Introducing snowpick: Testing ServiceNow for Public Data Exposure

Published

2026-07-20 00:00

Collected

2026-07-21 07:08

---
id: 4615
title: "Introducing snowpick: Testing ServiceNow for Public Data Exposure"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/introducing-snowpick-testing-servicenow-for-public-data-exposure"
published_at: "2026-07-20 00:00"
tags: ["data-exposure", "security-tool", "servicenow", "api-security", "security-testing", "tooling", "bishop-fox"]
phying_url: "https://phying.com/item/4615"
lang: en
---

# Introducing snowpick: Testing ServiceNow for Public Data Exposure

## Summary

Bishop Fox released snowpick, a tool that tests ServiceNow portals for public data exposure via widget and Table REST APIs from an unauthenticated session; 31% of 166 assessments had findings.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2026-07-20 00:00
- **Original:** https://bishopfox.com/blog/introducing-snowpick-testing-servicenow-for-public-data-exposure
- **Phying News:** https://phying.com/item/4615