Automation library · Customer support

Analyze pentest reports and create remediation tickets

Started by another system calling it, and works across Slack. It hands the judgement calls to OpenAI. 17 steps, 2 branches, 2 loops or waits: a working afternoon to understand properly.

MediumCalls a model: OpenAI

Download free
17 stepsMedium: a working afternoon
2Branches: places the flow splits
2Loops or waits
1Service it connects to

The flow

Starts it 2Model 2Logic 11Service 2

The steps in the order they run, from what starts it.

  1. 1Webhook - Pentest Report SubmittedWebhookStarts it
  2. 2OpenAI Chat ModelLm Chat Open AiModel
  3. 3Set - ConfigSetLogic
  4. 4AI Agent - Vulnerability ExtractorAgentModel
  5. 5JS - Parse, Validate & Compute Severity SummaryCodeLogic
  6. 6IF - Critical Vulnerabilities PresentIfLogic
  7. 7Slack - Alert Security Team of Critical FindingsSlackService
  8. 8JS - Build Remediation Ticket PayloadsCodeLogic
  9. 9Wait - For Security Lead TriageWaitLogic
  10. 10Switch - Route Ticket By Severity TierSwitchLogic
  11. 11Set - Tag Critical RouteSetLogic
  12. 12Set - Tag High RouteSetLogic
  13. 13Set - Tag Medium RouteSetLogic
  14. 14Set - Tag Low RouteSetLogic
  15. 15HTTP Request - Create Remediation TicketHttp RequestService
  16. 16Wait - For Ticket Sync ConfirmationWaitLogic
  17. 17Respond to Webhook - SuccessRespond To WebhookStarts it

How it's built

Starts on
Another system calling it
Steps
17, with 2 branches, 2 loops or waits
Size
Medium: a working afternoon
Connects to
Slack
Model
OpenAI

Questions

What does it need to run?

An n8n account, plus your own Slack account, and a key for OpenAI. You connect your own accounts after importing it; none are included.

What starts it?

It starts on another system calling it.

Does it use AI?

Yes. It calls OpenAI. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Plan an afternoon. 17 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 17 steps before you point it at anything that matters.