225 workflows, ready to run.
Community-built n8n automations, searchable live from the template library. Open one on n8n.io and import the JSON straight into your instance.
Automated GitHub Scanner for Exposed AWS IAM KeysAutomated GitHub Scanner for Exposed AWS IAM Keys
Overview
This n8n workflow automatically scans GitHub for exposed AWS IAM access keys associated with your AWS account, helping …HTTP Request · Slack · Code419 views
↗Audit workflows for hardcoded secrets with GitHub and TelegramQuick overview Scans every workflow on your n8n instance for credentials, tokens, and personal data pasted straight into node parameters. Findings are reported to Telegram by sever…GitHub · Telegram · Code1 views
↗Investigate scam URLs with URLScan.io, Telegram, Gmail, and Data TablesQuick overview This workflow accepts a suspected scam URL via an n8n form, enriches it with RDAP, certificate transparency, DNS/IP hosting data, urlscan.io results, and HTML finger…HTTP Request · Telegram · Gmail · Code1 views
↗Generate incident response reports with Supabase, Gemini and ClaudeQuick Overview This workflow ingests incident and playbook content from GitHub into Supabase (including pgvector embeddings with Google Gemini) and, on a webhook trigger, enriches …HTTP Request · Supabase · Code · AI Agent · Basic LLM Chain1 views
↗Govern stale Entra ID guest accounts with SharePoint and Microsoft TeamsQuick overview This template runs two scheduled workflows to govern Microsoft Entra ID (Azure AD) guest accounts by detecting stale users via Microsoft Graph, staging deletions in …HTTP Request · Microsoft Teams · Code · Microsoft Entra ID · Microsoft SharePoint1 views
↗Secure AI agent webhook with HMAC, replay protection, and OpenAI GPT-5⚠️ Disclaimer: > I am not a cybersecurity expert. This workflow was built through research and with the assistance of an LLM (Claude Opus 4.6). While it implements well-estab…Crypto · Code · AI Agent · OpenAI Chat Model1 views
↗Monitor GitHub repo access and push events with GitHub and Slack alertsMonitor GitHub Repositories for Unauthorized Actions How it works: This workflow monitors GitHub for high-risk activities to ensure that only authorized users can modify the repo…HTTP Request · Slack · Code1 views
↗Discord Server Anti-Impersonation / Scammer Tracker with Data TablesDiscord Member Change Tracker This n8n template demonstrates how to automatically monitor and track username and nickname changes across your Discord server members. Perfect for c…Discord1 views
↗Automated AWS IAM Key Compromise Response with Slack & Claude AI🛡️ Automated AWS Key Compromise Remediation Description This n8n workflow provides a secure, enterprise-grade response system for AWS IAM access key compromises with built-in fo…HTTP Request · Slack · Code · AI Agent · Anthropic Chat Model224 views
↗Monitor Data Breaches in Real-time with Have I Been PwnedWho is this for? Security professionals Developers Individuals interested in data breach awareness Use Case Automated monitoring for new breaches Proactive identity protection Dem…HTTP Request9.1k views
↗Automate SIEM Alert Enrichment with MITRE ATT&CK, Qdrant & Zendesk in n8nn8n Workflow: Automate SIEM Alert Enrichment with MITRE ATT&CK & Qdrant Who is this for? This workflow is ideal for: Cybersecurity teams & SOC analysts who want to automate …Google Drive · Zendesk · AI Agent · Embeddings OpenAI · OpenAI Chat Model12.4k views
↗Auto CVE & IOC Feed Ingestor with OpenAI Risk Triage & Email AlertsHow it works This Blue Team workflow ingests threat intelligence from public CVE and IOC feeds, merges the data, performs automated triage using OpenAI, and routes actionable ale…Send Email · Google Sheets · HTTP Request · Code2 views
↗🛠️ TheHive Tool MCP ServerNeed help? Want access to this workflow + many more paid workflows + live Q&A sessions with a top verified n8n creator? Join the community Complete MCP server exposing all TheHiv…960 views
↗SSL Expiry Alert with SSL-Checker.ioUse Case Managing SSL certificates manually can be time-consuming and error-prone, often leading to unexpected downtime or security risks due to expired certificates. What This W…Google Sheets · HTTP Request · Gmail14.1k views
↗Analyze domain threats via Telegram with VirusTotal, AbuseCH, and Gemini AIDomain AI Analysis via Telegram, AbuseCH and VirusTotal Workflow Description This workflow allows Telegram users to submit a domain for quick threat intelligence analysis. It quer…HTTP Request · Telegram · Google Gemini14 views
↗Enrich IP addresses with country attribution using IPinfo and Slack alerts🧩 Template Description IP Enrichment & Country Attribution is a lightweight cybersecurity automation that enriches IP addresses with geographic and network intelligence. It valid…HTTP Request · Slack · Code1 views
↗n8n Enterprise AI Security Firewall — Guardrails for Secure Agents🛡️ n8n Guardrails: Risk Ranking This workflow provides a complete testing rig for evaluating text against seven essential AI guardrails used in production systems. It helps you…Google Sheets · Google Gemini Chat Model · Guardrails35 views
↗CYBERPULSE AI GRC: Automate Security Questionnaire ResponsesDescription Automates vendor/customer security questionnaire responses. It ingests a questionnaire (Sheet/CSV/XLSX), matches each question to your approved answers and evidence, a…Google Sheets · Google Drive · Gmail · Code · OpenAI16 views
↗
↗Audit workflows for hardcoded secrets with GitHub and TelegramQuick overview Scans every workflow on your n8n instance for credentials, tokens, and personal data pasted straight into node parameters. Findings are reported to Telegram by sever…GitHub · Telegram · Code1 views
↗Investigate scam URLs with URLScan.io, Telegram, Gmail, and Data TablesQuick overview This workflow accepts a suspected scam URL via an n8n form, enriches it with RDAP, certificate transparency, DNS/IP hosting data, urlscan.io results, and HTML finger…HTTP Request · Telegram · Gmail · Code1 views
↗Generate incident response reports with Supabase, Gemini and ClaudeQuick Overview This workflow ingests incident and playbook content from GitHub into Supabase (including pgvector embeddings with Google Gemini) and, on a webhook trigger, enriches …HTTP Request · Supabase · Code · AI Agent · Basic LLM Chain1 views
↗Govern stale Entra ID guest accounts with SharePoint and Microsoft TeamsQuick overview This template runs two scheduled workflows to govern Microsoft Entra ID (Azure AD) guest accounts by detecting stale users via Microsoft Graph, staging deletions in …HTTP Request · Microsoft Teams · Code · Microsoft Entra ID · Microsoft SharePoint1 views
↗Secure AI agent webhook with HMAC, replay protection, and OpenAI GPT-5⚠️ Disclaimer: > I am not a cybersecurity expert. This workflow was built through research and with the assistance of an LLM (Claude Opus 4.6). While it implements well-estab…Crypto · Code · AI Agent · OpenAI Chat Model1 views
↗Monitor GitHub repo access and push events with GitHub and Slack alertsMonitor GitHub Repositories for Unauthorized Actions How it works: This workflow monitors GitHub for high-risk activities to ensure that only authorized users can modify the repo…HTTP Request · Slack · Code1 views
↗Discord Server Anti-Impersonation / Scammer Tracker with Data TablesDiscord Member Change Tracker This n8n template demonstrates how to automatically monitor and track username and nickname changes across your Discord server members. Perfect for c…Discord1 views
↗Automated AWS IAM Key Compromise Response with Slack & Claude AI🛡️ Automated AWS Key Compromise Remediation Description This n8n workflow provides a secure, enterprise-grade response system for AWS IAM access key compromises with built-in fo…HTTP Request · Slack · Code · AI Agent · Anthropic Chat Model224 views
↗Monitor Data Breaches in Real-time with Have I Been PwnedWho is this for? Security professionals Developers Individuals interested in data breach awareness Use Case Automated monitoring for new breaches Proactive identity protection Dem…HTTP Request9.1k views
↗Automate SIEM Alert Enrichment with MITRE ATT&CK, Qdrant & Zendesk in n8nn8n Workflow: Automate SIEM Alert Enrichment with MITRE ATT&CK & Qdrant Who is this for? This workflow is ideal for: Cybersecurity teams & SOC analysts who want to automate …Google Drive · Zendesk · AI Agent · Embeddings OpenAI · OpenAI Chat Model12.4k views
↗Auto CVE & IOC Feed Ingestor with OpenAI Risk Triage & Email AlertsHow it works This Blue Team workflow ingests threat intelligence from public CVE and IOC feeds, merges the data, performs automated triage using OpenAI, and routes actionable ale…Send Email · Google Sheets · HTTP Request · Code2 views
↗🛠️ TheHive Tool MCP ServerNeed help? Want access to this workflow + many more paid workflows + live Q&A sessions with a top verified n8n creator? Join the community Complete MCP server exposing all TheHiv…960 views
↗SSL Expiry Alert with SSL-Checker.ioUse Case Managing SSL certificates manually can be time-consuming and error-prone, often leading to unexpected downtime or security risks due to expired certificates. What This W…Google Sheets · HTTP Request · Gmail14.1k views
↗Analyze domain threats via Telegram with VirusTotal, AbuseCH, and Gemini AIDomain AI Analysis via Telegram, AbuseCH and VirusTotal Workflow Description This workflow allows Telegram users to submit a domain for quick threat intelligence analysis. It quer…HTTP Request · Telegram · Google Gemini14 views
↗Enrich IP addresses with country attribution using IPinfo and Slack alerts🧩 Template Description IP Enrichment & Country Attribution is a lightweight cybersecurity automation that enriches IP addresses with geographic and network intelligence. It valid…HTTP Request · Slack · Code1 views
↗n8n Enterprise AI Security Firewall — Guardrails for Secure Agents🛡️ n8n Guardrails: Risk Ranking This workflow provides a complete testing rig for evaluating text against seven essential AI guardrails used in production systems. It helps you…Google Sheets · Google Gemini Chat Model · Guardrails35 views
↗CYBERPULSE AI GRC: Automate Security Questionnaire ResponsesDescription Automates vendor/customer security questionnaire responses. It ingests a questionnaire (Sheet/CSV/XLSX), matches each question to your approved answers and evidence, a…Google Sheets · Google Drive · Gmail · Code · OpenAI16 views
↗