Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
Public Swagger UI/API detected at path: /swagger-ui.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
Public Swagger UI/API detected at path: /swagger-ui.html
Open service 13.248.131.213:80 · api.dev.employeedomain.com
2026-01-09 18:30
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Fri, 09 Jan 2026 18:31:23 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=u%2FpZdx%2F85nmuyif%2F38HgOjN%2BQU2lSvLNLxMaQhSljKI%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767983483"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=u%2FpZdx%2F85nmuyif%2F38HgOjN%2BQU2lSvLNLxMaQhSljKI%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767983483"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:13431
Content-Length: 104
Connection: close
{"timestamp":1767983483158,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 3.33.161.45:443 · api.dev.employeedomain.com
2026-01-08 23:39
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Thu, 08 Jan 2026 23:39:39 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=igxZ%2BVmgmd%2BjQyahYCk3z2%2BIwgyRVrchvGTVlihpM2A%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767915579"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=igxZ%2BVmgmd%2BjQyahYCk3z2%2BIwgyRVrchvGTVlihpM2A%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767915579"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:13568
Content-Length: 104
Connection: close
{"timestamp":1767915579383,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 13.248.131.213:80 · api.dev.employeedomain.com
2026-01-02 06:35
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Fri, 02 Jan 2026 06:35:41 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=bXsIXrpnmbHV7AzK03GnEcG3P7CLvT7mEjfbApjBFD0%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767335741"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=bXsIXrpnmbHV7AzK03GnEcG3P7CLvT7mEjfbApjBFD0%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767335741"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:14450
Content-Length: 104
Connection: close
{"timestamp":1767335741839,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 3.33.161.45:443 · api.dev.employeedomain.com
2026-01-01 22:00
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Thu, 01 Jan 2026 22:00:20 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=nJy%2B%2FucSpBxH5h3hbYbseb%2F2ouvZTdnYyOZrinbGT1g%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767304821"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=nJy%2B%2FucSpBxH5h3hbYbseb%2F2ouvZTdnYyOZrinbGT1g%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767304821"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:34672
Content-Length: 104
Connection: close
{"timestamp":1767304821283,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 13.248.131.213:80 · api.dev.employeedomain.com
2025-12-30 11:23
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Tue, 30 Dec 2025 11:23:09 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lehbZd9P6KjPRqteo%2BUdrhNzbWU9iYueT8fbhiKP4vM%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767093789"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lehbZd9P6KjPRqteo%2BUdrhNzbWU9iYueT8fbhiKP4vM%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767093789"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:3847
Content-Length: 104
Connection: close
{"timestamp":1767093789308,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 3.33.161.45:443 · api.dev.employeedomain.com
2025-12-30 06:34
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Tue, 30 Dec 2025 06:34:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pi7Nie56Qj7Al%2FRzE4NZmx%2BBfVKcy68O%2B8aExvQ23Hs%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767076480"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pi7Nie56Qj7Al%2FRzE4NZmx%2BBfVKcy68O%2B8aExvQ23Hs%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767076480"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:3847
Content-Length: 104
Connection: close
{"timestamp":1767076480397,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 3.33.161.45:443 · api.dev.employeedomain.com
2025-12-22 14:38
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Mon, 22 Dec 2025 14:38:10 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LRVxWkmvdsU3jwZh9G5drqBbbbJkx6pYbBBs%2FeM%2BZ%2B8%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766414291"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LRVxWkmvdsU3jwZh9G5drqBbbbJkx6pYbBBs%2FeM%2BZ%2B8%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766414291"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:47894
Content-Length: 104
Connection: close
{"timestamp":1766414291614,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 13.248.131.213:80 · api.dev.employeedomain.com
2025-12-22 12:30
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Mon, 22 Dec 2025 12:30:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=K8kU%2F0jjBbZj5MFORNImWHOuemVBL2I6hD5PZKPMDNw%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766406645"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=K8kU%2F0jjBbZj5MFORNImWHOuemVBL2I6hD5PZKPMDNw%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766406645"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:47894
Content-Length: 104
Connection: close
{"timestamp":1766406645535,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 3.33.161.45:443 · api.dev.employeedomain.com
2025-12-20 13:13
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Sat, 20 Dec 2025 13:13:11 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ph6eTgh0Yu1H6XxPQJqllmSIeXIYaoj%2B0bk4EDj315k%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766236391"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ph6eTgh0Yu1H6XxPQJqllmSIeXIYaoj%2B0bk4EDj315k%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766236391"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:46081
Content-Length: 104
Connection: close
{"timestamp":1766236391824,"status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 13.248.131.213:80 · api.dev.employeedomain.com
2025-12-20 09:55
HTTP/1.1 404 Not Found
Content-Type: application/json;charset=UTF-8
Date: Sat, 20 Dec 2025 09:56:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=048nvBdGyykarQefPXxADM3gXKaOx3dzKgDwv3JuZnA%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766224560"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=048nvBdGyykarQefPXxADM3gXKaOx3dzKgDwv3JuZnA%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766224560"
Server: Heroku
Via: 1.1 heroku-router
X-Application-Context: api-gateway:staging:46081
Content-Length: 104
Connection: close
{"timestamp":1766224560464,"status":404,"error":"Not Found","message":"No message available","path":"/"}