Network Vulnerability Scanner
Scans network targets with Nmap, enriches findings with NVD CVE data, and emails or Telegrams a password-protected PDF report.
developers and engineersops and IT teams
What it does
Get a complete security audit for your network targets that identifies open ports and services, enriches findings with CVSS scores from the NVD API, and delivers password-protected PDF reports via email or Telegram. You receive actionable remediation recommendations in professional documents without manual scanning or data collection.
Step by step
- Configure the n8n HTTP Request node to call the NVD API with proper authentication headers and pagination logic.
- Set up the Prince XML configuration file to define CSS styles for the HTML report layout and table formatting.
- Define the JSON schema in the nmap-helper function node to map raw Nmap output fields to a standardized structure.
Where the LLM does the work
- Generate natural language executive summaries by feeding structured vulnerability data into an LLM prompt template.
- Draft specific remediation recommendations for each CVE based on the service version and context provided in the scan results.
- Refine the tone of the final report introduction to match the target audience's technical proficiency level.
Watch out for
Nmap scans can be slow or trigger IDS alerts, so configure timing templates like -T4 and add pause nodes between targets.
Prince XML requires a valid license key to remove watermarks from generated PDFs, so store this in environment variables securely.
Telegram message length limits can truncate long vulnerability descriptions, so split the report content into multiple messages or use document sharing.
Tools that fit
The agent brief
Everything your agent needs, including the gotchas. Copy it and go.
You are helping me build the following AI agent workflow. ## Goal Network Vulnerability Scanner: Scans network targets with Nmap, enriches findings with NVD CVE data, and emails or Telegrams a password-protected PDF report. ## Specification - What it does: Get a complete security audit for your network targets that identifies open ports and services, enriches findings with CVSS scores from the NVD API, and delivers password-protected PDF reports via email or Telegram. You receive actionable remediation recommendations in professional documents without manual scanning or data collection. - Trigger: On a schedule (Scheduled · daily or Manual · on demand) - Autonomy: Fully hands-off - Expected setup effort: a few focused days - Tools/services involved: - n8n: Workflow orchestration and automation logic - Nmap: Network port scanning and service detection - NVD API: Retrieving CVE details and CVSS scores - Prince XML: Converting HTML reports to password-protected PDFs - Telegram: Delivering scan results via bot notifications ## Known pitfalls, handle each one explicitly in your implementation 1. Nmap scans can be slow or trigger IDS alerts, so configure timing templates like -T4 and add pause nodes between targets. 2. Prince XML requires a valid license key to remove watermarks from generated PDFs, so store this in environment variables securely. 3. Telegram message length limits can truncate long vulnerability descriptions, so split the report content into multiple messages or use document sharing. ## Reference implementation https://n8n.io/workflows/11007 (workflow template) Fetch and inspect this before building. If it matches my stack, adapt it; if not, rebuild the pattern with my tools. ## Process requirements 1. Before building: ask me which of the listed tools I actually use and what my platform is (n8n / Make / code / other). Do not assume. 2. Adapt the pattern to my answers; do not force the reference stack. 3. Address every pitfall above; tell me how you handled each. 4. Provide a test plan I can run before letting this touch real data. 5. Ask before any step that sends messages, modifies data, or spends money. Source: https://usecasesforagents.com/use-case/automated-network-vulnerability-scanner/ via usecasesforagents.com
Frequently asked questions
Can I use a different Automation Platform than n8n?
Yes. n8n is only the example automation platform in this recipe. The same flow works with Home Assistant. Swap the automation platform connection and keep the rest of the setup as written.
Want this running in your business?
This is what I do. I design and build AI agents like this one, and keep them running. If you want it set up for your team instead of doing it yourself, get in touch.
Who it's for
Built for developers who want the busywork around code automated, not the code itself.
Ops-IT teams triaging their own internal requests get the same pattern, different queue.