# Roll back response integrations

Supported in:

This document explains how to roll back response integrations to a previously
installed version. This is useful if a new version introduces unexpected
behavior or if you need to revert custom code changes.

> [!NOTE]
> **Note:** This feature is not supported for custom or
> community integrations, or for customers in VPC-SC environments.

## Roll back to a previous version

To roll back to a previously installed version, follow these steps:

1. Go to **Content Hub** and click the **Response Integrations** tab.
2. Select the required response integration.
3. Click **Details**.
4. In the side drawer, click the **Versions** tab.
5. Locate the **Last Installed** section and click **Rollback**.

> [!CAUTION]
> **Caution:** A rollback reverts all content (standard
> code and custom modifications) to the state of the last installed
> version. Any custom work performed after that version was installed will
> be lost.

6. In the confirmation dialog, click **Confirm**.
7. Choose whether to override the existing ontology. For more information on managing ontologies, see [Ontology override](https://docs.cloud.google.com/chronicle/docs/soar/marketplace/using-the-marketplace#ontology-override).
8. Click **Confirm**. The system uninstalls the current version and restores the previous version.

> [!NOTE]
> **Important:** You can only roll back to a version if it was
> installed after the Rollback feature was enabled for your instance. The system
> creates a snapshot during the upgrade process; if no snapshot exists for a
> previous version, the Rollback option won't be available. Additionally, you
> cannot roll back to an integration version built for Python 2.7 or 3.7, as
> the current environment requires Python 3.11.

**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/)