Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549eb310bffbcade90f346cf10b9d81a7ad3e8796cf
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Pairs/devices/{deviceId}/shops/{shopId}
DELETE /api/Pairs/{shopDevicePairId}
GET /api/Health
GET /api/Notifications/current
GET /api/Pairs/device/{deviceTokenId}
GET /api/Pairs/shop/{shopId}
GET /api/Products/search/{pattern}
GET /api/Products/{reference}/picture
GET /api/QRCode/{shopId}
GET /api/QRCode/{shopId}/reset
GET /api/WarrantyCheck/{brandCode}/{id}
POST /api/Token/device
POST /api/Token/device/refresh
POST /api/transactional-data/manage-sellout
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549eb310bffbcade90f346cf10b9d81a7ad6484877f
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Pairs/devices/{deviceId}/shops/{shopId}
DELETE /api/Pairs/{shopDevicePairId}
GET /api/Health
GET /api/Notifications/current
GET /api/Pairs/device/{deviceTokenId}
GET /api/Pairs/shop/{shopId}
GET /api/Products/{brandCode}/search/{pattern}
GET /api/Products/{reference}/picture
GET /api/QRCode/{shopId}
GET /api/QRCode/{shopId}/reset
GET /api/WarrantyCheck/{brandCode}/{id}
POST /api/Token/device
POST /api/Token/device/refresh
POST /api/transactional-data/manage-sellout/device-id/{deviceId}
Open service 2.16.6.202:443 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 07 Jan 2026 10:34:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:34:28 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2a02:26f0:480:36::212:4017:80 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:35:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:35:09 GMT Connection: close
Open service 2.16.6.197:443 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 07 Jan 2026 10:34:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:34:28 GMT Connection: close Set-Cookie: BIGipServerPool_SGS_Caas_https=46536364.47873.0000; path=/; Httponly; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2a02:26f0:480:36::212:401d:443 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 07 Jan 2026 10:34:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:34:28 GMT Connection: close Set-Cookie: BIGipServerPool_SGS_Caas_https=180754092.47873.0000; path=/; Httponly; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2a02:26f0:480:36::212:4017:443 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 07 Jan 2026 10:34:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:34:27 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2.16.6.197:80 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 387 Expires: Wed, 07 Jan 2026 10:35:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:35:08 GMT Connection: close Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://konnector-dev.swatchgroup.com/" on this server.<P> Reference #18.458a1402.1767782108.25e8116f <P>https://errors.edgesuite.net/18.458a1402.1767782108.25e8116f</P> </BODY> </HTML>
Open service 2.16.6.202:80 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:35:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:35:08 GMT Connection: close
Open service 2a02:26f0:480:36::212:401d:80 · konnector-dev.swatchgroup.com
2026-01-07 10:34
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:35:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:35:08 GMT Connection: close
Open service 2.16.204.93:443 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 31 Dec 2025 09:37:41 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:41 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2a02:26f0:7100::210:18a:443 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 31 Dec 2025 09:37:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:40 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2.16.204.89:443 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 31 Dec 2025 09:37:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:39 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2.16.204.89:80 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 31 Dec 2025 09:37:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:42 GMT Connection: close
Open service 2a02:26f0:7100::210:18a:80 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 31 Dec 2025 09:37:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:43 GMT Connection: close
Open service 2.16.204.93:80 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 31 Dec 2025 09:37:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:42 GMT Connection: close
Open service 2a02:26f0:7100::210:1fa:80 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector-dev.swatchgroup.com/ Expires: Wed, 31 Dec 2025 09:37:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:42 GMT Connection: close
Open service 2a02:26f0:7100::210:1fa:443 · konnector-dev.swatchgroup.com
2025-12-31 09:37
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:965985d6-3b18-43ec-9025-c027e920ef27 Expires: Wed, 31 Dec 2025 09:37:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Dec 2025 09:37:39 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload