{"product_id":"n8n-security-audit-webhook-collision-credential-risk-alerts","title":"n8n Security Audit: Webhook Collision \u0026 Credential Risk Alerts","description":"\u003ch3\u003eCatch webhook collisions and credential risks in your n8n—before they break production\u003c\/h3\u003e\n\u003cp\u003eThis nightly `n8n Security Audit: Webhook Collision \u0026amp; Credential Risk Alerts` workflow scans your entire n8n instance to detect webhook path collisions, credential misuse, and broken sub-workflow dependencies—then alerts you in \u003cstrong\u003eSlack\u003c\/strong\u003e and via \u003cstrong\u003eemail\u003c\/strong\u003e with a governance health score.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eScans all workflows nightly:\u003c\/strong\u003e Fetches every workflow on the instance through the n8n API, paginating until no pages remain.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003ePulls known risk data:\u003c\/strong\u003e Uses n8n’s built-in \u003cstrong\u003eSecurity Audit API\u003c\/strong\u003e to retrieve known credential, node, and instance risk information.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eDetects changes over time:\u003c\/strong\u003e Compares the current workflow set against the previous snapshot to flag \u003cem\u003enew, modified, or deleted\u003c\/em\u003e workflows.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eFinds webhook fights:\u003c\/strong\u003e Scans every webhook, form, and chat trigger node, grouping them by \u003cem\u003emethod + path\u003c\/em\u003e to catch cases where two active workflows silently compete for the same webhook URL (a scenario n8n doesn’t warn about).\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eSurfaces credential problems:\u003c\/strong\u003e Cross-references credential usage against the audit’s \u003cem\u003eunused\u003c\/em\u003e list, and separately flags credentials shared across too many workflows.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eComputes sub-workflow blast radius:\u003c\/strong\u003e Builds a caller graph from every \u003cstrong\u003eExecute Workflow\u003c\/strong\u003e node to quantify impact and catches broken references to deleted sub-workflows.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eProduces a deterministic governance score:\u003c\/strong\u003e Combines findings into a transparent 0–100 score using fixed point deductions per severity—no AI judgment.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eTags and alerts:\u003c\/strong\u003e Tags colliding workflows for human review (optionally deactivating duplicates) and sends the full report to \u003cstrong\u003eSlack\u003c\/strong\u003e and \u003cstrong\u003eemail\u003c\/strong\u003e. \u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003ePreventing silent webhook failures caused by two teams deploying workflows to the same URL.\u003c\/li\u003e\n  \u003cli\u003eReducing credential sprawl by finding unused or over-shared credentials early.\u003c\/li\u003e\n  \u003cli\u003eDetecting broken \u003cstrong\u003eExecute Workflow\u003c\/strong\u003e references after workflow removals or refactors.\u003c\/li\u003e\n  \u003cli\u003eProviding SaaS operations teams a repeatable n8n governance health snapshot.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eWorkflow logic nodes:\u003c\/strong\u003e \u003ccode\u003eif\u003c\/code\u003e, \u003ccode\u003eset\u003c\/code\u003e, \u003ccode\u003ecode\u003c\/code\u003e, \u003ccode\u003eno op\u003c\/code\u003e, \u003ccode\u003emerge\u003c\/code\u003e, \u003ccode\u003eslack\u003c\/code\u003e\n\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eCore integrations\/APIs:\u003c\/strong\u003e n8n API (pagination), n8n \u003cstrong\u003eSecurity Audit API\u003c\/strong\u003e, \u003cstrong\u003eSlack\u003c\/strong\u003e, and \u003cstrong\u003eemail\u003c\/strong\u003e\n\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eSEO focus:\u003c\/strong\u003e webhook collision detection, n8n security audit, credential risk alerts, governance health scoring\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":45899956846771,"sku":"N8N-18702","price":29.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/0K79KTPQoIHemeTmTFV0S_hlNsNKvI.png?v=1787735540","url":"https:\/\/buyflowscripts.com\/products\/n8n-security-audit-webhook-collision-credential-risk-alerts","provider":"N8N Commerce","version":"1.0","type":"link"}