Audit8n

A workflow analyzer for n8n that scans exported workflow JSON to detect security vulnerabilities, performance bottlenecks, and reliability issues such as exposed API keys, insecure webhooks, inefficient AI node usage, and fragile loops. It is for developers and IT teams in businesses that build and maintain n8n automations. Unlike other tools, local analysis runs entirely in the browser with no data transfer, with an optional AI-powered deep scan available.

Key features

• Security audit for exposed API keys
• Detect insecure webhooks
• Detect remote code execution risks
• Performance analysis for N+1 queries
• Detect token bloat
• Detect inefficient AI node usage
• Reliability scanning for fragile loops
• Detect silent failures
• Detect missing error handlers
• AI-powered deep scan via Gemini
• Drag and drop workflow JSON analysis
• Detect hardcoded credentials
• Detect unsanitized Execute Command inputs
• Detect merge nodes blocking forever
• Detect aggressive polling intervals
• Detect missing error workflow configuration