SecOps Workflows
What are SecOps n8n workflows?
SecOps n8n workflows are reusable automation templates for secops use cases. This category includes workflows that connect apps, transform data, trigger notifications, sync records, and reduce repetitive manual work. Each listing includes workflow metadata, author attribution, complexity level, relevant categories, source links when available, and a downloadable JSON file for inspection before import. Use this page to compare templates, identify the tools involved, and choose a workflow that fits your workspace before testing it safely in n8n.
Filter fraudulent leads with GPT-4o-mini, AbstractAPI, Google Sheets and Slack
This n8n template serves as a security layer for your marketing efforts, ensuring that only high quality, human verif...
Detect and isolate ransomware with Claude (Anthropic), EDR, SIEM and Slack
This workflow provides real time detection of ransomware encryption patterns using Claude AI, with automated system i...
Detect and enforce abuse cases with OpenAI, Slack, Gmail and Sheets
How It Works This workflow automates platform trust and safety operations by deploying a multi agent AI system that d...
Monitor zero-day threats with Anthropic Claude, Airtable, Slack and Jira
This workflow continuously monitors CVE databases, threat intelligence feeds, and public security advisories to surfa...
Analyze domain threats via Telegram with VirusTotal, AbuseCH, and Gemini AI
Domain AI Analysis via Telegram, AbuseCH and VirusTotal Workflow Description This workflow allows Telegram users to s...
Detect transaction fraud and manage compliance with GPT-4 and Airtable
How It Works This workflow automates financial transaction monitoring, fraud detection, and regulatory compliance usi...
Scan Gmail links with VirusTotal and send alerts to WhatsApp, Teams, and Sheets
Who it's for This n8n workflow is designed for IT security professionals, email administrators, and organizations tha...
Protect public webhooks with Ainoflow Guard rate limiting
Webhook Rate Limiter (Ainoflow Guard) Stop webhook flooding before it starts. Add production grade rate limiting to a...
Check phishing URL reputation with VirusTotal and log to Google Sheets
Phishing URL Reputation Checker with VirusTotal This n8n template helps you automatically analyze URLs for phishing a...
Run weekly WAF security audits with WAFtester and Slack alerts
What it does Automated weekly WAF security assessments with Slack reporting. Detects your WAF vendor, runs a security...
Test WAF security interactively with an AI agent and WAFtester MCP
What it does A conversational AI agent that connects to WAFtester via MCP (Model Context Protocol) for interactive We...
Audit browser and proxy fingerprint/IP integrity with GPT-4o, Sheets and Slack
Audit browser & Proxies fingerprint and IP integrity to Slack reports Introduction This workflow performs a comprehen...
Assess credential risk and route mitigation actions with GPT-4o-mini
How It Works This workflow automates comprehensive enterprise risk assessment and mitigation planning for organizatio...
Detect and route gameplay security anomalies with GPT-4o, Slack and Sheets
How It Works This workflow automates cybersecurity incident detection and response for security operations centers (S...
Enrich IP addresses with country attribution using IPinfo and Slack alerts
Template Description IP Enrichment & Country Attribution is a lightweight cybersecurity automation that enriches IP a...
Check file hash reputation with VirusTotal and Slack alerts
Template Description File Hash Reputation Checker is a security automation workflow that validates file hashes ( MD5...
Report spam and phishing URLs from IMAP mailboxes to Spamhaus
This workflow automates URL reporting to Spamhaus based on incoming spam/phishing sample emails. It watches one or mo...
Detect multi-source transaction fraud and reconcile finances with OpenAI, Nvidia NIM, Gmail, Slack and Google Sheets
How It Works This workflow automates financial transaction surveillance by monitoring multiple payment systems, analy...
Monitor SSL certificate expiry with Google Sheets and SMTP email alerts
Who is this for? DevOps engineers, sysadmins, and website owners who manage multiple domains and need proactive SSL c...
Monitor GitHub repo access and push events with GitHub and Slack alerts
Monitor GitHub Repositories for Unauthorized Actions How it works: This workflow monitors GitHub for high risk activi...
Audit Confluence space permissions and public links for compliance
Audit permissions in Confluence to ensure compliance This workflow scans selected Confluence spaces for public exposu...
Monitor SSL certificates for brand-impersonating domains with crt.sh, Urlscan.io and Slack
Phishing Lookout (Typosquatting) and Brand Domain Monitor This workflow monitors SSL certificate logs to find and sca...
Verify property ownership with blockchain, GPT-4 fraud detection, and compliance tracking
How It Works This workflow automates property registration verification, fraud detection, and blockchain based compli...
Automated APK security scanning & PDF reporting with MobSF, AI & Google Drive
APK Security Scanner & PDF Report Generator This workflow automatically analyzes any newly uploaded APK file and prod...
