An app that lives in your instance — not an assessment that leaves with the consultant
Installed
From the ServiceNow Store, the way you install anything else. No mid-server, no integration user, no outbound connection to configure.
Continuous
It re-measures on your schedule and keeps the series, so you see the direction of travel — and you see it the week it changes.
Contained
Reads your CMDB, never writes it. Findings live in its own tables; remediation is proposed as reviewable work, never applied on its own.
What it does
- ✓ Reads your configuration and asset records
- ✓ Stores findings only in its own application tables
- ✓ Proposes remediation as work a person approves
- ✓ Keeps a measured history, so trends are evidence
What it never does
- ✗ Update, merge, retire or delete your records on its own
- ✗ Send anything outside your instance
- ✗ Change identification or reconciliation configuration
- ✗ Need an admin role for day-to-day use
Model Factory
Configure a model. Deploy a device. Watch what breaks.
Normalization Lab
Model in. Normalized model out. What changed and why.
Asset Lifecycle
9 install_status codes. One state machine.
IRE Factory
Two sources disagree. Set the rules. Watch who wins.
Asset ↔ CI Sync
One record changes. Does the other follow?
CI Lifecycle
11 stages. 46 statuses. Nothing enforcing the pairing.
Install it today. Read your first findings tomorrow morning.
ServiceNow Store · scoped app · no dependencies · no data egress · labs stay free for everyone