Automated URL phishing & threat analysis with NixGuard AI
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 5 nodes and runs when an HTTP GET request hits its webhook URL. Along the way it connects Slack.
How it runs
Trigger: When an HTTP GET request hits its webhook URL.
- Set API Key & Initial Prompt (Edit Fields (Set)): sets or maps fields
- Execute NixGuard & Wazuh Workflow (Execute Sub-workflow): calls another n8n workflow
- Format NixGuard AI Summary & Wazuh Insights (Edit Fields (Set)): sets or maps fields
- (Optional) Send Slack Alert for High-Risk Events (Slack): uses Slack
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (4)
- Execute Sub-workflow
n8n-nodes-base.executeWorkflow - Edit Fields (Set)
n8n-nodes-base.set - Slack
n8n-nodes-base.slack - Webhook
n8n-nodes-base.webhook
From the author
Stop manually checking suspicious links. This free n8n workflow provides the foundation for a powerful, automated URL analysis pipeline. Using the NixGuard AI engine, you can instantly analyze suspicious URLs from emails, logs, or tickets to uncover phishing…