Skip to main content

Why SquireX for ServiceNow?

SquireX is the first and only SAST tool purpose-built for agentic AI security across Salesforce Agentforce, ServiceNow Now Assist, MuleSoft Agent Fabric, and MCP. While other tools focus on traditional GlideScript linting, SquireX analyzes the complete agentic attack surface — from tool configuration and prompt injection to memory poisoning and cross-scope privilege escalation.

Agentic Depth, Not Just Script Linting​

Traditional ServiceNow code quality tools check for best practices in GlideScript — variable naming, performance patterns, and API usage. SquireX goes far deeper:

CapabilityTraditional ToolsSquireX
GlideScript syntax checking✅✅
GlideRecord → GlideRecordSecure enforcement❌✅ SNOW-28
sn_aia_memory poisoning detection❌✅ SNOW-12.2
Role Masking cascade validation❌✅ SNOW-20.2
Cross-scope privilege escalation chains❌✅ SNOW-30
Business Rule → Agent DML cascading❌✅ SNOW-28.4
Yokohama duplication Sybil detection❌✅ SNOW-18.2
MCP tool integrity validation❌✅ SNOW-25/26/27
Compliance-tagged SARIF output❌✅ All rules

Unique Capabilities​

1. Go-Native GlideScript AST Parser​

SquireX includes a full JavaScript AST parser written in Go (interpreter/capability/jsast/) that analyzes GlideScript at the abstract syntax tree level — not regex. This enables precise detection of:

  • GlideRecord in ACL scripts — the recursive bypass vulnerability that traditional scanners miss entirely
  • setWorkflow(false) in agent contexts — silent audit trail suppression
  • addEncodedQuery() vs addUserEncodedQuery() — cross-tenant data exposure

2. Latent Memory Poisoning Detection (SNOW-12.2)​

SquireX is the only tool that analyzes sn_aia_memory table records for embedded instruction-injection payloads. These attacks persist across sessions, silently altering agent reasoning every time it interfaces with a poisoned identity profile.

Detection patterns: "ignore previous instructions", "system:", "act as",
"developer mode", "bypass", "jailbreak", and 10+ more heuristics

3. Role Masking Cascade Validation (SNOW-20.2)​

When agents use Dynamic User identity mode, SquireX validates that Role Masking is properly configured at every level — Workflow → Agent → Skill → Tool. Without this cascade, an admin user interacting with the agent grants it unrestricted instance access.

4. Compliance-Ready SARIF Output​

Every finding in SquireX's SARIF output includes regulatory compliance metadata:

{
  "properties": {
    "tags": ["security", "servicenow", "ServiceNow ACL"],
    "category": "ServiceNow ACL",
    "compliance": ["SOC2_CC6", "NIST_AI_RMF"]
  }
}

Supported frameworks: EU AI Act, NIST AI RMF, SOC 2 CC6/CC7, HIPAA, PCI DSS, OWASP MCP Top 10.

Multi-Platform Parity​

Unlike platform-specific tools, SquireX uses a single rule engine to scan across all major agent platforms:

  • Salesforce Agentforce — 79 rules (AGENTFORCE-* namespace)
  • ServiceNow Now Assist — 33 rules (SNOW-* namespace)
  • MuleSoft Agent Fabric — Covered by supply chain and MCP rules
  • MCP Servers — Covered by OWASP MCP Top 10 alignment

The same compliance tags, SARIF format, and CI/CD integration work identically across all platforms.

Getting Started​

npx squirex scan --platform servicenow ./your-update-sets/

See the Quick Start guide to scan your first ServiceNow project in under 5 minutes.