Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff437f67d4527f67d4527f67d4527f67d4527f67d452
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/user/{id}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff437f67d4527f67d4527f67d4527f67d4527f67d452
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/user/{id}
Open service 75.2.97.79:80 · api.newvertical.tech
2026-01-09 12:48
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 12:49:59 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ARk2KFTUS%2BgXefvPFR3AjphZEJrHZWOyeGORLsuLnXQ%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767962999"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ARk2KFTUS%2BgXefvPFR3AjphZEJrHZWOyeGORLsuLnXQ%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767962999"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:443 · api.newvertical.tech
2026-01-09 08:04
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 08:04:33 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=l6GZA3X7Vt3zdbvIceR1%2BwvUqnLOwzdaYTzPIZGxiJA%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767945873"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=l6GZA3X7Vt3zdbvIceR1%2BwvUqnLOwzdaYTzPIZGxiJA%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767945873"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:443 · api.newvertical.tech
2026-01-02 12:49
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 12:49:38 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tmb3TtW9TLN6vsRJNNYes8uOna%2FCzCm4OCB%2FGvdoJuw%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767358178"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tmb3TtW9TLN6vsRJNNYes8uOna%2FCzCm4OCB%2FGvdoJuw%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767358178"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 75.2.97.79:80 · api.newvertical.tech
2026-01-02 01:42
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 01:42:17 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hAyRqHmoI3d1F84OywLtsjYcst9jAbC%2BXR5%2BYjKklAE%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767318137"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hAyRqHmoI3d1F84OywLtsjYcst9jAbC%2BXR5%2BYjKklAE%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767318137"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 75.2.97.79:80 · api.newvertical.tech
2025-12-30 12:30
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 12:30:23 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zYZGRdZsZH4ATCuXcaZqiq4qNmjJH70J2PfmUSs%2BFFU%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767097823"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zYZGRdZsZH4ATCuXcaZqiq4qNmjJH70J2PfmUSs%2BFFU%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767097823"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:443 · api.newvertical.tech
2025-12-30 11:04
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 11:04:01 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=P1lpeFP%2FXDZf0hZn0ReZghomE2R1QDL8YhnCR3cErWs%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767092641"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=P1lpeFP%2FXDZf0hZn0ReZghomE2R1QDL8YhnCR3cErWs%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767092641"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 75.2.97.79:443 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:51:59 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2B6%2Bmvq6d%2FM%2F3yppAAw9%2BlpqBYqH0emrkqxyEE6hjhxI%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537519"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2B6%2Bmvq6d%2FM%2F3yppAAw9%2BlpqBYqH0emrkqxyEE6hjhxI%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537519"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 75.2.97.79:80 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:52:02 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8JhfVZtu1TjVqFNtzge6fHaQBb7596ingUqiDgCgXmU%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537522"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8JhfVZtu1TjVqFNtzge6fHaQBb7596ingUqiDgCgXmU%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537522"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 13.248.132.87:80 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:52:01 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=O2QNpmYDZMt1R9GA7nidemlNeWUoQu%2FhM%2FklalCZ6ss%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537521"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=O2QNpmYDZMt1R9GA7nidemlNeWUoQu%2FhM%2FklalCZ6ss%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537521"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 35.71.145.101:443 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:51:58 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=n4LeyHWYopuYTDPokqxjS34KkM6KHvWU%2B%2FvGnN2C1wc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537518"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=n4LeyHWYopuYTDPokqxjS34KkM6KHvWU%2B%2FvGnN2C1wc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537518"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:443 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:51:58 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=n4LeyHWYopuYTDPokqxjS34KkM6KHvWU%2B%2FvGnN2C1wc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537518"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=n4LeyHWYopuYTDPokqxjS34KkM6KHvWU%2B%2FvGnN2C1wc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537518"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 13.248.132.87:443 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:51:58 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=n4LeyHWYopuYTDPokqxjS34KkM6KHvWU%2B%2FvGnN2C1wc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537518"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=n4LeyHWYopuYTDPokqxjS34KkM6KHvWU%2B%2FvGnN2C1wc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537518"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:80 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:52:01 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=O2QNpmYDZMt1R9GA7nidemlNeWUoQu%2FhM%2FklalCZ6ss%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537521"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=O2QNpmYDZMt1R9GA7nidemlNeWUoQu%2FhM%2FklalCZ6ss%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537521"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 35.71.145.101:80 · api.newvertical.tech
2025-12-24 00:51
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Wed, 24 Dec 2025 00:52:01 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=O2QNpmYDZMt1R9GA7nidemlNeWUoQu%2FhM%2FklalCZ6ss%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766537521"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=O2QNpmYDZMt1R9GA7nidemlNeWUoQu%2FhM%2FklalCZ6ss%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766537521"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:443 · api.newvertical.tech
2025-12-22 11:11
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 11:11:37 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9Wnk8IOxSH4Zto2AQ1YZJug23RXZN%2FIv5r5umslebLI%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766401897"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9Wnk8IOxSH4Zto2AQ1YZJug23RXZN%2FIv5r5umslebLI%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766401897"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 75.2.97.79:80 · api.newvertical.tech
2025-12-22 08:12
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 08:12:24 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DBApIR39Ol8Q6NATBu1f81CacyUgAyvOYNpuF2Zt6g4%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766391144"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DBApIR39Ol8Q6NATBu1f81CacyUgAyvOYNpuF2Zt6g4%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766391144"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 99.83.151.71:443 · api.newvertical.tech
2025-12-21 04:46
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 04:46:37 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=j6AOXK48Z64TEN%2FNG5EKv2u%2Fu0NGixn%2F1XM2f63RZ%2BI%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766292397"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=j6AOXK48Z64TEN%2FNG5EKv2u%2Fu0NGixn%2F1XM2f63RZ%2BI%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766292397"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.
Open service 75.2.97.79:80 · api.newvertical.tech
2025-12-20 05:48
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 20
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 05:48:55 GMT
Etag: W/"14-dkZMFhGulSVOLJujCk4NplmzdD4"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MkQVXHzNMhRjdHRdB2V5wCNv5r2Lmpz9w0o4ZJ829dU%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766209735"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MkQVXHzNMhRjdHRdB2V5wCNv5r2Lmpz9w0o4ZJ829dU%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766209735"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Successful response.