Aggregate endpoint security risk scores with EDR, vulnerability data & Google Sheets
Needs changesNeeds changes. This template uses 2 thing(s) that n8n 3.0 removes: Cron, Function (legacy). 2 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 8 nodes and runs on a schedule (legacy Cron node). Along the way it connects Google Sheets.
How it runs
Trigger: On a schedule (legacy Cron node).
- 🛡 Get EDR Logs (HTTP Request): calls an HTTP API
- Merge: merges the data from its input branches
- Merge: merges the data from its input branches
- 🧠 Risk Score Calculator (Function): runs custom JavaScript (legacy Function node)
- Google Sheets: uses Google Sheets
- 🗃 Get File Integrity Logs (HTTP Request): calls an HTTP API
- 🧬 Get Vulnerability Data (HTTP Request): calls an HTTP API
Services it uses
Before you upgrade to n8n 3.0
2 things in this workflow are removed in n8n 3.0. Fix them before you upgrade:
- Cron in ⏰ Cron Trigger – Daily: replace with Schedule Trigger.
- Function (legacy) in 🧠 Risk Score Calculator: replace with Code node, mode 'Run Once for All Items'.
| Removed in 3.0 | Replace with |
|---|---|
| Cron ⏰ Cron Trigger – Daily | Schedule Trigger |
| Function (legacy) 🧠 Risk Score Calculator | Code node, mode 'Run Once for All Items' |
Nodes used (5)
- Cron
n8n-nodes-base.cron - HTTP Request
n8n-nodes-base.httpRequest - Merge
n8n-nodes-base.merge - Function
n8n-nodes-base.function - Google Sheets
n8n-nodes-base.googleSheets
From the author
👤 Who it’s for Security teams, SOC analysts, and small-to-mid IT teams looking to automatically assess endpoint risk by combining known vulnerabilities with internal asset value and dynamic threat indicators. Perfect for teams using Google Sheets or CSV…