Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549943886fb5d2575876d408e04ec99b7e241f025ed
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/assets/{assetId}/archived
DELETE /v1/hierarchies/{hierarchyId}/groups/{groupId}
DELETE /v1/hierarchies/{id}
DELETE /v1/notifications/{id}
DELETE /v1/user-groups/{groupId}/members/{userId}
DELETE /v1/user-groups/{id}
DELETE /v1/web-sources/{id}
GET /v1/2fa/setup
GET /v1/analytics/assets/most-favorited
GET /v1/analytics/assets/most-viewed
GET /v1/analytics/storage/stats
GET /v1/analytics/tags/most-used
GET /v1/assets
GET /v1/assets/archived
GET /v1/assets/breadcrumb
GET /v1/assets/extracted
GET /v1/assets/file-types
GET /v1/assets/folders
GET /v1/assets/folders/byrole
GET /v1/assets/recents
GET /v1/assets/search
GET /v1/assets/tags
GET /v1/assets/{id}/type/{blobUrlType}
GET /v1/companies
GET /v1/companies/invites
GET /v1/companies/invites/{token}
GET /v1/companies/logo
GET /v1/companies/usage
GET /v1/companies/{companyId}/details
GET /v1/dashboard/assets/most-favorited
GET /v1/dashboard/assets/most-viewed
GET /v1/dashboard/storage/stats
GET /v1/dashboard/tags/most-used
GET /v1/favorites
GET /v1/google-drive
GET /v1/google-drive/auth-url
GET /v1/google-drive/callback
GET /v1/health-check
GET /v1/hierarchies/search
GET /v1/hierarchies/{hierarchyId}/details
GET /v1/notifications
GET /v1/onedrive
GET /v1/onedrive/auth-url
GET /v1/onedrive/callback
GET /v1/search-history
GET /v1/share-links
GET /v1/share-links/assets/{assetId}
GET /v1/share-links/{shareId}/preview
GET /v1/staged-files
GET /v1/subscription-plans
GET /v1/tags
GET /v1/usage-report
GET /v1/user-groups/search
GET /v1/user-groups/{UserId}/groups
GET /v1/user-groups/{groupId}/folders
GET /v1/user-groups/{groupId}/members
GET /v1/user-groups/{groupId}/members/all
GET /v1/users
GET /v1/users/invites
GET /v1/users/invites/{token}
GET /v1/users/my-profile
GET /v1/users/preferences
GET /v1/web-sources
POST /v1/2fa/login/verify
POST /v1/2fa/toggle
POST /v1/2fa/verify
POST /v1/ai/documents/chat
POST /v1/ai/documents/{assetId}/summary
POST /v1/assets/archive-status
POST /v1/assets/download/bulk
POST /v1/assets/file
POST /v1/assets/folder
POST /v1/companies/invite
POST /v1/companies/register
POST /v1/google-drive/refresh-token
POST /v1/hierarchies
POST /v1/hierarchies/{hierarchyId}/folders
POST /v1/hierarchies/{hierarchyId}/groups
POST /v1/user-groups
POST /v1/user-groups/{groupId}/folders/access
POST /v1/user-groups/{userId}/groups
POST /v1/users/change-password
POST /v1/users/invite
POST /v1/users/login
POST /v1/users/password/generate
POST /v1/users/register
POST /v1/users/reset-password
POST /v1/users/reset-password-request
POST /v1/users/switch-company
POST /v1/users/{userId}/active-status
POST /v1/web-sources/extract
PUT /v1/assets/move
PUT /v1/assets/rename
PUT /v1/companies/brand-color
PUT /v1/companies/rename
PUT /v1/elasticsearch/reindex
PUT /v1/notifications/read-all
PUT /v1/notifications/{id}/read
PUT /v1/recents
PUT /v1/staged-files/{id}/process
PUT /v1/tags/assign
PUT /v1/usage-report/{userId}
PUT /v1/users/{inviteId}/toggle
PUT /v1/users/{userId}
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549943886fb1599cfef1c908991e53c34170d74c99b
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/assets/{assetId}/archived
DELETE /v1/notifications/{id}
DELETE /v1/user-groups/{groupId}/members/{userId}
DELETE /v1/user-groups/{id}
GET /v1/2fa/setup
GET /v1/analytics/assets/most-favorited
GET /v1/analytics/assets/most-viewed
GET /v1/analytics/storage/stats
GET /v1/analytics/tags/most-used
GET /v1/assets
GET /v1/assets/archived
GET /v1/assets/breadcrumb
GET /v1/assets/extracted
GET /v1/assets/file-types
GET /v1/assets/folders
GET /v1/assets/folders/byrole
GET /v1/assets/recents
GET /v1/assets/search
GET /v1/assets/tags
GET /v1/assets/{id}/type/{blobUrlType}
GET /v1/companies
GET /v1/companies/invites
GET /v1/companies/invites/{token}
GET /v1/companies/logo
GET /v1/companies/usage
GET /v1/dashboard/assets/most-favorited
GET /v1/dashboard/assets/most-viewed
GET /v1/dashboard/storage/stats
GET /v1/dashboard/tags/most-used
GET /v1/favorites
GET /v1/google-drive
GET /v1/google-drive/auth-url
GET /v1/google-drive/callback
GET /v1/health-check
GET /v1/notifications
GET /v1/onedrive
GET /v1/onedrive/auth-url
GET /v1/onedrive/callback
GET /v1/search-history
GET /v1/share-links
GET /v1/share-links/assets/{assetId}
GET /v1/share-links/{shareId}/preview
GET /v1/staged-files
GET /v1/subscription-plans
GET /v1/tags
GET /v1/user-groups/search
GET /v1/user-groups/{UserId}/groups
GET /v1/user-groups/{groupId}/folders
GET /v1/user-groups/{groupId}/members
GET /v1/user-groups/{groupId}/members/all
GET /v1/users
GET /v1/users/invites
GET /v1/users/invites/{token}
GET /v1/users/my-profile
GET /v1/users/preferences
POST /v1/2fa/login/verify
POST /v1/2fa/toggle
POST /v1/2fa/verify
POST /v1/ai/documents/chat
POST /v1/ai/documents/{assetId}/summary
POST /v1/assets/archive-status
POST /v1/assets/download/bulk
POST /v1/assets/file
POST /v1/assets/folder
POST /v1/companies/invite
POST /v1/companies/register
POST /v1/google-drive/refresh-token
POST /v1/user-groups
POST /v1/user-groups/{groupId}/folders/access
POST /v1/user-groups/{userId}/groups
POST /v1/users/change-password
POST /v1/users/invite
POST /v1/users/login
POST /v1/users/password/generate
POST /v1/users/register
POST /v1/users/reset-password
POST /v1/users/reset-password-request
POST /v1/users/switch-company
POST /v1/users/{userId}/active-status
PUT /v1/assets/move
PUT /v1/assets/rename
PUT /v1/companies/brand-color
PUT /v1/companies/rename
PUT /v1/elasticsearch/reindex
PUT /v1/notifications/read-all
PUT /v1/notifications/{id}/read
PUT /v1/recents
PUT /v1/staged-files/{id}/process
PUT /v1/tags/assign
PUT /v1/users/{inviteId}/toggle
PUT /v1/users/{userId}
Open service 13.69.68.21:443 · dev.api.visiarassist.ai
2026-01-23 01:37
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 01:37:55 GMT Server: Kestrel
Open service 13.69.68.21:443 · dev.api.visiarassist.ai
2026-01-11 19:02
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 19:03:28 GMT Server: Kestrel
Open service 13.69.68.21:80 · dev.api.visiarassist.ai
2026-01-11 19:02
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 19:03:28 GMT Location: https://dev.api.visiarassist.ai/