Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4ecbe7188a2e00678d0f3af53a9374e5b75f1ac21
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /account/payment-method/{id}
GET /account
GET /account/invoices
GET /account/user
GET /account/user/{id}/email
GET /conf-customer-plans
GET /conf/{id}/export-rooms
GET /conf/{id}/export-session-registrations
GET /conf/{id}/export-sessions
GET /conf/{id}/export-speakers
GET /currency
GET /plans
GET /session/{id}/export-registrations
GET /subscription
POST /account/check-email
POST /account/verification-email
POST /check-urls
POST /conf-checkout
POST /conf/{id}/import-rooms
POST /conf/{id}/import-sessions
POST /conf/{id}/import-speakers
POST /notifications
POST /notifications/send-many
POST /notifications/send-one
POST /subscription/webhook
POST /webhooks
PUT /account/gclid
PUT /account/preferences
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4ecbe7188a2e00678d0f3af53a9374e5b75f1ac21
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /account/payment-method/{id}
GET /account
GET /account/invoices
GET /account/user
GET /account/user/{id}/email
GET /conf-customer-plans
GET /conf/{id}/export-rooms
GET /conf/{id}/export-session-registrations
GET /conf/{id}/export-sessions
GET /conf/{id}/export-speakers
GET /currency
GET /plans
GET /session/{id}/export-registrations
GET /subscription
POST /account/check-email
POST /account/verification-email
POST /check-urls
POST /conf-checkout
POST /conf/{id}/import-rooms
POST /conf/{id}/import-sessions
POST /conf/{id}/import-speakers
POST /notifications
POST /notifications/send-many
POST /notifications/send-one
POST /subscription/webhook
POST /webhooks
PUT /account/gclid
PUT /account/preferences
Open service 15.197.129.158:443 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:34:44 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005284"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005284"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 15.197.129.158:80 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:35:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005345"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005345"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 76.223.11.49:443 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:34:44 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005284"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005284"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 75.2.43.161:443 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:34:44 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005284"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005284"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 99.83.217.1:80 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:35:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005345"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005345"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 99.83.217.1:443 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:34:44 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005284"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ifecpUVl6GA1CRAd0eY5ZfdLdjNF%2FE2jWj%2FzMOYGVPA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005284"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 76.223.11.49:80 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:35:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005345"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005345"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 75.2.43.161:80 · services.conf.app
2026-01-10 00:34
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 00:35:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768005345"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lxuQQPSBNMHC53Lc%2B7NJ0I%2FFX5VpDaEHmptjItW0WDQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768005345"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 15.197.129.158:443 · services.conf.app
2026-01-09 16:01
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 16:01:38 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=737ySOLdP7V%2BFtr64u6pCD1mees0RebAZyncXenFBtM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767974498"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=737ySOLdP7V%2BFtr64u6pCD1mees0RebAZyncXenFBtM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767974498"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 76.223.11.49:80 · services.conf.app
2026-01-09 03:23
HTTP/1.1 404 Not Found
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 03:24:08 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TTykQZOaEQAv7%2F60J0lbUHDy%2Bfv0vullbETKfarqn6A%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767929048"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TTykQZOaEQAv7%2F60J0lbUHDy%2Bfv0vullbETKfarqn6A%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767929048"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 15.197.129.158:443 · services.conf.app
2026-01-02 22:22
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 22:22:09 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Hjqgz7fxAXNL2UnzOEzvENcVjKuE%2F64wAQ0QkyhD34Q%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767392529"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Hjqgz7fxAXNL2UnzOEzvENcVjKuE%2F64wAQ0QkyhD34Q%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767392529"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 76.223.11.49:80 · services.conf.app
2026-01-02 10:14
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 10:14:37 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=opqOOwScuL0UDnLEL%2BEKuor8nbPVkhuwHsaQ8Ba9Hzs%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767348877"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=opqOOwScuL0UDnLEL%2BEKuor8nbPVkhuwHsaQ8Ba9Hzs%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767348877"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 15.197.129.158:443 · services.conf.app
2025-12-22 16:43
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 16:43:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=AkodBHPUcHuKf%2FxTMt12epPX8DS0%2FmyLTKb5YMY6K6Q%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766421835"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=AkodBHPUcHuKf%2FxTMt12epPX8DS0%2FmyLTKb5YMY6K6Q%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766421835"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 76.223.11.49:80 · services.conf.app
2025-12-20 20:08
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 20:08:47 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EGx8SNQZ6sDGm0ZoCSBpjuqW1uE5fexf0NSx6Ilk%2Fb0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766261327"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EGx8SNQZ6sDGm0ZoCSBpjuqW1uE5fexf0NSx6Ilk%2Fb0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766261327"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 15.197.129.158:443 · services.conf.app
2025-12-20 17:55
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 17:55:08 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ZYtDvT%2FiM%2BP%2BR3hI0cAAyQwwdVW%2B2PFKKWj%2FM1Atkew%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766253308"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ZYtDvT%2FiM%2BP%2BR3hI0cAAyQwwdVW%2B2PFKKWj%2FM1Atkew%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766253308"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}
Open service 15.197.129.158:443 · services.conf.app
2025-12-19 06:24
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Cache-Control: no-cache
Content-Length: 60
Content-Type: application/json; charset=utf-8
Date: Fri, 19 Dec 2025 06:24:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=msGudQpGhjpGZFMV0tAVJYDG54enkjT7YD2oRLvUMWg%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766125458"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=msGudQpGhjpGZFMV0tAVJYDG54enkjT7YD2oRLvUMWg%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766125458"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
Connection: close
{"statusCode":404,"error":"Not Found","message":"Not Found"}