265 workflows, ready to run.
Community-built n8n automations, searchable live from the template library. Open one on n8n.io and import the JSON straight into your instance.
Review Terraform pull requests with GitHub, GPT-4.1, Postgres and SlackQuick overview
This workflow reviews Terraform pull requests in GitHub using an OpenAI tool-calling agent that can run plan, security, cost, and standards checks, then logs results…GitHub · Postgres · Slack · AI Agent · OpenAI Chat Model0 views
↗Submit NKSC NIVS cyber incident reports from a webhook or XLSX fileQuick overview This example workflow demonstrates how to use the NKSC NIVS n8n community nodes to submit cyber incident reports to NKSC NIVS. It provides a reference integration th…Code20 views
↗Assess Bitcoin AML risk with Groq and log results to Google SheetsQuick overview This workflow fetches recent unconfirmed Bitcoin transactions from Blockchain.com, applies rule-based AML risk scoring, generates a one-line analyst note using Groq’…Google Sheets · HTTP Request · Code · Basic LLM Chain · Groq Chat Model0 views
↗Assess GDPR breach risk and 72-hour deadlines with Groq and data tablesQuick overview This workflow collects suspected personal data breach reports via an n8n form, scores them against GDPR risk factors stored in n8n Data Tables, uses Groq to validate…Discord · Code · Basic LLM Chain · Structured Output Parser · Groq Chat Model0 views
↗Analyze URL phishing risk with VirusTotal, Safe Browsing, Gemini, and SlackQuick overview Youtube Video: https://youtu.be/ekCMYUeee6Y?si=fphlFmKkarUKUBKg This workflow collects a URL via an n8n form, checks it against Google Safe Browsing and VirusTotal,…Google Sheets · HTTP Request · Slack · Code · Basic LLM Chain0 views
↗Red-team AI agents with jailbreak probes using Groq, Discord, and data tablesQuick overview This workflow red-teams an AI agent by replaying stored jailbreak and safety probes against a Groq-hosted model, scoring behavior from tool calls and responses, savi…Discord · Code · AI Agent · Basic LLM Chain · Structured Output Parser0 views
↗Triage AWS security posture changes with Claude, Slack, email, and WhatsApp alertsQuick overview Automated AWS security posture triage: detects changes in security findings, enriches with asset context, uses Claude to assess risk severity, then routes critical c…Send Email · Slack · WhatsApp Business Cloud · Code · AI Agent0 views
↗Assess AWS security posture changes with Claude and Slack alertsQuick overview This workflow polls or manually checks AWS security findings via HTTP endpoints, compares them to a stored baseline, enriches changes with asset inventory data, uses…Send Email · HTTP Request · Slack · Code · AI Agent0 views
↗Review and remediate Kubernetes manifests in GitHub PRs with GPT-4.1Quick overview This workflow reviews Kubernetes manifest changes in GitHub pull requests using OpenAI with policy RAG and external scanner APIs, logs results to Postgres, posts fin…GitHub · Postgres · Slack · AI Agent · OpenAI Chat Model0 views
↗Notify on anomalous Google Drive access and send weekly email summariesQuick Overview This workflow monitors Google Workspace Drive audit logs on an hourly and weekly schedule, detecting bulk downloads, access bursts, and new access IPs, then emailing…Send Email · HTTP Request · Code0 views
↗Audit vendor security risk with OpenAI, Google Sheets, Slack and GmailQuick overview This workflow runs on a schedule to audit a vendor’s security posture using website header checks, RDAP domain age lookup, and the Have I Been Pwned breaches list, t…Google Sheets · HTTP Request · Slack · Gmail · Code0 views
↗Detect and triage risky OAuth apps with Anthropic Claude and SlackQuick overview This workflow runs every 30 minutes to detect new or changed OAuth-authorized apps, enriches them with publisher reputation data, scores risk with Anthropic Claude, …HTTP Request · Slack · Code · AI Agent · Anthropic Chat Model0 views
↗Send critical NPM CVE alerts from GitHub to Slack via ApifyQuick overview This workflow runs every Monday at 9am to fetch your repository’s package.json from GitHub, scan it for vulnerabilities using the Apify NPM CVE Monitor actor, and se…HTTP Request · Slack · Code0 views
↗Monitor attack surface changes with OpenAI, Slack, Postgres and emailQuick overview This workflow runs every 6 hours to collect attack-surface assets from three HTTP APIs, normalize and deduplicate them, compare them to a Postgres baseline, and use …Send Email · HTTP Request · Postgres · Slack · Code0 views
↗Rank and triage dependency risk with GitHub, OSV, Slack, npm, PyPI and OpenAIQuick overview This workflow runs weekly to scan GitHub repositories for JavaScript and Python dependencies, checks their release health via npm/PyPI and known vulnerabilities via …GitHub · HTTP Request · Slack · Code · Basic LLM Chain0 views
↗Investigate phishing emails from Google Sheets with MCP server and TelegramQuick overview This workflow monitors a Google Sheet for newly submitted phishing emails, downloads the attached .eml/.msg from Google Drive, analyzes headers and IOCs via an MCP s…Telegram · Google Drive · Code · MCP Client0 views
↗Summarize daily security logs with OpenAI and send briefings via WhatsApp and emailQuick Overview This workflow pulls the last 24 hours of aggregated security logs from a SIEM API, normalizes and deduplicates events, uses OpenAI to generate a daily risk briefing …Send Email · HTTP Request · WhatsApp Business Cloud · Code · Basic LLM Chain0 views
↗Monitor DNS and domain security drift with DNSSEC, expiry checks and alertsQuick overview This workflow runs hourly (or manually) to resolve DNS records for configured domains using Node.js DNS lookups, compares them to an expected baseline, and classifie…HTTP Request · Code0 views
↗
↗Submit NKSC NIVS cyber incident reports from a webhook or XLSX fileQuick overview This example workflow demonstrates how to use the NKSC NIVS n8n community nodes to submit cyber incident reports to NKSC NIVS. It provides a reference integration th…Code20 views
↗Assess Bitcoin AML risk with Groq and log results to Google SheetsQuick overview This workflow fetches recent unconfirmed Bitcoin transactions from Blockchain.com, applies rule-based AML risk scoring, generates a one-line analyst note using Groq’…Google Sheets · HTTP Request · Code · Basic LLM Chain · Groq Chat Model0 views
↗Assess GDPR breach risk and 72-hour deadlines with Groq and data tablesQuick overview This workflow collects suspected personal data breach reports via an n8n form, scores them against GDPR risk factors stored in n8n Data Tables, uses Groq to validate…Discord · Code · Basic LLM Chain · Structured Output Parser · Groq Chat Model0 views
↗Analyze URL phishing risk with VirusTotal, Safe Browsing, Gemini, and SlackQuick overview Youtube Video: https://youtu.be/ekCMYUeee6Y?si=fphlFmKkarUKUBKg This workflow collects a URL via an n8n form, checks it against Google Safe Browsing and VirusTotal,…Google Sheets · HTTP Request · Slack · Code · Basic LLM Chain0 views
↗Red-team AI agents with jailbreak probes using Groq, Discord, and data tablesQuick overview This workflow red-teams an AI agent by replaying stored jailbreak and safety probes against a Groq-hosted model, scoring behavior from tool calls and responses, savi…Discord · Code · AI Agent · Basic LLM Chain · Structured Output Parser0 views
↗Triage AWS security posture changes with Claude, Slack, email, and WhatsApp alertsQuick overview Automated AWS security posture triage: detects changes in security findings, enriches with asset context, uses Claude to assess risk severity, then routes critical c…Send Email · Slack · WhatsApp Business Cloud · Code · AI Agent0 views
↗Assess AWS security posture changes with Claude and Slack alertsQuick overview This workflow polls or manually checks AWS security findings via HTTP endpoints, compares them to a stored baseline, enriches changes with asset inventory data, uses…Send Email · HTTP Request · Slack · Code · AI Agent0 views
↗Review and remediate Kubernetes manifests in GitHub PRs with GPT-4.1Quick overview This workflow reviews Kubernetes manifest changes in GitHub pull requests using OpenAI with policy RAG and external scanner APIs, logs results to Postgres, posts fin…GitHub · Postgres · Slack · AI Agent · OpenAI Chat Model0 views
↗Notify on anomalous Google Drive access and send weekly email summariesQuick Overview This workflow monitors Google Workspace Drive audit logs on an hourly and weekly schedule, detecting bulk downloads, access bursts, and new access IPs, then emailing…Send Email · HTTP Request · Code0 views
↗Audit vendor security risk with OpenAI, Google Sheets, Slack and GmailQuick overview This workflow runs on a schedule to audit a vendor’s security posture using website header checks, RDAP domain age lookup, and the Have I Been Pwned breaches list, t…Google Sheets · HTTP Request · Slack · Gmail · Code0 views
↗Detect and triage risky OAuth apps with Anthropic Claude and SlackQuick overview This workflow runs every 30 minutes to detect new or changed OAuth-authorized apps, enriches them with publisher reputation data, scores risk with Anthropic Claude, …HTTP Request · Slack · Code · AI Agent · Anthropic Chat Model0 views
↗Send critical NPM CVE alerts from GitHub to Slack via ApifyQuick overview This workflow runs every Monday at 9am to fetch your repository’s package.json from GitHub, scan it for vulnerabilities using the Apify NPM CVE Monitor actor, and se…HTTP Request · Slack · Code0 views
↗Monitor attack surface changes with OpenAI, Slack, Postgres and emailQuick overview This workflow runs every 6 hours to collect attack-surface assets from three HTTP APIs, normalize and deduplicate them, compare them to a Postgres baseline, and use …Send Email · HTTP Request · Postgres · Slack · Code0 views
↗Rank and triage dependency risk with GitHub, OSV, Slack, npm, PyPI and OpenAIQuick overview This workflow runs weekly to scan GitHub repositories for JavaScript and Python dependencies, checks their release health via npm/PyPI and known vulnerabilities via …GitHub · HTTP Request · Slack · Code · Basic LLM Chain0 views
↗Investigate phishing emails from Google Sheets with MCP server and TelegramQuick overview This workflow monitors a Google Sheet for newly submitted phishing emails, downloads the attached .eml/.msg from Google Drive, analyzes headers and IOCs via an MCP s…Telegram · Google Drive · Code · MCP Client0 views
↗Summarize daily security logs with OpenAI and send briefings via WhatsApp and emailQuick Overview This workflow pulls the last 24 hours of aggregated security logs from a SIEM API, normalizes and deduplicates events, uses OpenAI to generate a daily risk briefing …Send Email · HTTP Request · WhatsApp Business Cloud · Code · Basic LLM Chain0 views
↗Monitor DNS and domain security drift with DNSSEC, expiry checks and alertsQuick overview This workflow runs hourly (or manually) to resolve DNS records for configured domains using Node.js DNS lookups, compares them to an expected baseline, and classifie…HTTP Request · Code0 views
↗