Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354959d9159715bf70f558a9ff3abf91808abf91808a
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/About/Version POST /v1/InitialForms POST /v1/InitialIntranets POST /v1/InitialOrchard
Open service 20.105.224.45:80 · connector.dev.workai.cloud
2026-01-25 00:04
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 25 Jan 2026 00:04:44 GMT Location: https://connector.dev.workai.cloud/
Open service 20.105.224.45:443 · connector.dev.workai.cloud
2026-01-25 00:04
HTTP/1.1 200 OK Connection: close Content-Type: text/plain; charset=utf-8 Date: Sun, 25 Jan 2026 00:04:44 GMT Set-Cookie: ARRAffinity=7c0ad06e1c835a252f9f32a3672697ba0adca168f36d431db67d6b7910fea2b9;Path=/;HttpOnly;Secure;Domain=connector.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=7c0ad06e1c835a252f9f32a3672697ba0adca168f36d431db67d6b7910fea2b9;Path=/;HttpOnly;SameSite=None;Secure;Domain=connector.dev.workai.cloud Transfer-Encoding: chunked Strict-Transport-Security: max-age=2592000 x-trace-id: d0c31e8694006082b0007678461b5aea healthy
Open service 20.105.224.45:443 · connector.dev.workai.cloud
2026-01-23 09:29
HTTP/1.1 200 OK Connection: close Content-Type: text/plain; charset=utf-8 Date: Fri, 23 Jan 2026 09:30:21 GMT Set-Cookie: ARRAffinity=ffbca59b025949de884b4d868d5979b22329f43e038fd0828f4548a11a1dec35;Path=/;HttpOnly;Secure;Domain=connector.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=ffbca59b025949de884b4d868d5979b22329f43e038fd0828f4548a11a1dec35;Path=/;HttpOnly;SameSite=None;Secure;Domain=connector.dev.workai.cloud Transfer-Encoding: chunked Strict-Transport-Security: max-age=2592000 x-trace-id: fbe534078955eb5813663768aafe2b4d healthy
Open service 20.105.224.45:443 · connector.dev.workai.cloud
2026-01-09 18:23
HTTP/1.1 200 OK Connection: close Content-Type: text/plain; charset=utf-8 Date: Fri, 09 Jan 2026 18:24:04 GMT Set-Cookie: ARRAffinity=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;Secure;Domain=connector.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;SameSite=None;Secure;Domain=connector.dev.workai.cloud Transfer-Encoding: chunked Strict-Transport-Security: max-age=2592000 x-trace-id: 963c8898c94b47902726ebf29de098fb healthy
Open service 20.105.224.45:443 · connector.dev.workai.cloud
2026-01-02 22:06
HTTP/1.1 200 OK Connection: close Content-Type: text/plain; charset=utf-8 Date: Fri, 02 Jan 2026 22:06:01 GMT Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=connector.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=connector.dev.workai.cloud Transfer-Encoding: chunked Strict-Transport-Security: max-age=2592000 x-trace-id: b7fccfafde50af1de264e6e19e6d04d6 healthy
Open service 20.105.224.45:443 · connector.dev.workai.cloud
2025-12-23 04:03
HTTP/1.1 200 OK Connection: close Content-Type: text/plain; charset=utf-8 Date: Tue, 23 Dec 2025 04:03:50 GMT Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=connector.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=connector.dev.workai.cloud Transfer-Encoding: chunked Strict-Transport-Security: max-age=2592000 x-trace-id: 911bb44274a20048e8ada94ad2aa52a1 healthy