SecOps Workflows
What are SecOps n8n workflows?
SecOps n8n workflows are reusable automation templates for secops use cases. This category includes workflows that connect apps, transform data, trigger notifications, sync records, and reduce repetitive manual work. Each listing includes workflow metadata, author attribution, complexity level, relevant categories, source links when available, and a downloadable JSON file for inspection before import. Use this page to compare templates, identify the tools involved, and choose a workflow that fits your workspace before testing it safely in n8n.
Auto-classify security incidents with GPT-4 and Google Sheets for SOC teams
Who it’s for Blue Team leads, SOC analysts, and IT responders looking to automatically classify security alerts using...
Aggregate endpoint security risk scores with EDR, vulnerability data & Google Sheets
Who it’s for Security teams, SOC analysts, and small to mid IT teams looking to automatically assess endpoint risk by...
CYBERPULSE AI BlueOps: asset enrichment engine
Who it’s for Blue teamers, SOC operators, cyber analysts, and SME defenders who want to automatically enrich daily CV...
Auto CVE & IOC feed ingestor with OpenAI risk triage & email alerts
How it works This Blue Team workflow ingests threat intelligence from public CVE and IOC feeds, merges the data, perf...
Automated DNS records lookup for subdomains with HackerTarget API reports
EnumX: Auto DNS Lookup for Subdomains with Markdown Export Who’s it for Security engineers, red teamers, or automatio...
Extract actionable security insights from HackerOne reports with Google Gemini
A streamlined AI powered tool that extracts actionable technical insights from HackerOne security reports for advance...
Automated security alert analysis with Sophos, Gemini AI, and VirusTotal
How It Works This workflow automates the analysis of security alerts from Sophos Central, turning raw events into act...
AI-powered vulnerability scanner with Nessus, risk triage & Google Sheets reporting
CyberScan – AI Powered Vulnerability Scanner with Nessus, OpenAI, and Google Sheets Who’s it for Security teams, DevO...
Fraudulent booking detector: Identify suspicious travel transactions with Google Gemini
This automated n8n workflow detects and manages fraudulent booking transactions through comprehensive AI powered anal...
IP reputation check & SOC alerts with Splunk, VirusTotal and AlienVault
IP Reputation Check & Threat Summary using Splunk + VirusTotal + AlienVault + n8n This workflow automates IP reputati...
Malicious file detection & response: Wazuh to VirusTotal with Slack alerts
Malicious File Detection & Threat Summary Automation using Wazuh + VirusTotal + n8n This workflow helps SOC teams aut...
Security reconnaissance with Google Dorks, Parsera scraping, and Gmail reports
This workflow contains community nodes that are only compatible with the self hosted version of n8n. How it Works: 1....
Automated URL phishing & threat analysis with NixGuard AI
Stop manually checking suspicious links. This free n8n workflow provides the foundation for a powerful, automated URL...
Automate free IP analysis: NixGuard AI summaries & Wazuh integration
Supercharge Your Security Operations for Free Stop wasting time manually investigating suspicious IP addresses. This...
Automate security alert triage with NixGuard AI and route to Slack or Jira
Are you drowning in a sea of security notifications? Do your analysts spend more time sifting through low level logs...
Create executive security briefings with NixGuard AI & Wazuh alerts
Drowning in security alerts? Spending hours translating technical logs from Wazuh, your SIEM, or other tools into bus...
AI privacy-minded router: PII detection for privacy, security, & compliance
Modern AI systems are powerful but pose privacy risks when handling sensitive data. Organizations need AI capabilitie...
Monitor SSL certificate expiry with Google Sheets and email alerts
SSL Certificate Monitoring & Expiry Alert with Spreadsheet [FREE APIs] What This Workflow Does This n8n template auto...
Secure user emails with AES-256 encryption and verification system
Email Encryption Masterclass Professional Grade AES 256 Data Protection for n8n How It Works This comprehensive workf...
Comprehensive SSL certificate monitoring with Discord alerts and Notion integration
Advanced SSL Health Monitor Who is this for? This workflow is designed for DevOps engineers, IT administrators, and s...
Website scam risk detector with GPT-4o and SerpAPI
What It Does This intelligent workflow simplifies the complex task of determining whether a website is legitimate or...
Proxy detection by IP2Proxy - MCP server
Complete MCP server exposing 1 IP2Proxy Proxy Detection API operations to AI agents. Quick Setup Need help? Want acce...
File hash verification for AI agents with hashlookup CIRCL API
Complete MCP server exposing 11 hashlookup CIRCL API operations to AI agents. Quick Setup Need help? Want access to m...
Monitor software compliance with Jamf patch summaries in Slack
Jamf Patch Summary to Slack Stay on top of software patch compliance by automatically posting Jamf patch summaries to...