{"product_id":"attack-surface-monitoring-openai-slack-postgres-n8n","title":"Attack Surface Monitoring: OpenAI, Slack \u0026 Postgres (n8n)","description":"\u003ch3\u003eAttack Surface Monitoring that alerts you to new risk—automatically\u003c\/h3\u003e\n\u003cp\u003eThis n8n workflow runs every 6 hours to discover attack-surface assets from three HTTP APIs, compare them against a Postgres baseline, and use OpenAI to generate clear risk narratives. It then sends high\/critical findings to \u003cstrong\u003eSlack\u003c\/strong\u003e and medium updates via email, keeping your engineering and security teams informed as your footprint changes.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eScheduled inventory runs:\u003c\/strong\u003e Executes every 6 hours to keep monitoring continuous.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eCollects assets from three HTTP APIs:\u003c\/strong\u003e Enumerates subdomains, exposed services, and public cloud resources, then merges the results into a single inventory.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eNormalizes \u0026amp; deduplicates:\u003c\/strong\u003e Converts discovered items into a consistent schema, computes stable fingerprints, and removes duplicates.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eDiffs against a Postgres baseline:\u003c\/strong\u003e Loads the previous state from Postgres, identifies \u003cem\u003enew\u003c\/em\u003e, \u003cem\u003echanged\u003c\/em\u003e, and \u003cem\u003eremoved\u003c\/em\u003e assets.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eSeverity classification + OpenAI narrative:\u003c\/strong\u003e Classifies changes by severity (including out-of-policy cloud provider\/region) and uses \u003cstrong\u003eOpenAI\u003c\/strong\u003e to produce short risk narratives for the team.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRoutes alerts by impact:\u003c\/strong\u003e Sends critical\/high changes to \u003cstrong\u003eSlack\u003c\/strong\u003e, medium changes by email, and logs low\/removed changes without alerting.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eCompliance email for unauthorized cloud footprint:\u003c\/strong\u003e Triggers an additional compliance email when an unauthorized cloud footprint is detected.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eUpdates baseline:\u003c\/strong\u003e Upserts the full current inventory into Postgres so the next run compares against the latest known state.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eSaaS security monitoring for unexpected new subdomains, services, or cloud resources\u003c\/li\u003e\n  \u003cli\u003eTracking configuration drift (changed assets) against a known-good baseline in Postgres\u003c\/li\u003e\n  \u003cli\u003eReducing alert fatigue by only messaging Slack\/email for critical\/high and medium events\u003c\/li\u003e\n  \u003cli\u003eCompliance-oriented notification when cloud footprint appears outside approved regions\/providers\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eIntegrations: \u003cstrong\u003eOpenAI\u003c\/strong\u003e, \u003cstrong\u003eSlack\u003c\/strong\u003e, \u003cstrong\u003ePostgres\u003c\/strong\u003e\n\u003c\/li\u003e\n  \u003cli\u003eDiscovery inputs: three \u003cstrong\u003eHTTP APIs\u003c\/strong\u003e using header authentication (or equivalent), configurable API URLs and root domain list\u003c\/li\u003e\n  \u003cli\u003eWorkflow nodes\/logic: \u003cstrong\u003eif\u003c\/strong\u003e, \u003cstrong\u003eset\u003c\/strong\u003e, \u003cstrong\u003ecode\u003c\/strong\u003e, \u003cstrong\u003eno op\u003c\/strong\u003e, \u003cstrong\u003emerge\u003c\/strong\u003e, \u003cstrong\u003eSlack\u003c\/strong\u003e (plus baseline comparison and upsert behavior per configuration)\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":45891845095603,"sku":"N8N-18621","price":13.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/6vprDlHzbxsztcs15Em_3_CRLFZ51h.png?v=1787562390","url":"https:\/\/buyflowscripts.com\/products\/attack-surface-monitoring-openai-slack-postgres-n8n","provider":"N8N Commerce","version":"1.0","type":"link"}