WebSecScan: AI-Powered Website Security Auditor

WebSecScan is an advanced n8n workflow that leverages OpenAI's specialized agents for comprehensive, non-invasive website security auditing. It performs dual-layer analysis: one agent scrutinizes HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) and configurations like CORS and cookies, while the second detects vulnerabilities such as XSS risks and information disclosures. Outputs are processed to calculate an overall security grade (A+ to F) based on issue severity and count.

The workflow generates a professional, responsive HTML report featuring color-coded vulnerability categories, header status indicators, detailed findings, and actionable remediation recommendations with code examples. This report is automatically emailed via Gmail, making it ideal for security teams, developers, and agencies needing quick audits without expensive tools.

Benefits include time-saving automation of manual security checks, scalable analysis for multiple sites, and business value through proactive vulnerability mitigation. Use cases span DevSecOps pipelines, client website reviews, compliance audits (GDPR, PCI-DSS), and red-team prep, saving hours of expert analysis per site.