Scheduled vulnerability scans with LEV risk scoring and

This automation performs scheduled vulnerability assessments using Nessus, scores findings via LEV (Likelihood, Exposure, Vulnerability) logic, and generates reports for security teams. Ideal for organizations requiring compliance with NIST CSF, BOD 22-01, and KEV mandates.

## Who it´s for
- Security teams conducting regular vulnerability scans
- Auditors needing automated reports for NIST CSF and BOD 22-01 compliance
- DevSecOps engineers integrating security scanning into monitoring workflows
- Government organizations adhering to KEV and CISA requirements

## What the automation does
- Triggered on a schedule (cron)
- Authenticates to Nessus and initiates asset scanning
- Processes vulnerabilities using AI-based LEV risk scoring
- Triages findings by risk level, flagging critical CVEs
- Sends email alerts upon detection of high-risk vulnerabilities
- Generates a summary report and logs it in Google Sheets
- Logs authentication failures and system errors with sensitive data redaction

## What´s included
- Ready-to-use n8n workflow
- Predefined trigger and handler logic
- Integrations with Nessus API, Google Sheets API, and SMTP Email
- Basic text instructions for setup and adaptation

## Requirements for setup
- Active Nessus account with API access
- Google Sheets document for report logging
- SMTP server or email account for alert delivery
- Access to n8n (cloud or self-hosted instance)

## Benefits and outcomes
- Faster response to critical vulnerabilities through instant alerts
- Streamlined audit readiness and compliance with NIST, BOD 22-01, KEV
- Centralized vulnerability tracking in Google Sheets
- Reduced manual effort in daily scan analysis
- Transparent risk prioritization using LEV framework
- Automatic logging of scanner errors and auth issues

## Important: template only
Important: you are purchasing a ready-made automation workflow template only. Rollout into your infrastructure, connecting specific accounts and services, 1:1 setup help, custom adjustments for non-standard stacks and any consulting support are provided as a separate paid service at an individual rate. To discuss custom work or 1:1 help, contact via Telegram: @gleb923.