Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 172.217.208.121:443 · api.autopulsecrm.com
2026-01-09 18:54
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: 5869dabb4083e82009ceca63d5b653d3 date: Fri, 09 Jan 2026 18:54:45 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 142.250.186.179:443 · uat.api.autopulsecrm.com
2026-01-09 14:08
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: 594cd156ae4a67de34b78426d34cdb71 date: Fri, 09 Jan 2026 14:08:29 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 142.250.186.179:443 · uat.api.autopulsecrm.com
2026-01-02 13:30
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: d82f543e10e7e124912ed33290965297 date: Fri, 02 Jan 2026 13:30:48 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 172.217.208.121:443 · api.autopulsecrm.com
2026-01-02 04:19
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: 6ccb803861b77c31f573aae64e298316 date: Fri, 02 Jan 2026 04:19:51 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 142.250.186.179:443 · uat.api.autopulsecrm.com
2025-12-30 12:44
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: 68881ef16bc3ae8c855e8946ae11a77f date: Tue, 30 Dec 2025 12:44:25 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 172.217.208.121:443 · api.autopulsecrm.com
2025-12-30 08:53
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: d75f4b9c78a6eeea5abd6487d689d6c5 date: Tue, 30 Dec 2025 08:54:00 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 172.217.208.121:443 · api.autopulsecrm.com
2025-12-22 08:05
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: 11d65b9325b8a93eba14125db298c15b date: Mon, 22 Dec 2025 08:05:01 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 172.217.208.121:443 · api.autopulsecrm.com
2025-12-20 09:12
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: eb7dab910f42bdbd163baacf2b3b9c25 date: Sat, 20 Dec 2025 09:12:55 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 142.250.186.179:443 · uat.api.autopulsecrm.com
2025-12-20 07:07
HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 x-cloud-trace-context: 27151da075d4cc1c3949250ac65aff97 date: Sat, 20 Dec 2025 07:07:24 GMT server: Google Frontend Content-Length: 139 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>