SecOps Workflows
What are SecOps n8n workflows?
SecOps n8n workflows are reusable automation templates for secops use cases. This category includes workflows that connect apps, transform data, trigger notifications, sync records, and reduce repetitive manual work. Each listing includes workflow metadata, author attribution, complexity level, relevant categories, source links when available, and a downloadable JSON file for inspection before import. Use this page to compare templates, identify the tools involved, and choose a workflow that fits your workspace before testing it safely in n8n.
Automated CVE scanning of Bug Bounty programs with Nuclei and Project Discovery
Description Automates daily CVE driven scanning against bug bounty scopes. It fetches bug bounty domains, pulls newly...
Monitor PKI certificates & CRLs for expiration with Telegram & SMS alerts
PKI Certificate & CRL Monitor Auto Expiration Alert System Overview This n8n workflow provides automated monitoring o...
Subdomain enumeration with Subfinder, HTTPX & GPT-4-Mini for security reconnaissance
Generates a wordlist of 1,000–15,000 subdomains created by an AI agent by correlating detected technologies and recur...
Kubernetes deployment & pod monitoring with Telegram alerts
SETUP INSTRUCTIONS 1. Configure Kubeconfig Open the "Kubeconfig Setup" node Paste your entire kubeconfig file content...
Secure GET webhooks with query parameter validation for limited authentication cases
How to secure GET Webhooks? What are webhooks? Webhooks are special URLs that instantly trigger workflows when they r...
Monitor Jamf policy integrity and send Slack alerts for changes
️ Jamf Policy Integrity Monitor Overview A security focused n8n workflow that monitors Jamf Pro policies for any unau...
Monitor VPS security with GPT-4 mini analysis via SSH and Telegram alerts
Monitor VPS security with AI analysis via SSH and Telegram alerts This n8n template automatically monitors your VPS f...
IP geolocation & HTTP port scanning with Google Sheets
Automate IP geolocation and HTTP port scanning with Google Sheets trigger This n8n template automatically enriches IP...
Monitor new CVEs for bug bounty hunting with Gemini AI and Slack alerts
How it works Automatically monitors NIST's CVE database every hour for new vulnerabilities and uses AI to assess thei...
Filter URLs with AI-powered robots.txt compliance & source verification
URL Officer Respect robots.txt and Avoid Undesirable Sources Overview Version : 1.0 The URL Officer workflow automate...
Send organized security CVE digests from NVD with AI-polished summaries to Gmail
Summary Turns the latest CVEs from NVD into a clean, sortable email digest (table + plaintext) and sends it via Gmail...
Check suspicious links via Telegram with GPT-4 analysis of VirusTotal & urlscan.io results
Workflow Purpose The workflow is designed to scan submitted URLs using urlscan.io and VirusTotal, combine the results...
Track policy expiry dates and ownership with Google Sheets and Gmail notifications
Purpose Automates the monitoring of policy documents for expiry and ownership gaps. Ensures accountability by sending...
Automate risk treatment tasks with Google Sheets for GRC compliance
Description Automatically assigns and escalates risk treatment tasks based on severity, organizational unit, and asse...
IAM compliance automation: enforce MFA and clean up access keys in AWS
Automated AWS IAM Compliance Workflow for MFA Enforcement and Access Key Deactivation This workflow leverages AWS IAM...
Send Slack alerts for AWS IAM access keys older than 365 days
AWS IAM Access Key Rotation Reminder Automation Workflow Watch the demo video below: [
Monitor & alert on inactive AWS IAM users with Slack notifications
AWS IAM Inactive User Automation Alert Workflow Weekly job that finds IAM users with no activity for 90 days and noti...
Auto-renew AWS certificates with Slack approval workflow
AWS Certificate Manager (ACM) Auto Renew with Slack notify & approval Who’s it for SRE/DevOps teams managing many ACM...
Prevent prompt injection attacks with a GPT-4O security defense system
AI Security Pipeline Prompt Injection Defense System using GPT 4O Protect your AI workflows from prompt injection att...
Cyberpulse AI GRC: Automate security questionnaire responses
Description Automates vendor/customer security questionnaire responses. It ingests a questionnaire (Sheet/CSV/XLSX),...
Automated Wazuh rule deployment pipeline with GitHub, XML validation & Telegram alerts
Say Goodbye to Manual Rule Deployments in Wazuh! Just Commit — Let Your Pipeline Auto‑Deploy via GitHub + n8n Tired...
Automate AI vulnerability monitoring with GPT-4 and ServiceNow incident creation
This n8n workflow automatically monitors RSS feeds for the latest AI vulnerability news, extracts key threat details,...
Automate CVE monitoring with OpenAI processing for ServiceNow security incidents
This n8n workflow automatically fetches the latest CVE data at scheduled intervals, extracts relevant security detail...
Triage AWS security misconfigurations with GPT-4.1 Mini and send alerts to Gmail
What this workflow does Automatically triages risky AWS misconfigurations and alerts your team. Pipeline: Security Hu...