n8n Security Audit: Webhook Collision & Credential Risk Alerts

Catch webhook collisions and credential risks in your n8n—before they break production

This nightly `n8n Security Audit: Webhook Collision & Credential Risk Alerts` workflow scans your entire n8n instance to detect webhook path collisions, credential misuse, and broken sub-workflow dependencies—then alerts you in Slack and via email with a governance health score.

What this workflow does

• Scans all workflows nightly: Fetches every workflow on the instance through the n8n API, paginating until no pages remain.
• Pulls known risk data: Uses n8n’s built-in Security Audit API to retrieve known credential, node, and instance risk information.
• Detects changes over time: Compares the current workflow set against the previous snapshot to flag new, modified, or deleted workflows.
• Finds webhook fights: Scans every webhook, form, and chat trigger node, grouping them by method + path to catch cases where two active workflows silently compete for the same webhook URL (a scenario n8n doesn’t warn about).
• Surfaces credential problems: Cross-references credential usage against the audit’s unused list, and separately flags credentials shared across too many workflows.
• Computes sub-workflow blast radius: Builds a caller graph from every Execute Workflow node to quantify impact and catches broken references to deleted sub-workflows.
• Produces a deterministic governance score: Combines findings into a transparent 0–100 score using fixed point deductions per severity—no AI judgment.
• Tags and alerts: Tags colliding workflows for human review (optionally deactivating duplicates) and sends the full report to Slack and email.

Use cases

• Preventing silent webhook failures caused by two teams deploying workflows to the same URL.
• Reducing credential sprawl by finding unused or over-shared credentials early.
• Detecting broken Execute Workflow references after workflow removals or refactors.
• Providing SaaS operations teams a repeatable n8n governance health snapshot.

Technical details

• Workflow logic nodes: if, set, code, no op, merge, slack
• Core integrations/APIs: n8n API (pagination), n8n Security Audit API, Slack, and email
• SEO focus: webhook collision detection, n8n security audit, credential risk alerts, governance health scoring