Audit Website Security Headers with AI Remediation and Google Sheets Reporting
Needs changesNeeds changes. This template uses 1 thing(s) that n8n 3.0 removes: AI Agent v1 (old agent modes). 1 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 16 nodes and runs when someone submits an n8n form. Along the way it connects Google Sheets, Gmail and OpenRouter Chat Model.
How it runs
Trigger: When someone submits an n8n form.
- URL List (Edit Fields (Set)): sets or maps fields
- Fetch Headers (HTTP Request): calls an HTTP API
- Parse Headers (Code): runs custom JavaScript code
- Security Scorer (Code): runs custom JavaScript code
- Grade Calculator (Code): runs custom JavaScript code
- If: checks a condition and branches into true / false
- Format Report (Edit Fields (Set)): sets or maps fields
- AI Remediation Agent (AI Agent): runs an AI agent, with model: AI Remediation Model
- Export to Sheets (Google Sheets): uses Google Sheets
- Data Aggregator (Code): runs custom JavaScript code
…plus 4 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:
- AI Agent v1 (old agent modes) in AI Remediation Agent (v1.9): replace with Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| AI Agent v1 (old agent modes) AI Remediation Agent (v1.9) | Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent. |
Nodes used (9)
- Edit Fields (Set)
n8n-nodes-base.set - HTTP Request
n8n-nodes-base.httpRequest - Code
n8n-nodes-base.code - Google Sheets
n8n-nodes-base.googleSheets - Gmail
n8n-nodes-base.gmail - If
n8n-nodes-base.if - AI Agent
@n8n/n8n-nodes-langchain.agent - OpenRouter Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenRouter - n8n Form Trigger
n8n-nodes-base.formTrigger
From the author
What It Is An automated workflow for auditing website security headers and generating comprehensive security reports. The workflow consists of three main phases: 1. Perform Security Scan 2. Save Results in Table 3. Email Report --- Perform Security Scan This…