n8n Website Security Audit Workflow: PDF Report + Email

Get a website security audit in minutes—automatically

This n8n Website Security Audit Workflow takes a URL from your n8n form, scrapes the page with ScrapingBee, audits HTTP security headers and client-side risks with Anthropic Claude, then generates a branded PDF report and emails it via Microsoft Outlook.

What this workflow does

• Collects input: Receives a website URL when a user submits the n8n form.
• Scrapes and normalizes content: Uses the ScrapingBee API to fetch the page, then normalizes returned HTML and response headers for consistent analysis.
• Audits HTTP security headers: Uses Anthropic Claude to identify HTTP header security configuration issues.
• Analyzes client-side vulnerabilities: Uses Anthropic Claude to review the page HTML for client-side security vulnerability risks.
• Aggregates and grades results: Merges audit outputs, calculates header presence, produces a header-hygiene grade, and summarizes key metrics for the report.
• Generates fix guidance: Uses Claude to produce platform-specific remediation instructions for WordPress, GoDaddy Hosting, Hostinger Hosting, and Squarespace.
• Creates and delivers the report: Builds a branded HTML report, converts it to PDF using Gotenberg, and sends the PDF as an attachment through Microsoft Outlook.

Use cases

• SaaS operators who want automated security checks for customer onboarding or periodic reviews
• Automation engineers building a reusable website security audit service inside n8n
• Teams needing consistent, report-ready documentation to share with stakeholders (PDF + email)

Technical details

• Nodes/tech stack: form trigger, http request, code, merge, aggregate, sticky note
• Integrations: ScrapingBee (scrape page + headers), Anthropic Claude (header + HTML vulnerability analysis + remediation guidance), Gotenberg (HTML-to-PDF), Microsoft Outlook (email delivery with PDF attachment)
• Setup: Add ScrapingBee API key, configure Claude credentials/models for each analysis step, and provide a reachable Gotenberg service URL