Audit vendor security risk with OpenAI, Google Sheets, Slack and Gmail
Needs changesWhat this workflow does
This AI workflow has 17 nodes and runs on a schedule (every day) (plus 1 other trigger). Along the way it connects OpenAI Chat Model, Google Sheets, Slack and Gmail. It also calls haveibeenpwned.com over HTTP.
How it runs
Trigger: On a schedule (every day) (plus 1 other trigger).
- Set - Vendor Data (Edit Fields (Set)): sets 5 fields: vendorName, vendorWebsite, contactEmail…
- Slack: uses Slack
- Fetch Website Headers (HTTP Request): calls an HTTP API
- Check Domain Age (RDAP) (HTTP Request): calls an HTTP API
- Check Breach History (HIBP) (HTTP Request): calls haveibeenpwned.com
- Compile Findings (Code): runs custom JavaScript code
- Vendor Risk Analysis Agent (AI Agent): runs an AI agent, with model: OpenAI Chat Model; output parser: Structured Output Parser
- Parse Agent Output (Code): runs custom JavaScript code
- Slack: uses Slack
- Update Vendor Risk Register (Google Sheets): append or update
…plus 3 more steps. See the full node list below.
Services it uses
HTTP calls to: haveibeenpwned.com
Before you upgrade to n8n 3.0
1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:
- AI Agent v1 (old agent modes) in Vendor Risk Analysis Agent (v1.9): replace with Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| AI Agent v1 (old agent modes) Vendor Risk Analysis Agent (v1.9) | Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent. |
Nodes used (12)
- Edit Fields (Set)
n8n-nodes-base.set - HTTP Request
n8n-nodes-base.httpRequest - Code
n8n-nodes-base.code - OpenAI Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenAi - Structured Output Parser
@n8n/n8n-nodes-langchain.outputParserStructured - AI Agent
@n8n/n8n-nodes-langchain.agent - Google Sheets
n8n-nodes-base.googleSheets - If
n8n-nodes-base.if - Slack
n8n-nodes-base.slack - Gmail
n8n-nodes-base.gmail - Schedule Trigger
n8n-nodes-base.scheduleTrigger - Error Trigger
n8n-nodes-base.errorTrigger
From the author
Quick overview This workflow runs on a schedule to audit a vendor’s security posture using website header checks, RDAP domain age lookup, and the Have I Been Pwned breaches list, then uses OpenAI to generate a structured risk rating, logs the result to Google…