Instance Auditing

Comprehensive 500+ Checkpoint Instance Audits

Get detailed reports on security vulnerabilities, technical debt, Flow Designer governance, CMDB health, and N-1 version compliance. Severity-ranked findings with one-click remediation paths.

Two Audit Options

Basic Instance Audit

Quick health check for routine monitoring

  • System health metrics (CPU, memory, response time)
  • License utilization analysis
  • SLA compliance overview
  • Incident management metrics
  • Patch status assessment
  • Security posture summary
Recommended

Detailed 500+ Checkpoint Audit

Comprehensive analysis for deep insights

  • Everything in Basic Audit
  • Technical Debt Intelligence
  • Flow Designer Governance
  • Security & Access Control Analysis
  • Performance Intelligence
  • CMDB Intelligence

What the 500+ Checkpoint Audit Covers

Technical Debt Intelligence

  • Business rules with deprecated APIs
  • Client scripts with hardcoded values
  • Script includes using eval()
  • Missing null checks in server scripts
  • Stale scripts (1+ year unchanged)
  • Inactive workflows and flows

Flow Designer Governance

  • Zombie flows (stalled >30 days)
  • Monolithic flows (>20 actions)
  • Orphaned subflows
  • Hardcoded data pills
  • Draft backlog analysis
  • Failed flow forensics

Security & Access Control

  • Open ACLs (condition=true)
  • Scripted ACLs without proper checks
  • Public pages without authentication
  • Admin user count and review
  • Role explosion analysis (users with >10 roles)

Performance Intelligence

  • Scheduled job health and failures
  • Long-running jobs (>5 minutes)
  • Slow transactions (>5 seconds)
  • Custom tables without indexes

CMDB Intelligence

  • Orphaned Application Services
  • Duplicate CIs (by name, IP, serial)
  • Stale CIs (90+ days)
  • Missing mandatory attributes
  • Circular dependency detection

Flow Designer Security

  • Elevated privilege flow detection
  • Sensitive data handling in flows
  • Cross-scope access patterns
  • Unauthorized flow modifications

Data Exposure Assessment

  • Public REST endpoint analysis
  • SOAP service security review
  • Email notification data leakage
  • Table export permission audit

Integration Security

  • Basic auth vs OAuth usage audit
  • Certificate expiration monitoring
  • MID Server security review
  • Third-party integration assessment

Change Management Compliance

  • Changes without required approvals
  • Emergency change ratio analysis
  • Unauthorized change detection
  • Change window compliance

Version & Plugin Compliance

  • N-1 version compliance check
  • Plugin inventory and status
  • Store app update availability
  • Deprecated feature usage

Why Run Regular Audits?

Security Assurance

Identify vulnerabilities before they become breaches

Performance Optimization

Find and fix bottlenecks slowing your instance

Compliance Readiness

Stay audit-ready with documented evidence

Enterprise

Instance Audit MSP Agent

Enterprise customers get the Instance Audit on-demand MSP Agent - a deeper cross-category assessment that runs against any tenant you have OAuth access to and produces a client-deliverable executive report. Output covers security, technical debt, Flow Designer, performance, integrations, change compliance, version readiness, and CMDB / CSDM health - each category scored and severity-ranked with prioritised remediation actions. Re-runnable on cron for trend lines.

Available on Enterprise and Enterprise+ (one of our 8 MSP Agents). See all MSP Agents.

Audit Report Format

Every audit generates a comprehensive Markdown report that you can share with stakeholders, attach to change requests, or archive for compliance.

Executive Summary

High-level findings with risk scores and priority recommendations for leadership review.

Detailed Findings

Category-by-category breakdown with specific issues, affected records, and remediation steps.

Remediation Roadmap

Prioritized action items with effort estimates and impact ratings for planning.

Run Your First Audit Today

Discover what's hiding in your ServiceNow instance.

No credit card required.