n8n SaaS Vendor Risk Assessment: OpenAI + Probo + Slack

Automate SaaS vendor security & privacy risk reviews—using OpenAI, Probo, and Slack

This n8n workflow intake and analyzes new SaaS vendor requests, automatically discovers relevant security/privacy evidence on vendor websites with OpenAI, generates a structured vendor risk assessment, saves it in Probo, and alerts your security team in Slack.

What this workflow does

Built for fast, repeatable vendor risk assessment automation, the workflow:

• Triggers when a request is submitted via n8n Forms or when a POST request is sent to an intake webhook.
• Normalizes and validates vendor details (including standardizing the vendor website URL) and loads Probo/Slack configuration values.
• Crawls the vendor homepage, extracts all links, converts them into absolute URLs, and deduplicates results.
• Uses OpenAI to classify each discovered link for relevance (privacy, security, trust/compliance, terms, DPA/subprocessors) and keeps only relevant pages.
• Fetches relevant pages, converts HTML into short text excerpts, and compiles those excerpts as public evidence.
• Uses OpenAI to analyze the compiled evidence and produce a JSON risk assessment including assurance score, risk level, compliance signals, risks, and recommended actions—then normalizes it into a risk score and Probo-ready notes.
• Creates records in Probo: third-party vendor, requester contact, service, risk assessment, and risk record.
• Notifies in Slack with the risk details and a link to the corresponding Probo vendor record.

Use cases

• Security teams need consistent, auditable SaaS vendor onboarding risk reviews from form submissions.
• Automation engineers want public evidence discovery (privacy/security/terms/DPA signals) without manual link hunting.
• SaaS operators centralize third-party risk tracking in Probo and keep stakeholders updated via Slack.

Technical details

• Triggers/Inputs: n8n Forms or intake webhook (POST)
• Core processing: set, code, html, filter, webhook
• AI steps: OpenAI (link classification + risk analysis)
• Integrations: Probo (vendor + risk records) and Slack (risk notification)