itsm
Ollama-ServiceNow Defender
ServiceNow scoped app with hybrid local/cloud LLM orchestration.
01
Problem
Security operations on ServiceNow needed AI-assisted threat triage, but the security team had strict data classification rules forbidding sensitive payloads from leaving the network. They wanted ServiceNow-native UX, not a sidecar tool.
02
Solution
ServiceNow Scoped App (x_1894980_ollama_0) that orchestrates between local Ollama (sensitive data) and approved cloud LLMs (sanitized data) via the MID Server. Includes ATF test suite, Flow Designer automations for triage routing, and RBAC for who can use which model on which classification level.
Tech stack
- ServiceNow Scoped App
- Ollama
- MID Server
- ATF
- Flow Designer
03
Design goals
ServiceNow-native by design: the scoped app orchestrates between a local model for sensitive payloads and approved cloud models for sanitised ones, with ACLs, an ATF suite and a circuit breaker inside the scope itself. Designed so a data-classification policy is enforced in the platform rather than in a side tool.
Have a project in mind?
Tell us what you want to build. We respond within one business day.
Built by an EU-incorporated senior team — 20+ years in enterprise delivery.