Skip to main content

Filter cybersecurity news for your tech stack (OpenAI + Pinecone RAG)

Workflow preview

Workflow preview
100%
Filter cybersecurity news for your tech stack (OpenAI + Pinecone RAG) preview
Open on n8n.io

Important notice

This workflow is provided as-is. Please review and test before using in production.

1. Workflow Overview

What it does: Collects cybersecurity news from trusted RSS feeds and uses OpenAI’s Retrieval Augmented Generation (RAG) capabilities with Pinecone to filter for content that is directly relevant to...

Best for

  • SecOps automation workflows
  • Multimodal AI automation workflows
  • advanced n8n builders looking for reusable templates

Tools used

n8n-nodes-base.scheduletrigger, n8n-nodes-base.rssfeedread, @n8n/n8n-nodes-langchain.lmchatopenai, @n8n/n8n-nodes-langchain.agent, n8n-nodes-base.gmail, @n8n/n8n-nodes-langchain.embeddingsopenai, @n8n/n8n-nodes-langchain.documentdefaultdataloader, n8n-nodes-base.formtrigger

Source and attribution

This workflow is cataloged by N8N Workflows and links back to its original n8n.io source page by Will Carlson.

Original n8n.io source

1.1 Workflow description

Title
Filter cybersecurity news for your tech stack (OpenAI + Pinecone RAG)
Workflow name
Filter cybersecurity news for your tech stack (OpenAI + Pinecone RAG)

What it does:

Collects cybersecurity news from trusted RSS feeds and uses OpenAI’s Retrieval-Augmented Generation (RAG) capabilities with Pinecone to filter for content that is directly relevant to your organization’s tech stack. “Relevant” means the AI looks for news items that mention your specific tools, vendors, frameworks, cloud platforms, programming languages, operating systems, or security solutions — as described in your .txt scope documents. By training on these documents, the system understands the environment you operate in and can prioritize news that could affect your security posture, compliance, or operational stability. Once filtered, summaries of the most important items are sent to your work email every day.

How it works

  • Pulls in news from multiple cybersecurity-focused RSS feeds: The workflow automatically collects articles from trusted, high-signal security news sources. These feeds cover threat intelligence, vulnerability disclosures, vendor advisories, and industry updates.
  • Filters articles for recency and direct connection to your documented tech stack: Using the publish date, it removes stale or outdated content. Then, leveraging your .txt scope documents stored in Pinecone, it checks each article for references to your technologies, vendors, platforms, or security tools.
  • Uses OpenAI to generate and review concise summaries: For each relevant article, OpenAI creates a short, clear summary of the key points. The AI also evaluates whether the article provides actionable or critical information before passing it through.
  • Trains on your scope using Pinecone Vector Store (free) for context-aware filtering: Your scope documents are embedded into a vector store so the AI can “remember” your environment. This context ensures the filtering process understands indirect or non-obvious connections to your tech stack.
  • Aggregates and sends only the most critical items to your work email: The system compiles the highest-priority news items into one daily digest, so you can review key developments without wading through irrelevant stories.

What you need to do:

  1. Setup your OpenAI and Pinecone credentials in the workflow
  2. Create and configure a Pinecone index (dimension 1536 recommended)
    1. Pinecone is free to setup.
    2. Setup Pinecone with a single free index.
    3. Use a namespace like: scope.
    4. Make sure the embedding model is the same for all of your Pinecone references.
  3. Submit .txt scope documents listing your technologies, vendors, platforms, frameworks, and security products.
    1. .txt does not need to be structured.
    2. Add as much detail as possible.
  4. Update AI prompts to accurately describe your company’s environment and priorities.

1.2 Logical Blocks

This catalog entry is organized from the workflow JSON. The node-level section below shows the executable blocks available for review before importing the template.

2. Block-by-Block Analysis

Block 1 - Schedule Trigger

Type / Role
n8n-nodes-base.scheduleTrigger - scheduleTrigger
Config choices
Version 1.2

Block 2 - Bleeping Computer

Type / Role
n8n-nodes-base.rssFeedRead - rssFeedRead
Config choices
Version 1.2

Block 3 - The Hacker News

Type / Role
n8n-nodes-base.rssFeedRead - rssFeedRead
Config choices
Version 1.2

Block 4 - Security Week

Type / Role
n8n-nodes-base.rssFeedRead - rssFeedRead
Config choices
Version 1.2

Block 5 - Nist.Gov

Type / Role
n8n-nodes-base.rssFeedRead - rssFeedRead
Config choices
Version 1.2

Block 6 - Krebson Security

Type / Role
n8n-nodes-base.rssFeedRead - rssFeedRead
Config choices
Version 1.2

Block 7 - OpenAI Chat Model

Type / Role
@n8n/n8n-nodes-langchain.lmChatOpenAi - lmChatOpenAi
Config choices
Version 1.2

Block 8 - Threat Intelligence Analyst AI

Type / Role
@n8n/n8n-nodes-langchain.agent - agent
Config choices
Version 2.1

Block 9 - Send message to work email

Type / Role
n8n-nodes-base.gmail - gmail
Config choices
Version 2.1

Block 10 - Embeddings OpenAI

Type / Role
@n8n/n8n-nodes-langchain.embeddingsOpenAi - embeddingsOpenAi
Config choices
Version 1.2

Block 11 - Default Data Loader

Type / Role
@n8n/n8n-nodes-langchain.documentDefaultDataLoader - documentDefaultDataLoader
Config choices
Version 1.1

Block 12 - On form submission

Type / Role
n8n-nodes-base.formTrigger - formTrigger
Config choices
Version 2.2

Block 13 - When chat message received

Type / Role
@n8n/n8n-nodes-langchain.chatTrigger - chatTrigger
Config choices
Version 1.1

Block 14 - Pinecone RAG test

Type / Role
@n8n/n8n-nodes-langchain.agent - agent
Config choices
Version 2.1

Block 15 - OpenAI Chat Model1

Type / Role
@n8n/n8n-nodes-langchain.lmChatOpenAi - lmChatOpenAi
Config choices
Version 1.2

Block 16 - Pinecone Vector Store2

Type / Role
@n8n/n8n-nodes-langchain.vectorStorePinecone - vectorStorePinecone
Config choices
Version 1.3

Block 17 - Simple Memory

Type / Role
@n8n/n8n-nodes-langchain.memoryBufferWindow - memoryBufferWindow
Config choices
Version 1.3

Block 18 - Sticky Note

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 19 - Sticky Note1

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 20 - CISA.gov

Type / Role
n8n-nodes-base.rssFeedRead - rssFeedRead
Config choices
Version 1.2

Block 21 - Second Reviewer Agent

Type / Role
@n8n/n8n-nodes-langchain.agent - agent
Config choices
Version 2.1

Block 22 - o4-mini

Type / Role
@n8n/n8n-nodes-langchain.lmChatOpenAi - lmChatOpenAi
Config choices
Version 1.2

Block 23 - Sticky Note2

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 24 - Newer than 24 hours

Type / Role
n8n-nodes-base.if - if
Config choices
Version 2.2

Showing the first 24 of 41 workflow blocks. Download the JSON for the full node graph.

3. Summary Table

Workflow Filter cybersecurity news for your tech stack (OpenAI + Pinecone RAG)
Complexity advanced
Nodes 41
Categories SecOps, Multimodal AI
Author Will Carlson
Published 05 Aug 2025

4. Reproducing the Workflow from Scratch

  1. 1. Download the workflow JSON

    Use the JSON export at /data/workflows/7017/7017.json as the source template for this automation.

  2. 2. Import the template into n8n

    Open n8n, import the downloaded JSON, and review each node before activating the workflow.

  3. 3. Configure credentials and variables

    Replace placeholder credentials, API keys, webhook URLs, account IDs, and environment-specific values with your own settings.

  4. 4. Test with sample data

    Run the workflow manually or in a staging workspace, inspect node output, and confirm downstream systems receive the expected data.

  5. 5. Activate and monitor

    Enable the workflow only after testing, then monitor executions, errors, and rate limits during the first production runs.

5. General Notes & Resources

Review imported nodes carefully before activation. This catalog entry is intended to help you inspect the workflow structure, understand required services, and find related templates faster.

Node names, credentials, schedules, webhook paths, and external service limits may need adjustment for your workspace.

Frequently asked questions

What does Filter cybersecurity news for your tech stack (OpenAI + Pinecone RAG) do?

What it does: Collects cybersecurity news from trusted RSS feeds and uses OpenAI’s Retrieval Augmented Generation (RAG) capabilities with Pinecone to filter for content that is directly relevant to...

What do I need before importing this workflow?

Review the workflow JSON, configure any required credentials in n8n, and test the automation in a safe workspace before using it in production.

Can I customize this workflow?

Yes. Use the block-by-block analysis and the downloadable JSON to inspect each node, then adjust credentials, prompts, schedules, filters, or destinations for your SecOps, Multimodal AI use case.