Automate Weekly Security Audits with n8n & Telegram Reports

Streamline Your Security Audits with n8n & Telegram Integration

Enhance your security operations by automating weekly security audits of your n8n instance and receiving comprehensive reports directly via Telegram. This workflow leverages the n8n security audit API alongside custom security checks to keep your system secure without manual intervention. Ensure peace of mind knowing your workflows are under vigilant surveillance and promptly receive updates on any detected vulnerabilities.

What this workflow does

• Operates on a weekly schedule, conducting thorough security audits of your n8n instance.
• Utilizes the n8n security audit API to generate detailed reports and compiles a list of all workflows from the API.
• Scans workflows for potential vulnerabilities, including unauthenticated webhooks, hardcoded secrets, missing error workflows, insecure HTTP URLs, and pinned data.
• Standardizes the findings and delivers a security score ranging from 0–100, complete with a severity summary.
• Compares current results to historical data from a designated n8n Data Table, identifying new vs fixed findings along with score changes.
• Dispatches a clear, formatted audit report via Telegram, ensuring immediate accessibility to the latest audit results.

Use cases

• Automation Engineers: Maintain oversight of the security status of multiple automated workflows to minimize the risk of vulnerabilities affecting system performance.
• SaaS Operators: Continuously monitor security health in a high-paced SaaS environment, ensuring compliance and safeguarding user data.
• n8n Users: Automate the cumbersome task of regular security checks, freeing up valuable time and resources to focus on core operations.

Technical details

• Integrations: n8n security audit API, Telegram
• Nodes employed: Code, Merge, Telegram, Data Table, Sticky Note
• Required setup:
  • n8n API credentials with securityAudit:generate and workflow:list scopes.
  • n8n Data Table setup with runAt, score, summary, and findings columns.
  • Telegram credentials with a specified target chat ID for real-time reporting.