SecOps Workflows
What are SecOps n8n workflows?
SecOps n8n workflows are reusable automation templates for secops use cases. This category includes workflows that connect apps, transform data, trigger notifications, sync records, and reduce repetitive manual work. Each listing includes workflow metadata, author attribution, complexity level, relevant categories, source links when available, and a downloadable JSON file for inspection before import. Use this page to compare templates, identify the tools involved, and choose a workflow that fits your workspace before testing it safely in n8n.
Generate incident response reports with Supabase, Gemini and Claude
Quick Overview This workflow ingests incident and playbook content from GitHub into Supabase (including pgvector embe...
Check JWT security of API endpoints with HTTP requests and Google Sheets
Quick Overview This workflow reads API endpoints and JWTs from Google Sheets, tests each endpoint with multiple token...
Monitor SSL certificate expiry with Google Sheets, Slack, Gmail and Jira
Quick Overview This workflow runs daily to check SSL certificate expiry for domains listed in Google Sheets, using ss...
Run weekly security audits via the n8n API, Data Tables, and Telegram
Quick overview The native n8n security audit misses tokens pasted into node parameters, active workflows without an e...
Govern stale Entra ID guest accounts with SharePoint and Microsoft Teams
Quick overview This template runs two scheduled workflows to govern Microsoft Entra ID (Azure AD) guest accounts by d...
Send Prey missing-device alerts with Claude and Slack and log events to Sheets
Quick overview This workflow receives Prey device webhook events, sends device missing incidents to Anthropic Claude...
Run a weekly n8n security audit and email changes with Supabase and Gmail
How it works If your main Error Diagnosis workflow fails for any reason, this backup workflow sends an alert email to...
Audit website security and send AI reports via Claude, Gmail, Slack and WhatsApp
Who it's for This advanced n8n workflow is designed for web developers , system administrators , security analysts ,...
Monitor Gmail for compliance risks with Google Gemini and Google Sheets
AI Powered Email Monitoring & Compliance Risk Detection Gmail + Gemini + Google Sheets This workflow automatically mo...
Block prompt injection before AI agents with GPT-5.5, Slack, and Google Sheets
This template is for AI builders, SecOps teams, and automation teams that expose agents, chatbots, or webhook workflo...
Send a daily prioritized CVE digest from NVD to Slack and Gmail with EPSS and CISA KEV
Daily CVE Intelligence & Prioritization Notifier Security teams often struggle to keep up with the volume of newly pu...
Detect fraud in user activity with PostgreSQL, OpenAI and Slack
AI Fraud Detection Workflow n8n + PostgreSQL + OpenAI + Slack This AI Fraud Detection Workflow is an automated n8n pi...
Collect SOC 2 AWS IAM evidence to Google Sheets with Gmail alerts
Your automated compliance assistant that pulls, formats, and logs AWS infrastructure evidence to Google Sheets on a r...
Detect and remediate leaked secret on repo with GitHub, AWS, Jira, Slack, Claude
SecretOps, DevSecOps Real Time Repos Secret Leak Remediation SecretOps is an n8n security automation workflow that mo...
Monitor SSL certificate expiries with Google Sheets, Slack and Linear
How it works Set up steps Setup takes about 8–12 minutes . 1. Google Sheets Create a spreadsheet with two sheets or [...
Scan incoming Gmail attachments for threats with VirusTotal and GPT-4o-mini
Who's it for Small teams, solo operators, and security conscious individuals who receive email attachments from exter...
Analyze vendor security risk from Jira tickets using Grok, Claude and Slack
How it works When a new vendor ticket is created in Jira, this workflow automatically performs a comprehensive securi...
Orchestrate multi-agent compliance monitoring and audit logging with GPT-4o and Slack
How It Works This workflow automates enterprise compliance governance using a multi agent AI architecture. It targets...
Detect WooCommerce order fraud and send alerts to Slack
WooCommerce Fraud Detection & Slack Alert Workflow This workflow automatically monitors WooCommerce orders, evaluates...
Secure AI agent webhook with HMAC, replay protection, and OpenAI GPT-5
️ Disclaimer: I am not a cybersecurity expert . This workflow was built through research and with the assistance of a...
Assess blockchain smart contract and tokenomics risk with GPT-4o and Gmail
How It Works This workflow automates blockchain risk assessment using a multi agent AI architecture, targeting DeFi d...
Automate cybersecurity threat analysis with GPT-4o, CVSS scoring and risk routing
How It Works This workflow automates end to end cybersecurity threat analysis using a multi agent AI architecture, ta...
Route IAM events with GPT-4o-mini, forgeLLM, Slack, email, and audit logs
How It Works This workflow automates Identity and Access Management (IAM) event governance using an AI agent, targeti...
Score DNS threats with VirusTotal, Abuse.ch, HashiCorp Vault and Gemini
Stop fighting alerts and start orchestrating intelligence. This workflow is a complete ecosystem designed to combat n...
