Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1d83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bf
Public Swagger UI/API detected at path: /swagger/swagger-ui.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1d83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bf
Public Swagger UI/API detected at path: /swagger/swagger-ui.html
Open service 35.71.179.82:443 · esample.staging.lightbeans.com
2026-01-09 10:14
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 10:14:21 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=0zvr36m5akYAf7lNKL6E0huBxPBcLW%2B2L0WhRufjZLw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767953661"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=0zvr36m5akYAf7lNKL6E0huBxPBcLW%2B2L0WhRufjZLw%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767953661"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 99.83.220.108:80 · esample.staging.lightbeans.com
2026-01-09 03:14
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 03:15:32 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J1uo57vgCY9Hvwg60hohPSXlFKtmSYNHZoielpOf3yU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767928532"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J1uo57vgCY9Hvwg60hohPSXlFKtmSYNHZoielpOf3yU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767928532"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 99.83.220.108:80 · esample.staging.lightbeans.com
2026-01-02 10:40
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 10:40:09 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=c7NjBeDHf1Xc4qbwdTRgsAKGF2c%2FS6o7xPh4rDBEUSk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767350409"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=c7NjBeDHf1Xc4qbwdTRgsAKGF2c%2FS6o7xPh4rDBEUSk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767350409"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 35.71.179.82:443 · esample.staging.lightbeans.com
2026-01-02 10:13
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 10:13:53 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=YkjrkoPbA%2BHz%2FpxtWmcS73eVeSabj3cKDiSvlfcIllo%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767348833"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=YkjrkoPbA%2BHz%2FpxtWmcS73eVeSabj3cKDiSvlfcIllo%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767348833"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 99.83.220.108:80 · esample.staging.lightbeans.com
2025-12-22 19:10
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 19:10:48 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=cuP7hF44vzihmvcJIU%2BUGCfws37YjQIgalm4MjV%2FQ3g%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766430648"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=cuP7hF44vzihmvcJIU%2BUGCfws37YjQIgalm4MjV%2FQ3g%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766430648"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 35.71.179.82:443 · esample.staging.lightbeans.com
2025-12-22 15:12
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 15:12:22 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=v6v7n%2BTc4UTKJBSwd%2F55f9jwFp511WJujoxXdG4Wnhg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766416342"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=v6v7n%2BTc4UTKJBSwd%2F55f9jwFp511WJujoxXdG4Wnhg%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766416342"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 99.83.220.108:80 · esample.staging.lightbeans.com
2025-12-20 20:39
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 20:39:20 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3TmdmPO%2BVX7jd2waTGkglPJR5NghKbg8e3IpFpSK%2Fos%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766263160"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3TmdmPO%2BVX7jd2waTGkglPJR5NghKbg8e3IpFpSK%2Fos%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766263160"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working
Open service 35.71.179.82:443 · esample.staging.lightbeans.com
2025-12-20 18:40
HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 18:40:01 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hwyRcLRtHbELl6%2FQn7snAjkKTlnbO905qL7dic4b5DM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766256001"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hwyRcLRtHbELl6%2FQn7snAjkKTlnbO905qL7dic4b5DM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766256001"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Viewer API is working