Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354931fd5de531fd5de531fd5de531fd5de531fd5de5
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /RecordClick
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d6092dd6ee892dd6ee892dd6ee892dd6ee892dd6ee8
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /RecordClick
Open service 104.110.240.121:80 · sentryuclickservice.sentry.com
2026-01-27 10:44
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://sentryuclickservice.sentry.com/ Expires: Tue, 27 Jan 2026 10:44:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 27 Jan 2026 10:44:51 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1769510691900_1752100981_563506497_13_9090_151_0_-";dur=1
Open service 104.110.240.89:80 · sentryuclickservice.sentry.com
2026-01-27 10:44
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://sentryuclickservice.sentry.com/ Expires: Tue, 27 Jan 2026 10:44:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 27 Jan 2026 10:44:51 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1769510691166_1752100949_540637270_18_9710_7_0_-";dur=1
Open service 104.110.240.120:80 · sentryuclickservice.sentry.com
2026-01-27 10:44
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://sentryuclickservice.sentry.com/ Expires: Tue, 27 Jan 2026 10:44:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 27 Jan 2026 10:44:51 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1769510691155_1752100980_668359405_16_10774_8_0_-";dur=1