Check n8n webhooks and forms for missing authentication

Created by

Mediocre_Interest

Actor

n8n Workflow Auditor - Linter & Security Review

Find Webhook nodes that accept requests from anyone who learns the URL, with no authentication set and no IF, Switch, Filter or Code node wired directly after them to reject unknown callers. Also flags Form Trigger input that flows into an n8n expression downstream, which is the workflow shape CVE-2026-27493 exploits. One row per exposed entry point, each with the fix.

Try for free

n8n Workflow Auditor - Linter & Security Reviewmediocre_interest/n8n-workflow-auditor

Severity

Rule ID

Rule

Input

Workflow JSON:{4 fields}

Rule set:security

Minimum severity:low

Output fields

Severity

Rule ID

Rule

How it works

Sign up on Apify or log in

The n8n Workflow Auditor - Linter & Security Review Actor is ready to run with the inputs already set for "Check n8n webhooks and forms for missing authentication". Sign up or log in and you'll land in Apify Console with a copy of this exact task.

Start the "Check n8n webhooks and forms for missing authentication" task

The n8n Workflow Auditor - Linter & Security Review Actor will start running based on the input automatically. You can also change all the input fields, like workflow json, rule set, and more, to match your specific use case.

Receive the "Check n8n webhooks and forms for missing authentication" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as severity, rule id, rule, and more.