Introducing attachmentAV for n8n: Malware Protection for Your Workflows

Automation platforms like n8n have quietly become part of the critical path for handling files. Customer uploads, email attachments, documents pulled from cloud storage—they all flow through your workflows on their way to somewhere important. And every one of those files is a potential entry point for malware.

After a preview phase earlier this year, we are excited to announce that attachmentAV for n8n is now generally available. It is a dedicated antivirus node that scans files for viruses, worms, trojans, and other malware right inside your n8n workflows—powered by the industry-leading Sophos engine.

The Problem: Automated Workflows Move Malware Fast

n8n is built to move data from A to B without a human in the loop. That is exactly what makes it powerful—and exactly what makes an unscanned file dangerous. When a malicious attachment enters a workflow, automation does what it does best: it spreads the threat efficiently across every connected system.

A single infected file flowing through an unprotected workflow can:

• Compromise sensitive customer data
• Spread malware to connected apps and storage
• Break downstream automations and cause costly downtime
• Undermine the trust and compliance your business depends on

Traditional antivirus tooling was never designed for this. You need protection that keeps pace with automation instead of slowing it down.

The Solution: attachmentAV for n8n

attachmentAV adds a scanning step wherever your workflow touches a file. Drop the node in after a download or upload, and every file is checked against continuously updated threat signatures before it moves on. Based on the verdict, you branch your workflow: pass clean files through, quarantine or delete infected ones, and alert your team when something is found.

Real-Time Malware Detection. Powered by Sophos, attachmentAV scans files within seconds—no bottlenecks, no waiting. Signatures are updated continuously, so you are protected against the latest threats, including zero-day malware patterns.

Built for n8n. attachmentAV is a native community node. There is no separate infrastructure to run and no complex configuration. Add the node, connect your credential, point it at the binary field you want to scan, and you are done.

Comprehensive Threat Coverage. attachmentAV scans all file types for viruses, worms, trojans, and other malware, giving you a reliable safety net across every workflow that handles files.

Enterprise-Grade Security. attachmentAV is ISO 27001 certified and GDPR compliant. Your data is encrypted in transit and at rest, and it is trusted by more than 1,000 customers.

Getting Started in Minutes

Adding malware protection to your workflows takes just a few clicks:

1. In n8n, go to Settings > Community Nodes and install the package @attachmentav/n8n-nodes-attachmentav.
2. Create a subscription to get your API key, then add a new credential for the attachmentAV API app.
3. In your workflow, add the Scan a File for Viruses/Malware node, select your credential, and set the Input Binary Field to the file you want to scan.
4. Use the scan result to decide how to handle clean and infected files.

The full walkthrough is in our setup guide.

Simple, Transparent Pricing

attachmentAV for n8n starts at just 9€/month for 1,000 scans, and every plan comes with a 14-day free trial. There is no infrastructure to manage and no maintenance on your side—just enable it and let it run. See the pricing page for details.

Powered by Sophos

Like every attachmentAV product, the n8n node is powered by the Sophos engine and is fully ISO 27001 certified and GDPR compliant, keeping your data secure and private throughout the scan.

Get Started

Ready to secure your n8n workflows?

• Follow the setup guide to install the node.
• Start your free trial and scan your first file today.

Happy (and safe) automating!