We just shipped a new n8n template: automated credential-risk checks on employee offboarding.
Most offboarding checklists stop at “disable the account.” This template catches something checklists usually miss: whether the departing employee’s credentials were already compromised before they left, for example, a breach, a stealer-log hit, or an exposed OAuth token that could keep working after their account is disabled.
How it works: (1) Your HR system POSTs to a webhook when someone’s offboarded (2) Three parallel RelayShield checks run: breach exposure, infostealer log detection, and OAuth/API token exposure (3) If anything’s found, it posts to Slack, emails the departing employee’s manager with a summary, and logs the finding to Notion for audit (4) Clean results get logged too, so every offboarding is auditable either way
Live template: Check offboarding credential risks with RelayShield, Slack, Notion and Gmail | n8n workflow template
Happy to answer questions on the RelayShield side if anyone’s adapting it.