The 15 n8n security checks Black Cat runs

Black Cat SSPM evaluates 15 security policies against your n8n configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect n8n — what access Black Cat needs, and why.

• Access control & privilege

  3 checks · highest severity: high

• Data sharing & exposure

  3 checks · highest severity: high

• AI governance

  5 checks · highest severity: high

• Lifecycle & offboarding

  4 checks · highest severity: high

Access control & privilege (3)

• n8n Workflow Agent Excessive Credentials  · severity: medium
• n8n Workflow Agent Sensitive Credential  · severity: high
• n8n Workflow Agent HTTP Request Node  · severity: medium

Data sharing & exposure (3)

• n8n Workflow Agent Database Access  · severity: medium
• n8n Workflow Agent File Access  · severity: medium
• n8n Workflow Agent Code Execution  · severity: high

AI governance (5)

• n8n Workflow Agent No Error Handling  · severity: medium
• n8n Workflow Agent Webhook Trigger  · severity: high
• n8n Workflow Agent Schedule Trigger  · severity: medium
• n8n Workflow Agent Multi AI Model  · severity: low
• n8n Workflow Agent High Risk Unblocked  · severity: high

Lifecycle & offboarding (4)

• n8n Workflow Agent Stale  · severity: low
• n8n Workflow Agent Active Never Executed  · severity: medium
• n8n Workflow Agent Inactive Webhook  · severity: medium
• n8n Workflow Agent Orphaned Owner  · severity: high