Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 35.71.179.82:80 · api.pilonixai.com
2026-01-09 14:37
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 14:39:03 GMT
Etag: W/"81-No6fpi6LqUVvY9uCgXe62MgPe1U"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=HFJLZxqw7Z3Pd4RalTvuVYMizVc912rJfQUsUGtlmwU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767969543"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=HFJLZxqw7Z3Pd4RalTvuVYMizVc912rJfQUsUGtlmwU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767969543"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: eb9f992a-e3a0-4379-a09b-ff6d97a886d0
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"eb9f992a-e3a0-4379-a09b-ff6d97a886d0"}}
Open service 75.2.60.68:443 · api.pilonixai.com
2026-01-08 23:21
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Thu, 08 Jan 2026 23:21:09 GMT
Etag: W/"81-ACtwsw9FmKe4f0BEjMGMgsZF/kA"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TNm%2FIJNpSx4Y2%2FX6Rdj4q1h%2B5m7eGhCJNuOScoAo%2FHk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767914469"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TNm%2FIJNpSx4Y2%2FX6Rdj4q1h%2B5m7eGhCJNuOScoAo%2FHk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767914469"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: d2fe5dab-36dd-4439-8ff2-8c204ad2146b
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"d2fe5dab-36dd-4439-8ff2-8c204ad2146b"}}
Open service 35.71.179.82:80 · api.pilonixai.com
2026-01-02 18:46
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 18:46:05 GMT
Etag: W/"81-TFD/EA+cAp1+YgYf5OFA3HShhtk"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LBkRxiTueFcfCLGdX%2Bs8i2wJmIRjboi2%2BfgWOHhOSFI%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767379565"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LBkRxiTueFcfCLGdX%2Bs8i2wJmIRjboi2%2BfgWOHhOSFI%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767379565"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: 03b13039-212f-4e1b-bacb-c30bdb76f72d
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"03b13039-212f-4e1b-bacb-c30bdb76f72d"}}
Open service 75.2.60.68:443 · api.pilonixai.com
2026-01-01 22:15
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Thu, 01 Jan 2026 22:15:39 GMT
Etag: W/"81-rF6tx6BIE/k1sqCZw+bZ3k0Gu8U"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=m5utGtyyvj0te820O24eqPBxfI63KNHtcpu9XB697YI%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767305739"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=m5utGtyyvj0te820O24eqPBxfI63KNHtcpu9XB697YI%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767305739"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: 78caa8da-6b19-4019-adaf-fe7aee9cc9ab
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"78caa8da-6b19-4019-adaf-fe7aee9cc9ab"}}
Open service 75.2.60.68:443 · api.pilonixai.com
2025-12-30 05:43
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Tue, 30 Dec 2025 05:44:09 GMT
Etag: W/"81-iBQHbONRSloncfJ5F2sovgn2rzo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Te5UkcPM0FvAqaGPTZ4J84sU6huKkgNkFG%2Bx%2FP%2B8XvM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767073448"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Te5UkcPM0FvAqaGPTZ4J84sU6huKkgNkFG%2Bx%2FP%2B8XvM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767073448"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: dae969ca-b940-4282-a541-b080dd08690f
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"dae969ca-b940-4282-a541-b080dd08690f"}}
Open service 35.71.179.82:80 · api.pilonixai.com
2025-12-22 15:31
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 15:31:15 GMT
Etag: W/"81-ksm8Yqu3oAHEuuMi6ay4dMQkAXc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DaYTXjuC4ffHiRaWarQPNl05Att8Kv3Bh1%2Fqx67rH0E%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766417475"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DaYTXjuC4ffHiRaWarQPNl05Att8Kv3Bh1%2Fqx67rH0E%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766417475"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: 36cfa729-1841-451e-8e25-2685c4e25d5c
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"36cfa729-1841-451e-8e25-2685c4e25d5c"}}
Open service 75.2.60.68:443 · api.pilonixai.com
2025-12-22 13:03
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 13:03:58 GMT
Etag: W/"81-uh3y4N+fCVrhDXfyw7Y3NZZUW0M"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kf%2BGcd%2BxWm%2FK1eBDizJ%2BYbxrm44QwCCzapO%2BTApCcR8%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766408638"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kf%2BGcd%2BxWm%2FK1eBDizJ%2BYbxrm44QwCCzapO%2BTApCcR8%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766408638"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: cac9739b-f6fc-4b03-b5bf-b8c1baed752e
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"cac9739b-f6fc-4b03-b5bf-b8c1baed752e"}}
Open service 35.71.179.82:80 · api.pilonixai.com
2025-12-20 16:43
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 16:43:43 GMT
Etag: W/"81-1jO1qwkDaMgRtC8w+AmgQdpbnf8"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rucO0nLlK0JlirLiUdf2Q73YyTZVHEroqmv4qX9kFCw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766249023"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rucO0nLlK0JlirLiUdf2Q73YyTZVHEroqmv4qX9kFCw%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766249023"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: 066f0c55-6bce-48fe-a8b0-249e122caa20
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"066f0c55-6bce-48fe-a8b0-249e122caa20"}}
Open service 75.2.60.68:443 · api.pilonixai.com
2025-12-20 09:21
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type,Authorization
Content-Length: 129
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 09:21:29 GMT
Etag: W/"81-4hB/p7nUntMkBuAe5q0FIuOZxl8"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FXQcONjyVPLjtDtE3S1fHL5oApJvKHwJq3EO7MMMomc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766222489"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FXQcONjyVPLjtDtE3S1fHL5oApJvKHwJq3EO7MMMomc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766222489"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
X-Request-Id: 4de851d3-95c6-4822-a467-40b2d71405ba
Connection: close
{"success":false,"error":{"message":"Route GET / not found","statusCode":404,"requestId":"4de851d3-95c6-4822-a467-40b2d71405ba"}}