AutomationFlowsAI & RAG › Automate AI Vulnerability Monitoring with Gpt-4 and Servicenow Incident Creation

Automate AI Vulnerability Monitoring with Gpt-4 and Servicenow Incident Creation

ByTushar Mishra @yajna on n8n.io

This n8n workflow automatically monitors RSS feeds for the latest AI vulnerability news, extracts key threat details, and creates a corresponding Security Incident in ServiceNow for each item.

Cron / scheduled trigger★★★★☆ complexityAI-powered7 nodesRSS Feed ReadInformation ExtractorOpenAI ChatService NowJina Ai
AI & RAG Trigger: Cron / scheduled Nodes: 7 Complexity: ★★★★☆ AI nodes: yes Added:

This workflow corresponds to n8n.io template #7225 — we link there as the canonical source.

This workflow follows the Informationextractor → OpenAI Chat recipe pattern — see all workflows that pair these two integrations.

The workflow JSON

Copy or download the full n8n JSON below. Paste it into a new n8n workflow, add your credentials, activate. Full import guide →

Download .json
{
  "id": "2Nez00PbMbD5pHI5",
  "meta": {
    "templateCredsSetupCompleted": true
  },
  "name": "Ai Vulnerability Detection and Servicenow Incident Creation",
  "tags": [],
  "nodes": [
    {
      "id": "2b5b197b-eebc-43c2-924a-85cedd66b47f",
      "name": "RSS Read",
      "type": "n8n-nodes-base.rssFeedRead",
      "position": [
        208,
        0
      ],
      "parameters": {
        "url": "https://rss.app/feeds/tbFqDT5HIb59.xml",
        "options": {}
      },
      "typeVersion": 1.2
    },
    {
      "id": "5e2d584f-7254-41da-9f0b-4ee99d82defe",
      "name": "Information Extractor",
      "type": "@n8n/n8n-nodes-langchain.informationExtractor",
      "position": [
        624,
        0
      ],
      "parameters": {
        "text": "=Snippet {{ $json.metadata.description}}\nTitle{{ $json.title}}\npubDate{{ $json.publishedTime}}\nCreator {{ $json.metadata.author}}\ncontent {{ $json.content}}",
        "options": {
          "systemPromptTemplate": "You are an expert extraction algorithm.\nOnly extract relevant information from the input text.\nExtract data as JSON objects with the following fields:\n\ntitle (string): The title of the news article or vulnerability report.\nlink (string): The URL linking to the full article.\npubDate (string, ISO 8601 format preferred): The publication date of the article.\ncreator (string): The author or source of the article.\ncontent (string): A brief summary or snippet of the article content.\n\n\nIf any field is missing or not found, omit that field in the output.\nOutput a JSON array called results containing the extracted objects.\n"
        },
        "schemaType": "manual",
        "inputSchema": "={\n\t\"properties\": {\n\t\t\"Title\": {\n\t\t\t\"type\": \"string\"\n\t\t},\n\t\t\"Description\": {\n\t\t\t\"type\": \"string\"\n\t\t\t\n\t\t},\n       \"PublishedTime\": {\n\t\t\t\"type\": \"string\"\n\t\t\t\n\t\t},\n       \"SiteName\": {\n\t\t\t\"type\": \"string\"\n\t\t\t\n\t\t}\n    \n    }\n} "
      },
      "typeVersion": 1.2
    },
    {
      "id": "fcfeb18c-eb1c-42c8-b102-6a549a5dda7b",
      "name": "OpenAI Chat Model",
      "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi",
      "position": [
        560,
        208
      ],
      "parameters": {
        "model": {
          "__rl": true,
          "mode": "list",
          "value": "gpt-4.1-mini"
        },
        "options": {}
      },
      "credentials": {
        "openAiApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1.2
    },
    {
      "id": "73901b61-1b73-440c-b959-2a882331386e",
      "name": "Split Out",
      "type": "n8n-nodes-base.splitOut",
      "position": [
        976,
        0
      ],
      "parameters": {
        "options": {
          "destinationFieldName": "response"
        },
        "fieldToSplitOut": "output.results"
      },
      "typeVersion": 1
    },
    {
      "id": "9acef534-f34a-4655-b617-775a5ab2a805",
      "name": "Create an incident",
      "type": "n8n-nodes-base.serviceNow",
      "position": [
        1184,
        0
      ],
      "parameters": {
        "resource": "incident",
        "operation": "create",
        "authentication": "basicAuth",
        "additionalFields": {
          "description": "=Snippet {{ $json.response.content }}\nCreator {{ $json.response.creator }}\nPubDate {{ $json.response.pubDate}} "
        },
        "short_description": "=Ai Vulnerability {{ $json.response.title }}"
      },
      "credentials": {
        "serviceNowBasicApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1
    },
    {
      "id": "a50f6014-3019-4335-b4d6-9e1e199ee096",
      "name": "Schedule Trigger",
      "type": "n8n-nodes-base.scheduleTrigger",
      "position": [
        0,
        0
      ],
      "parameters": {
        "rule": {
          "interval": [
            {}
          ]
        }
      },
      "typeVersion": 1.2
    },
    {
      "id": "725aced5-996d-4529-9af1-60ac1e0bb693",
      "name": "Read URL content",
      "type": "n8n-nodes-base.jinaAi",
      "position": [
        432,
        0
      ],
      "parameters": {
        "url": "={{ $json.link }}",
        "options": {},
        "requestOptions": {}
      },
      "credentials": {
        "jinaAiApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1
    }
  ],
  "active": false,
  "settings": {
    "executionOrder": "v1"
  },
  "versionId": "0d769cde-f47e-44b9-b81f-7fd9eda3da07",
  "connections": {
    "RSS Read": {
      "main": [
        [
          {
            "node": "Read URL content",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Split Out": {
      "main": [
        [
          {
            "node": "Create an incident",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Read URL content": {
      "main": [
        [
          {
            "node": "Information Extractor",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Schedule Trigger": {
      "main": [
        [
          {
            "node": "RSS Read",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "OpenAI Chat Model": {
      "ai_languageModel": [
        [
          {
            "node": "Information Extractor",
            "type": "ai_languageModel",
            "index": 0
          }
        ]
      ]
    },
    "Information Extractor": {
      "main": [
        [
          {
            "node": "Split Out",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Credentials you'll need

Each integration node will prompt for credentials when you import. We strip credential IDs before publishing — you'll add your own.

Pro

For the full experience including quality scoring and batch install features for each workflow upgrade to Pro

About this workflow

This n8n workflow automatically monitors RSS feeds for the latest AI vulnerability news, extracts key threat details, and creates a corresponding Security Incident in ServiceNow for each item.

Source: https://n8n.io/workflows/7225/ — original creator credit. Request a take-down →

More AI & RAG workflows → · Browse all categories →

Related workflows

Workflows that share integrations, category, or trigger type with this one. All free to copy and import.

AI & RAG

This n8n workflow automatically fetches the latest CVE data at scheduled intervals, extracts relevant security details, and creates a corresponding Security Incident in ServiceNow for each new vulnera

OpenAI Chat, Information Extractor, HTTP Request +1
AI & RAG

Deduplicate Scraping Ai Grants For Eligibility Using Ai. Uses splitOut, httpRequest, lmChatOpenAi, informationExtractor. Scheduled trigger; 24 nodes.

HTTP Request, OpenAI Chat, Information Extractor +2
AI & RAG

This n8n template scrapes a list of AI grants from grants.gov and qualifies them using AI; determining interest and eligibility for the business. It then sends an email alert of interesting items to t

HTTP Request, OpenAI Chat, Information Extractor +2
AI & RAG

Overview

Google Calendar, Gmail, Google Drive +3
AI & RAG

Sign up for Decodo — get better pricing here

@Decodo/N8N Nodes Decodo, Information Extractor, OpenAI Chat +4