n8n-security-testing

Credential scanning detects secrets embedded in workflow definitions by analyzing workflow JSON and execution logs. Run the scan to identify API keys, tokens, and passwords that may be exposed at rest or in transit, then rotate or encrypt them.

Encryption verification ensures sensitive data is encrypted at rest and validates OAuth token handling and rotation. The scan confirms credentials are properly encrypted and checks that tokens are managed securely within your n8n workflows.

Security testing covers credential exposure, encryption gaps, insecure OAuth flows, weak API key handling, and input sanitization failures. The scan identifies injection vectors and data leakage risks across workflow definitions and execution logs.

Input sanitization validation scans workflow nodes and authentication flows to detect injection vulnerabilities and data leakage. The test confirms that user inputs are validated and escaped before use in API calls or credential handling.

Yes. OAuth and token testing validates OAuth token rotation, secure transmission, and API key encryption within n8n workflows. The scan verifies that authentication flows follow security best practices and tokens are handled safely.