AI-Powered Nessus Vulnerability Scanner with Risk Triage & Sheets Reporting

This workflow transforms manual vulnerability management into an automated, AI-enhanced process. It triggers Nessus scans via API (scheduled or manual), parses results to extract assets and vulnerabilities, then applies a custom AI-based LEV risk metric using OpenAI or another LLM to triage findings into categories: expert review, self-healing, or monitoring. Critical CVEs trigger immediate email alerts, while daily summaries export to Google Sheets for easy tracking and BI integration. It aligns with NIST CSF frameworks (Identify, Protect, Detect, Respond, Recover).

Benefits include massive time savings by eliminating repetitive parsing and reporting, reducing false positives through intelligent triage, and enabling proactive security for DevOps and compliance teams. Ideal for organizations using Nessus Essentials/Pro, following CISA KEV guidelines, or scaling vulnerability ops without dedicated analysts.

Use cases: Daily network scans for mid-sized enterprises, compliance audits, red-team simulations, or integrating with existing SIEM/BI tools. Customize by swapping Sheets for Airtable/PostgreSQL, adjusting scan targets, or tweaking AI prompts for custom risk logic. Setup is straightforward with in-workflow sticky notes guiding Nessus API, Google OAuth, SMTP, and OpenAI keys.