SecOps Workflows
What are SecOps n8n workflows?
SecOps n8n workflows are reusable automation templates for secops use cases. This category includes workflows that connect apps, transform data, trigger notifications, sync records, and reduce repetitive manual work. Each listing includes workflow metadata, author attribution, complexity level, relevant categories, source links when available, and a downloadable JSON file for inspection before import. Use this page to compare templates, identify the tools involved, and choose a workflow that fits your workspace before testing it safely in n8n.
Monitor data breaches in real-time with Have I Been Pwned
Who is this for? Security professionals Developers Individuals inter...
MFA multi-factor authentication (Voice call and Email) with ClickSend and SMTP
This workflow automates the process of sending voice calls for verification purposes and combines it with email verif...
Monitor authentication IPs from SaaS alerts & email reports via SMTP2Go
Collect and Email Authentication IP Addresses from SaaS Alerts (Last 24 Hours) Description This n8n workflow automate...
Automate SIEM alert enrichment with MITRE ATT&CK, Qdrant & Zendesk in n8n
n8n Workflow: Automate SIEM Alert Enrichment with MITRE ATT&CK & Qdrant Who is this for? This workflow is ideal for:...
Complete guide to setting up and generating TOTP codes in n8n 🔐
Setting Up and Generating TOTP Step 1: Receive QR Code and Extract the Link 1. Receive the QR Code from the 2FA servi...
Ssl expiry alert with SSL-Checker.io
Use Case Managing SSL certificates manually can be time consuming and error prone, often leading to unexpected downti...
Analyze email headers for IP reputation and spoofing detection - Gmail
Analyze Emails for Security Insights Who is this for? This workflow is ideal for IT professionals, security analysts,...
Analyze email headers for IP reputation and spoofing detection - Outlook
Analyze Emails for Security Insights Who is this for? This workflow is ideal for security teams, IT Ops professionals...
Analyze & sort suspicious email contents with ChatGPT
Analyze & Sort Suspicious Email Contents with ChatGPT and Jira Who is this for? This workflow is tailored for IT secu...
Analyze suspicious email contents with ChatGPT Vision
Phishing Email Detection and Reporting with n8n Who is this for? This workflow is designed for IT teams, security pro...
New TheHive case Slack notification bot
Streamline Case Management in TheHive via Slack! Our TheHive Slack Integration empowers SOC analysts by allowing them...
Save Qualys reports to TheHive
Automate Report Generation with n8n & Qualys Introducing the Save Qualys Reports to TheHive Workflow—a robust solutio...
Qualys scan Slack report subworkflow
Introducing the Qualys Scan Slack Report Subworkflow—a robust solution designed to automate the generation and retrie...
Qualys vulnerability trigger scan subWorkflow
This workflow is triggered by a parent workflow initiated via a Slack shortcut. Upon activation, it collects input fr...
Enhance security operations with the Qualys Slack shortcut bot!
Enhance Security Operations with the Qualys Slack Shortcut Bot! Our Qualys Slack Shortcut Bot is strategically design...
Venafi Cloud Slack cert bot
Enhance Security Operations with the Venafi Slack CertBot! Venafi Presentation Watch Video Our Venafi Slack CertBot i...
Validate TOTP token (without creating a credential)
TOTP Validation with Function Node This template allows you to verify if a 6 digit TOTP code is valid using the corre...
Parse DMARC reports, save them in database and notify on DKIM or SPF error
Who is it for If you are a postmaster or you manage email server, you can set up DKIM and SPF records to ensure that...
Slack webhook - verify signature
Description This template will help you verify that incoming calls from a Slack webhook actually come from Slack and...
Suspicious login detection
This n8n workflow is designed for security monitoring and incident response when suspicious login events are detected...
Phishing analysis - URLScan.io and VirusTotal
This n8n workflow automates the analysis of email messages received in a Microsoft Outlook inbox to identify indicato...
Analyze email headers for IPs and spoofing
This n8n workflow is designed to analyze email headers received via a webhook. The workflow splits into two main path...
Weekly Shodan query - report accidents
This n8n workflow, which runs every Monday at 5:00 AM, initiates a comprehensive process to monitor and analyze netwo...
Receive and analyze emails with rules in Sublime Security
This n8n workflow provides a comprehensive automation solution for processing email attachments, specifically targeti...