Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bff845e63c8efcee5c8efcee5c8efcee5c8efcee5
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/hello
POST /drips/v1/lead/{leadId}
Open service 23.50.55.43:443 · smig-api-qual.sentry.com
2026-01-23 15:00
HTTP/1.1 401 Unauthorized
Content-Type: text/html;charset=utf-8
Content-Length: 437
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: DENY
WWW-Authenticate: Basic realm="REALM"
Content-Language: en
Expires: Fri, 23 Jan 2026 15:00:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 15:00:55 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=305
Server-Timing: origin; dur=32
X-Akamai-Staging: ESSL
Server-Timing: ak_p; desc="1769180454998_389166893_2623550_33746_38380_93_135_-";dur=1
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1></body></html>
Open service 23.50.55.49:80 · smig-api-qual.sentry.com
2026-01-09 14:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://smig-api-qual.sentry.com/ Expires: Fri, 09 Jan 2026 14:43:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 14:43:07 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Akamai-Staging: ESSL Server-Timing: ak_p; desc="1767969787105_389166893_647296_13_8188_79_0_-";dur=1
Open service 23.50.55.43:443 · smig-api-qual.sentry.com
2026-01-09 14:42
HTTP/1.1 401 Unauthorized
Content-Type: text/html;charset=utf-8
Content-Length: 437
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: DENY
WWW-Authenticate: Basic realm="REALM"
Content-Language: en
Expires: Fri, 09 Jan 2026 14:42:25 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 14:42:25 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=94
Server-Timing: origin; dur=30
X-Akamai-Staging: ESSL
Server-Timing: ak_p; desc="1767969745849_389166887_7054078_12401_8276_0_4_-";dur=1
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1></body></html>
Open service 23.50.55.49:443 · smig-api-qual.sentry.com
2026-01-09 14:42
HTTP/1.1 401 Unauthorized
Content-Type: text/html;charset=utf-8
Content-Length: 437
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: DENY
WWW-Authenticate: Basic realm="REALM"
Content-Language: en
Expires: Fri, 09 Jan 2026 14:42:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 14:42:26 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=776
Server-Timing: origin; dur=30
X-Akamai-Staging: ESSL
Server-Timing: ak_p; desc="1767969745809_389166893_642892_80547_17444_6_21_-";dur=1
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1></body></html>
Open service 23.50.55.43:80 · smig-api-qual.sentry.com
2026-01-09 14:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://smig-api-qual.sentry.com/ Expires: Fri, 09 Jan 2026 14:43:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 14:43:06 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Akamai-Staging: ESSL Server-Timing: ak_p; desc="1767969786324_389166887_7056340_14_8426_7_0_-";dur=1
Open service 23.50.55.43:443 · smig-api-qual.sentry.com
2026-01-09 12:33
HTTP/1.1 401 Unauthorized
Content-Type: text/html;charset=utf-8
Content-Length: 437
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: DENY
WWW-Authenticate: Basic realm="REALM"
Content-Language: en
Expires: Fri, 09 Jan 2026 12:33:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 12:33:14 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=98
Server-Timing: origin; dur=27
X-Akamai-Staging: ESSL
Server-Timing: ak_p; desc="1767961994351_389166887_6500033_12431_8473_81_84_-";dur=1
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1></body></html>
Open service 23.50.55.43:443 · smig-api-qual.sentry.com
2026-01-02 20:24
HTTP/1.1 401 Unauthorized
Content-Type: text/html;charset=utf-8
Content-Length: 437
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: DENY
WWW-Authenticate: Basic realm="REALM"
Content-Language: en
Expires: Fri, 02 Jan 2026 20:24:32 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 20:24:32 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=86
Server-Timing: origin; dur=33
X-Akamai-Staging: ESSL
Server-Timing: ak_p; desc="1767385472530_389166887_39013019_11909_8469_145_149_-";dur=1
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1></body></html>
Open service 23.50.55.43:443 · smig-api-qual.sentry.com
2025-12-22 17:32
HTTP/1.1 401 Unauthorized
Content-Type: text/html;charset=utf-8
Content-Length: 437
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: DENY
WWW-Authenticate: Basic realm="REALM"
Content-Language: en
Expires: Mon, 22 Dec 2025 17:32:49 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 17:32:49 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=116
Server-Timing: origin; dur=418
X-Akamai-Staging: ESSL
Server-Timing: ak_p; desc="1766424768942_389166887_41845278_53397_20185_0_46_-";dur=1
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1></body></html>