Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 35.71.179.82:80 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:06:24 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176384"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176384"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:80 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:06:24 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176384"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176384"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 13.248.244.96:443 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:05:23 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176323"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176323"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:443 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:05:23 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176323"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176323"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 35.71.179.82:443 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:05:23 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176323"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176323"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 75.2.60.68:80 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:06:24 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176384"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176384"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 13.248.244.96:80 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:06:24 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176384"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rDjRB5qbdydi8%2BT%2FTN%2BlGHCHD7xX9Yo07BJ5de6vUk4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176384"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 75.2.60.68:443 · md-api.torosapps.com
2026-01-12 00:05
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 00:05:23 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768176323"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FBm9YVL6JJmjY39jXznlgvuwCymYZLyiUYSPIXsKCAo%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768176323"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:443 · md-api.torosapps.com
2026-01-10 00:11
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Sat, 10 Jan 2026 00:11:52 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NFHU37Y62be%2F0m3xn8viXnjMaJbe6PqalDG2M12KyN8%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1768003912"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NFHU37Y62be%2F0m3xn8viXnjMaJbe6PqalDG2M12KyN8%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1768003912"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 35.71.179.82:80 · md-api.torosapps.com
2026-01-09 16:49
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Fri, 09 Jan 2026 16:50:57 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vWl5qDSKY1rXZ2rwXFGLyaAXvWfRA5yyErXb%2Fu6mHh4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767977457"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vWl5qDSKY1rXZ2rwXFGLyaAXvWfRA5yyErXb%2Fu6mHh4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767977457"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 35.71.179.82:80 · md-api.torosapps.com
2026-01-02 21:18
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Fri, 02 Jan 2026 21:18:15 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=L%2B%2F6Le6JepdzxaWUqr9x%2BVJHzVW6fpwwGW3uCm2uS30%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767388695"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=L%2B%2F6Le6JepdzxaWUqr9x%2BVJHzVW6fpwwGW3uCm2uS30%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767388695"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:443 · md-api.torosapps.com
2026-01-02 20:35
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Fri, 02 Jan 2026 20:35:28 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=QtR%2BWeylhqb6yHs6oQZMnLyPdnr3S06j8Bl4F2n45gc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767386128"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=QtR%2BWeylhqb6yHs6oQZMnLyPdnr3S06j8Bl4F2n45gc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767386128"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:443 · md-api.torosapps.com
2025-12-23 02:36
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Tue, 23 Dec 2025 02:36:11 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=IO6Z0cl%2FbneNqfhuVQzbmxcdXshSpEmx2tFcwgmoQAY%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766457371"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=IO6Z0cl%2FbneNqfhuVQzbmxcdXshSpEmx2tFcwgmoQAY%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766457371"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 35.71.179.82:80 · md-api.torosapps.com
2025-12-22 23:19
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Mon, 22 Dec 2025 23:19:28 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=emVq2yUGXDj1kL9BlY15RsRCN8PQ2J9fRj18wqB9EGE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766445568"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=emVq2yUGXDj1kL9BlY15RsRCN8PQ2J9fRj18wqB9EGE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766445568"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:443 · md-api.torosapps.com
2025-12-21 08:17
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Sun, 21 Dec 2025 08:17:20 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=djf3LX5Jjefek4bzmU35YCgn6KO2grhPDvcQ2shVnf8%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766305040"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=djf3LX5Jjefek4bzmU35YCgn6KO2grhPDvcQ2shVnf8%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766305040"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 35.71.179.82:80 · md-api.torosapps.com
2025-12-21 04:19
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Sun, 21 Dec 2025 04:19:45 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3iz1Dzt7egJcJVnPmog7kWh5lk9J0C1KS%2FYMSisVDRE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766290785"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3iz1Dzt7egJcJVnPmog7kWh5lk9J0C1KS%2FYMSisVDRE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766290785"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json
Open service 99.83.220.108:443 · md-api.torosapps.com
2025-12-19 05:55
HTTP/1.1 302 Found
Content-Length: 45
Content-Type: text/plain; charset=utf-8
Date: Fri, 19 Dec 2025 05:55:52 GMT
Location: /atlassian-connect.json
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FspfYW9h7sHY8F4Qx2XmdkfeSj%2FJJnqPA63UhqGeEVY%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766123752"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FspfYW9h7sHY8F4Qx2XmdkfeSj%2FJJnqPA63UhqGeEVY%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766123752"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept, Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Found. Redirecting to /atlassian-connect.json