AI Phishing Detection Agent for Jira

Instantly Fortify Your Inbox with this AI Agent

This workflow acts as an automated security analyst, safeguarding your organization from email-based threats. When a suspicious email is received in a monitored inbox (Gmail or Outlook), this agent springs into action. It leverages the power of OpenAI's GPT-4o to perform a deep analysis of the email's content, headers, and structure to determine if it's a phishing attempt. The agent then creates a comprehensive ticket in Jira, attaching both a text file of the email body and a visual screenshot for complete context. This frees up your security team to focus on confirmed threats rather than initial triage.

Key Features & Benefits

• AI-Powered Threat Analysis: Utilizes GPT-4o to accurately identify phishing indicators in email content and headers.
• Automated Incident Reporting: Automatically creates detailed tickets in Jira for every analyzed email, distinguishing between potentially malicious and benign reports.
• Rich Evidence Gathering: Attaches both the raw email text and a visual screenshot to each Jira ticket, providing your security team with all necessary context.
• Multi-Provider Support: Includes triggers for both Gmail and Microsoft Outlook to fit your company's email infrastructure.
• Streamlined Security Operations: Eliminates manual email analysis and ticket creation, ensuring a fast, consistent, and documented response to potential threats.

• An n8n instance (Cloud or self-hosted).
• OpenAI API Key with access to a GPT-4 model (e.g., gpt-4o).
• Jira Cloud credentials (API Token).
• Credentials for your email account (Gmail or Outlook OAuth).
• API credentials for HTML/CSS to Image (hcti.io) for the screenshot functionality.

1. Download the n8n workflow JSON file.
2. Import the workflow into your n8n instance.
3. Configure your preferred email trigger: either the 'Gmail Trigger' or enable and configure the 'Microsoft Outlook Trigger' node with your credentials.
4. In the 'Analyze Email with ChatGPT' node, select your OpenAI API Key.
5. In both 'Screenshot HTML' and 'Retrieve Screenshot' nodes, configure the Basic Auth credentials with your hcti.io API details.
6. In the 'Create Potentially Malicious Ticket' and 'Create Potentially Benign Ticket' nodes, configure your Jira credentials and select the correct Project and Issue Type for your instance.
7. Ensure all other Jira nodes ('Upload Screenshot' and 'Upload Email Body') are also configured with the same Jira credentials.
8. Activate the workflow.