Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549d48037bfb5205f9efa335cf9c60dbd4f8e0da6fc
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Claims
GET /Version
GET /api/access/member
GET /api/access/member/{azureAdB2CId}
GET /api/answer-invitation/{token}
GET /api/me
GET /api/organizations
GET /api/organizations/{organizationId}
GET /api/organizations/{organizationId}/api-tokens
GET /api/organizations/{organizationId}/api-tokens/{apiTokenId}
GET /api/organizations/{organizationId}/invitations
GET /api/organizations/{organizationId}/members
GET /api/organizations/{organizationId}/sites
GET /api/organizations/{organizationId}/sites/{siteId}
GET /api/organizations/{organizationId}/sites/{siteId}/embarkedPersonnel
GET /api/organizations/{organizationId}/sites/{siteId}/nodes
GET /api/organizations/{organizationId}/sites/{siteId}/snapshots
GET /api/organizations/{organizationId}/sites/{siteId}/view
POST /api/organizations/{organizationId}/invitations/{invitationId}/resend
PUT /api/organizations/{organizationId}/invitations/{invitationId}
PUT /api/organizations/{organizationId}/members/{memberId}
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d607e6df0a058017ea949863cf224b3c346106ac203
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /Claims
GET /Version
GET /api/access/member
GET /api/access/member/{azureAdB2CId}
GET /api/answer-invitation/{token}
GET /api/me
GET /api/organizations
GET /api/organizations/{organizationId}
GET /api/organizations/{organizationId}/api-tokens
GET /api/organizations/{organizationId}/api-tokens/{apiTokenId}
GET /api/organizations/{organizationId}/invitations
GET /api/organizations/{organizationId}/members
GET /api/organizations/{organizationId}/sites
GET /api/organizations/{organizationId}/sites/{siteId}
GET /api/organizations/{organizationId}/sites/{siteId}/embarkedPersonnel
GET /api/organizations/{organizationId}/sites/{siteId}/nodes
GET /api/organizations/{organizationId}/sites/{siteId}/snapshots
GET /api/organizations/{organizationId}/sites/{siteId}/view
POST /api/organizations/{organizationId}/invitations/{invitationId}/resend
PUT /api/organizations/{organizationId}/invitations/{invitationId}
PUT /api/organizations/{organizationId}/members/{memberId}
Open service 20.50.2.7:443 ยท connectfleetapi.scanreach.com
2026-01-23 01:08
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 01:09:05 GMT Server: Kestrel x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:eb76845b-ac0b-46b9-b31b-a17162425fe6