Templates / Monitor CISA critical vulnerability alerts with RSS feed & Slack notifications

Monitor CISA critical vulnerability alerts with RSS feed & Slack notifications

Ready for 3.0

by Marth - Business Automation ✓ · 984 views · created 2025-07-31 · SecOps

Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.

What this workflow does

This workflow has 5 nodes and runs on RSS Feed events. Along the way it connects Slack.

How it runs

Trigger: On RSS Feed events.

Format Vulnerability Alert (Code): runs custom JavaScript code
Is Critical Vulnerability? (If): checks a condition and branches into true / false
Send Critical Alert (Slack): uses Slack

Services it uses

Slack

Before you upgrade to n8n 3.0

Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.

Nodes used (5)

RSS Feed Triggern8n-nodes-base.rssFeedReadTrigger
Coden8n-nodes-base.code
Ifn8n-nodes-base.if
Slackn8n-nodes-base.slack
No Operation, do nothingn8n-nodes-base.noOp

From the author

--- How It Works: The 5-Node Monitoring Flow This concise workflow efficiently captures, filters, and delivers crucial cybersecurity-related mentions. 1. Monitor: Cybersecurity Keywords (X/Twitter Trigger) This is the entry point of your workflow. It actively…
Excerpt from Marth - Business Automation's description on n8n.io.

View the original on n8n.io → Check your own copy

Monitor CISA critical vulnerability alerts with RSS feed & Slack notifications

What this workflow does

How it runs

Services it uses

Before you upgrade to n8n 3.0

Nodes used (5)

From the author

Get the weekly “what broke” email