Free scan
See the size of the problem before you pay.
One census of one n8n instance, with totals and severities. It shows the size of the problem, not the map of it.
How it works
Four steps, about fifteen minutes of your time.
Ask with your work email
Use your corporate address. Free email domains and disposable addresses are not accepted. Your account uses multi-factor authentication from the first login.
Prove you control the instance
FlowCensus gives you a one-time code. You add it as a tag inside your n8n instance, and the scan starts only after we find it. A read-only key alone is not enough.
Connect read-only
Create a read-only n8n API key. We check that writing is denied and never write anything. The flow content stays in memory during the scan and is never stored.
Read the result on screen
The report is shown inside your account for 7 days, watermarked with your email and the date. No PDF, no export.
What the report shows
Enough to size the risk. Nothing an attacker could use.
A census of weaknesses is a target document, so the free report is deliberately redacted. Paid plans show every finding, its owner and how to fix it.
| Shows | Does not show |
|---|---|
| Total flows, active and inactive | Names of flows, nodes or credentials |
| How many flows touch personal data or external systems | Webhook addresses, URLs and hosts |
| Findings by severity and category | Evidence or excerpts from the flows |
| One example finding, with every name masked | Which flow has which finding, and how to fix it |
Fair use
One per company
One free scan per email domain and per instance.
Your domain only
When the instance runs on your company's domain, it must match your email domain.
Scan authorization
Before scanning, you accept the scan authorization terms; we record date, IP and email.
Ready when you are.
Self-service sign-up opens soon. Until then, send us a request and we set up your account within one business day.