Monitor and score CVEs with real-time alerts
An n8n workflow monitors CVEs from sources like CISA and OTX, scores them with AI, and alerts via Slack, Gmail and Google Sheets.
What they did
Bright Data nodes in n8n scrape CISA, NIST, CERT-FR and BleepingComputer. A Cohere Command-R agent with session memory extracts CVE details and scores severity, using CISA KEV, CIRCL and AlienVault OTX enrichment. Output parsing and normalization stop it recalculating scores arbitrarily. Hash-based diff checks remove duplicates. Alerts go to Slack, Gmail and Google Sheets, with retries on source failures.
How it went
The author reports 100+ CVEs a day, alerts in under 5 minutes, and 99.8% uptime. The Slack Ack/Investigate/Dismiss buttons are only a demo, because the webhook was blocked, so the system is about 90% production-ready.
Worth knowing
Without strict output constraints and parsing, the AI scored inconsistently. The uptime and false-positive figures are the author's own claims, not independently verified.
Labels
An n8n workflow monitors CVEs from sources like CISA and OTX, scores them with AI, and alerts via Slack, Gmail and Google Sheets.
A Cohere Command-R agent with session memory extracts CVE details and scores severity, using CISA KEV, CIRCL and AlienVault OTX enrichment.
The author reports 100+ CVEs a day, alerts in under 5 minutes, and 99.8% uptime.
The “Material” label failed its quality check and is not used for selection.
Details
- Agents
- n8n
- Source
- blog
- Source date
- undated
- Accounts
- 1
- In registry since
- Oct 12, 2026