Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 13.35.58.29:443 · api.actingconnects.com
2026-01-09 04:45
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Date: Fri, 09 Jan 2026 04:45:50 GMT X-Cache: Error from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: qc01GWSzzZz6qOz8lgPl3LYIbCjPT7x8EILT1YlNHTVmLlGmMKYgNQ== Age: 2 Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 13.35.58.29:443 · api.actingconnects.com
2026-01-02 10:20
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Date: Fri, 02 Jan 2026 10:20:49 GMT X-Cache: Error from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 381_eJ51MKzajhzBtr_hkAJkA0kz-6kXuOMO0zyVESPK6yBwE4VylQ== Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 13.35.58.29:443 · api.actingconnects.com
2025-12-22 21:40
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Date: Mon, 22 Dec 2025 21:40:40 GMT X-Cache: Error from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: QJZRTuE_AQdUR_jiT7agyFNZL6dcHuKDJ4g6L7IrvmViGCCUQJK0KQ== Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 13.35.58.29:443 · api.actingconnects.com
2025-12-20 23:36
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Date: Sat, 20 Dec 2025 23:36:41 GMT X-Cache: Error from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mQpA4zj1B0bXfc_9oJGX0JQ5AhoAxrsNa5RcYoDywobGPs2MwQKOVg== Age: 1 Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 13.35.58.29:443 · api.actingconnects.com
2025-12-19 00:27
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Date: Fri, 19 Dec 2025 00:27:23 GMT X-Cache: Error from cloudfront Via: 1.1 50d1552804e5c5074606d2b5a0eb8ef8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: qejnSzUgZ4q63TsvvYJDFfMurS5JHslYvCCMxeCdyvYCEn4rqhFp-g== Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>