Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549d878b032b2346c5c8ae1a1fcb39135515162a9a4
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /v1/cache/access/automation/{automationId}/{actionId}
GET /v1/cache/access/{applicationId}/{dataflowId}
GET /v1/cache/blacklisted-domains
GET /v1/cache/code-snippet/{codeSnippetId}
GET /v1/cache/tenant-settings/{orgShortCode}
GET /v1/cache/transaction-logs-mappings/{dataflowId}
GET /v1/cache/{applicationId}
GET /v1/cache/{applicationId}/{dataflowId}
GET /v1/status/{requestId}
GET /v1/webhook/lsq/{orgShortCode}/{providerId}/{connectorId}/{applicationId}/{dataflowId}
POST /v1/automation/{orgShortCode}/{providerId}/{connectorId}
POST /v1/cache/globalVariable/{applicationId}/{globalVariableId}
POST /v1/code-executor
POST /v1/decrypt/icKey/{orgShortCode}/{providerId}/{connectorId}
POST /v1/hl7/parse
POST /v1/retry/lsq/{orgShortCode}/{providerId}/{connectorId}/{applicationId}/{dataflowId}
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549d878b032b2346c5c8ae1a1fcb39135515ffac1e8
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /v1/cache/access/automation/{automationId}/{actionId}
GET /v1/cache/access/{applicationId}/{dataflowId}
GET /v1/cache/blacklisted-domains
GET /v1/cache/code-snippet/{codeSnippetId}
GET /v1/cache/tenant-settings/{orgShortCode}
GET /v1/cache/transaction-logs-mappings/{dataflowId}
GET /v1/cache/{applicationId}
GET /v1/cache/{applicationId}/{dataflowId}
GET /v1/status/{requestId}
GET /v1/webhook/lsq/{orgShortCode}/{providerId}/{connectorId}/{applicationId}/{dataflowId}
POST /v1/automation/{orgShortCode}/{providerId}/{connectorId}
POST /v1/cache/globalVariable/{applicationId}/{globalVariableId}
POST /v1/code-executor
POST /v1/decrypt/icKey/{orgShortCode}/{providerId}/{connectorId}
POST /v1/retry/lsq/{orgShortCode}/{providerId}/{connectorId}/{applicationId}/{dataflowId}
Open service 23.50.131.157:443 · integrationcloud-ca12.leadsquaredapps.com
2026-01-22 23:24
HTTP/1.1 404 Not Found Content-Length: 0 Cache-Control: max-age=0 Date: Thu, 22 Jan 2026 23:24:11 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=317 Server-Timing: origin; dur=25 Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.1d173317.1769124250.23a869f8 Server-Timing: ak_p; desc="1769124250830_389224221_598239736_34133_5568_0_116_-";dur=1
Open service 23.50.131.157:443 · integrationcloud-ca12.leadsquaredapps.com
2026-01-09 06:36
HTTP/1.1 404 Not Found Content-Length: 0 Cache-Control: max-age=0 Date: Fri, 09 Jan 2026 06:36:12 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=288 Server-Timing: origin; dur=11 Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.10173317.1767940572.34c43768 Server-Timing: ak_p; desc="1767940571679_389224208_885274472_29876_4861_148_406_-";dur=1
Open service 23.50.131.157:443 · integrationcloud-ca12.leadsquaredapps.com
2026-01-02 09:48
HTTP/1.1 404 Not Found Content-Length: 0 Cache-Control: max-age=0 Date: Fri, 02 Jan 2026 09:48:41 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=89 Server-Timing: origin; dur=12 Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.1d173317.1767347321.47daddf8 Server-Timing: ak_p; desc="1767347321408_389224221_1205526008_10077_4443_13_33_-";dur=1
Open service 23.50.131.157:443 · integrationcloud-ca12.leadsquaredapps.com
2025-12-22 15:52
HTTP/1.1 404 Not Found Content-Length: 0 Cache-Control: max-age=0 Date: Mon, 22 Dec 2025 15:53:02 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=121 Server-Timing: origin; dur=16 Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.10173317.1766418782.718c2c62 Server-Timing: ak_p; desc="1766418781518_389224208_1905011810_13727_6642_260_530_-";dur=1