232 workflows, ready to run.
Community-built n8n automations, searchable live from the template library. Open one on n8n.io and import the JSON straight into your instance.
Automate CVE Monitoring with OpenAI Processing for ServiceNow Security IncidentsThis n8n workflow automatically fetches the latest CVE data at scheduled intervals, extracts relevant security details, and creates a corresponding Security Incident in ServiceNow …HTTP Request · ServiceNow · OpenAI Chat Model · Information Extractor0 views
↗Triage AWS Security Misconfigurations with GPT-4.1 Mini and Send Alerts to GmailWhat this workflow does Automatically triages risky AWS misconfigurations and alerts your team. Pipeline: Security Hub or AWS Config -> EventBridge rules -> SNS (HTTP) ->…Airtable · HTTP Request · Gmail · Code · OpenAI0 views
↗AI-Powered Domain & IP Security Check AutomationDescription This workflow is designed to automate the security reputation check of domains and IP addresses using multiple APIs such as VirusTotal, AbuseIPDB, and Google DNS. It a…Google Sheets · HTTP Request · Code · AI Agent · Simple Memory0 views
↗Scan URLs for Security Threats with urlscan.io and GPT-4o miniHow it works • Webhook → urlscan.io → GPT-4o mini → Gmail • Payload example: { "url": "https://example.com" } • urlscan.io returns a Scan ID and raw JSON. • AI node classifie…Gmail · urlscan.io · OpenAI0 views
↗Cybersecurity Assistant with GPT-4, Telegram Bot & Command ExecutionQuantumDefender AI is a next-generation intelligent cybersecurity assistant designed to harness the symbolic strength of quantum computing’s promise alongside cutting-edge AI capab…Telegram · AI Agent · OpenAI Chat Model · Simple Memory · Calculator0 views
↗Auto Remediate Endpoint Infections with Wazuh, ClamAV, and GPT-4Reduce human delays between malware detection and remediation in MSSP/SOC environments. This workflow automates full endpoint antivirus scanning immediately after high-severity end…Telegram · AI Agent · Summarization Chain · OpenAI Chat Model0 views
↗Automate Wazuh Alert Triage and Reporting with GPT-4o-mini and Telegram🚨Are alert storms overwhelming your Security Operations workflows? This n8n workflow supercharges your SOC by fully automating triage, analysis, and notification for Wazuh alerts…Telegram · Summarization Chain · OpenAI Chat Model0 views
↗SSL/TLS Certificate Expiry Monitor with Slack AlertHow It Works: The 5-Node Certificate Management Flow 🗓️ This workflow efficiently monitors your domains for certificate expiry. Scheduled Check (Cron Node): This is the workflow…HTTP Request · Slack · Code0 views
↗Scan URLs with urlscan.io and Send Results via GmailOverview Receive a URL via Webhook, submit it to urlscan.io, wait 30 seconds for artifacts (e.g., screenshot), then email a clean summary with links to the result page, screenshot,…Gmail · urlscan.io175 views
↗Monitor Security Logs for Failed Login Attempts with Slack AlertsHow It Works: The 5-Node Anomaly Detection Flow This workflow efficiently processes logs to detect anomalies. Scheduled Check (Cron Node): This is the primary trigger. It schedul…HTTP Request · Slack · Code0 views
↗Monitor Email Data Breaches with HIBP API and Send Slack AlertsHow It Works: The 5-Node Security Flow This workflow efficiently performs a scheduled data breach scan. 1. Scheduled Check (Cron Node) This is the workflow's trigger. It schedule…HTTP Request · Slack · Code0 views
↗Monitor Domains & IPs on AbuseIPDB Blacklist with Slack Alerts⚙ How It Works The automated blacklist monitor is designed to be a proactive, not reactive, tool. Here is the high-level process: Scheduled Checks: At regular intervals (e.g., e…HTTP Request · Slack · Code0 views
↗Monitor Remote Server File Integrity with SSH and Slack AlertsHow It Works: The 5-Node Security Flow This workflow efficiently performs a scheduled file integrity audit. 1. Scheduled Check (Cron Node) This is the workflow's trigger. It sche…Slack · Code0 views
↗Monitor CISA Critical Vulnerability Alerts with RSS Feed & Slack NotificationsHow It Works: The 5-Node Monitoring Flow This concise workflow efficiently captures, filters, and delivers crucial cybersecurity-related mentions. 1. Monitor: Cybersecurity Keywo…Slack · Code0 views
↗Monitor Cybersecurity Brand Mentions on X and Send Alerts to SlackHow It Works: The 5-Node Monitoring Flow This concise workflow efficiently captures, filters, and delivers crucial cybersecurity-related mentions. 1. Monitor: Cybersecurity Keywo…Slack · X (Formerly Twitter) · Code0 views
↗Fraudulent Booking Detector: Identify Suspicious Travel Transactions with Google GeminiThis automated n8n workflow detects and manages fraudulent booking transactions through comprehensive AI-powered analysis and multi-layered security checks. The system processes in…Google Sheets · HTTP Request · Gmail · Code · AI Agent0 views
↗CYBERPULSE AI RedOps: Validate Email Security Gateways Generated PayloadsDescription: Automatically send structured benign payloads (PDF/HTML/JS markers) to test email gateways and sandbox response. AI-generated phishing-style content helps simulate rea…Google Sheets · OpenAI22 views
↗CYBERPULSE AI RedOps: Phishing Simulation with Redirect TrackingDescription: Simulate cloaked phishing links that redirect through a controlled proxy. This module tracks if secure email gateways (SEGs) or sandboxes trigger the redirect before u…Google Sheets33 views
↗
↗Triage AWS Security Misconfigurations with GPT-4.1 Mini and Send Alerts to GmailWhat this workflow does Automatically triages risky AWS misconfigurations and alerts your team. Pipeline: Security Hub or AWS Config -> EventBridge rules -> SNS (HTTP) ->…Airtable · HTTP Request · Gmail · Code · OpenAI0 views
↗AI-Powered Domain & IP Security Check AutomationDescription This workflow is designed to automate the security reputation check of domains and IP addresses using multiple APIs such as VirusTotal, AbuseIPDB, and Google DNS. It a…Google Sheets · HTTP Request · Code · AI Agent · Simple Memory0 views
↗Scan URLs for Security Threats with urlscan.io and GPT-4o miniHow it works • Webhook → urlscan.io → GPT-4o mini → Gmail • Payload example: { "url": "https://example.com" } • urlscan.io returns a Scan ID and raw JSON. • AI node classifie…Gmail · urlscan.io · OpenAI0 views
↗Cybersecurity Assistant with GPT-4, Telegram Bot & Command ExecutionQuantumDefender AI is a next-generation intelligent cybersecurity assistant designed to harness the symbolic strength of quantum computing’s promise alongside cutting-edge AI capab…Telegram · AI Agent · OpenAI Chat Model · Simple Memory · Calculator0 views
↗Auto Remediate Endpoint Infections with Wazuh, ClamAV, and GPT-4Reduce human delays between malware detection and remediation in MSSP/SOC environments. This workflow automates full endpoint antivirus scanning immediately after high-severity end…Telegram · AI Agent · Summarization Chain · OpenAI Chat Model0 views
↗Automate Wazuh Alert Triage and Reporting with GPT-4o-mini and Telegram🚨Are alert storms overwhelming your Security Operations workflows? This n8n workflow supercharges your SOC by fully automating triage, analysis, and notification for Wazuh alerts…Telegram · Summarization Chain · OpenAI Chat Model0 views
↗SSL/TLS Certificate Expiry Monitor with Slack AlertHow It Works: The 5-Node Certificate Management Flow 🗓️ This workflow efficiently monitors your domains for certificate expiry. Scheduled Check (Cron Node): This is the workflow…HTTP Request · Slack · Code0 views
↗Scan URLs with urlscan.io and Send Results via GmailOverview Receive a URL via Webhook, submit it to urlscan.io, wait 30 seconds for artifacts (e.g., screenshot), then email a clean summary with links to the result page, screenshot,…Gmail · urlscan.io175 views
↗Monitor Security Logs for Failed Login Attempts with Slack AlertsHow It Works: The 5-Node Anomaly Detection Flow This workflow efficiently processes logs to detect anomalies. Scheduled Check (Cron Node): This is the primary trigger. It schedul…HTTP Request · Slack · Code0 views
↗Monitor Email Data Breaches with HIBP API and Send Slack AlertsHow It Works: The 5-Node Security Flow This workflow efficiently performs a scheduled data breach scan. 1. Scheduled Check (Cron Node) This is the workflow's trigger. It schedule…HTTP Request · Slack · Code0 views
↗Monitor Domains & IPs on AbuseIPDB Blacklist with Slack Alerts⚙ How It Works The automated blacklist monitor is designed to be a proactive, not reactive, tool. Here is the high-level process: Scheduled Checks: At regular intervals (e.g., e…HTTP Request · Slack · Code0 views
↗Monitor Remote Server File Integrity with SSH and Slack AlertsHow It Works: The 5-Node Security Flow This workflow efficiently performs a scheduled file integrity audit. 1. Scheduled Check (Cron Node) This is the workflow's trigger. It sche…Slack · Code0 views
↗Monitor CISA Critical Vulnerability Alerts with RSS Feed & Slack NotificationsHow It Works: The 5-Node Monitoring Flow This concise workflow efficiently captures, filters, and delivers crucial cybersecurity-related mentions. 1. Monitor: Cybersecurity Keywo…Slack · Code0 views
↗Monitor Cybersecurity Brand Mentions on X and Send Alerts to SlackHow It Works: The 5-Node Monitoring Flow This concise workflow efficiently captures, filters, and delivers crucial cybersecurity-related mentions. 1. Monitor: Cybersecurity Keywo…Slack · X (Formerly Twitter) · Code0 views
↗Fraudulent Booking Detector: Identify Suspicious Travel Transactions with Google GeminiThis automated n8n workflow detects and manages fraudulent booking transactions through comprehensive AI-powered analysis and multi-layered security checks. The system processes in…Google Sheets · HTTP Request · Gmail · Code · AI Agent0 views
↗CYBERPULSE AI RedOps: Validate Email Security Gateways Generated PayloadsDescription: Automatically send structured benign payloads (PDF/HTML/JS markers) to test email gateways and sandbox response. AI-generated phishing-style content helps simulate rea…Google Sheets · OpenAI22 views
↗CYBERPULSE AI RedOps: Phishing Simulation with Redirect TrackingDescription: Simulate cloaked phishing links that redirect through a controlled proxy. This module tracks if secure email gateways (SEGs) or sandboxes trigger the redirect before u…Google Sheets33 views
↗