Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 2a00:1450:4001:803::2013:80 · spog-backend.dev.gopher.cdw.com
2026-01-12 12:03
HTTP/1.1 302 Found location: https://spog-backend.dev.gopher.cdw.com/ x-cloud-trace-context: 2a298233de4fe6c079b76e06663f36c2 date: Mon, 12 Jan 2026 12:04:46 GMT content-type: text/html server: Google Frontend Content-Length: 0 Connection: close
Open service 142.250.74.211:80 · spog-backend.dev.gopher.cdw.com
2026-01-12 12:03
HTTP/1.1 302 Found location: https://spog-backend.dev.gopher.cdw.com/ x-cloud-trace-context: 6b3f75ed2531e8529b64ff04955b476a;o=1 date: Mon, 12 Jan 2026 12:04:46 GMT content-type: text/html server: Google Frontend Content-Length: 0 Connection: close
Open service 142.250.74.211:443 · spog-backend.dev.gopher.cdw.com
2026-01-12 12:03
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5c3-37cgU/Qotmu8hRMqt8kP3f9bHD8"
x-cloud-trace-context: 9ba9f87d444d2d99826a4b94ab1bb646
date: Mon, 12 Jan 2026 12:03:47 GMT
server: Google Frontend
Content-Length: 1475
Connection: close
{"statusCode":404,"timestamp":"2026-01-12T12:03:47.989Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at read (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/read.js:54:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/types/urlencoded.js:58:5)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}
Open service 2a00:1450:4001:803::2013:443 · spog-backend.dev.gopher.cdw.com
2026-01-12 12:03
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5c3-Wl/3ocaax+ezLuLb65yTlsYawtQ"
x-cloud-trace-context: cbb82ef134b79461040bcefb4b10da50
date: Mon, 12 Jan 2026 12:03:47 GMT
server: Google Frontend
Content-Length: 1475
Connection: close
{"statusCode":404,"timestamp":"2026-01-12T12:03:47.981Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at read (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/read.js:54:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/types/urlencoded.js:58:5)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}
Open service 172.217.208.121:443 · spog-backend.dev.gopher.cdw.com
2026-01-10 00:15
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5c3-Vhs2HN3BejBuZTIXD52N8C6UI8g"
x-cloud-trace-context: ff72ddf3736986c2382af744ffb45e64
date: Sat, 10 Jan 2026 00:15:46 GMT
server: Google Frontend
Content-Length: 1475
Connection: close
{"statusCode":404,"timestamp":"2026-01-10T00:15:46.277Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at read (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/read.js:54:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/types/urlencoded.js:58:5)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}
Open service 172.217.208.121:443 · spog-backend.dev.gopher.cdw.com
2026-01-02 20:05
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5c3-1yS+4cZm4XwXnNyYyYyfMjAe/qc"
x-cloud-trace-context: 573464db49c190198c9077e6d2689f3c
date: Fri, 02 Jan 2026 20:05:06 GMT
server: Google Frontend
Content-Length: 1475
Connection: close
{"statusCode":404,"timestamp":"2026-01-02T20:05:06.641Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.9_@nestjs+common@11.1.9_class-transformer@0.5.1_class-validator@0.14.3_refl_ypnjrddwyzohxgqci7eymr2kxi/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at read (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/read.js:54:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.1/node_modules/body-parser/lib/types/urlencoded.js:58:5)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}
Open service 172.217.208.121:443 · spog-backend.dev.gopher.cdw.com
2025-12-23 08:43
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5be-N8g7wNPtIY2Q5ynf4L0UCQSa00g"
x-cloud-trace-context: dac6b1b83bcf50d41ec5503da27ae944
date: Tue, 23 Dec 2025 08:43:31 GMT
server: Google Frontend
Content-Length: 1470
Connection: close
{"statusCode":404,"timestamp":"2025-12-23T08:43:31.130Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.6_@nestjs+common@11.1.6_class-transformer@0.5.1_class-validator@0.14.2_refl_vpdooah7xgjlgjjlui7nrlyzsq/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.6_@nestjs+common@11.1.6_class-transformer@0.5.1_class-validator@0.14.2_refl_vpdooah7xgjlgjjlui7nrlyzsq/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.0/node_modules/body-parser/lib/types/urlencoded.js:68:7)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}
Open service 172.217.208.121:443 · spog-backend.dev.gopher.cdw.com
2025-12-21 06:31
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5be-7YYoHepfG6ry/UuthuOaDfTBEYU"
x-cloud-trace-context: 5384f56c3eaf59045e47c1663b7bc9a4
date: Sun, 21 Dec 2025 06:31:51 GMT
server: Google Frontend
Content-Length: 1470
Connection: close
{"statusCode":404,"timestamp":"2025-12-21T06:31:51.315Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.6_@nestjs+common@11.1.6_class-transformer@0.5.1_class-validator@0.14.2_refl_vpdooah7xgjlgjjlui7nrlyzsq/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.6_@nestjs+common@11.1.6_class-transformer@0.5.1_class-validator@0.14.2_refl_vpdooah7xgjlgjjlui7nrlyzsq/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.0/node_modules/body-parser/lib/types/urlencoded.js:68:7)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}
Open service 172.217.208.121:443 · spog-backend.dev.gopher.cdw.com
2025-12-19 02:17
HTTP/1.1 404 Not Found
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"5be-Ao3rfQ/Jm8rwSfD/dQaq2Hf7trY"
x-cloud-trace-context: c2e7a0ed4e7a1d6da05e9e1fdadd21c2
date: Fri, 19 Dec 2025 02:17:57 GMT
server: Google Frontend
Content-Length: 1470
Connection: close
{"statusCode":404,"timestamp":"2025-12-19T02:17:57.557Z","message":"Cannot GET /","path":"/","method":"GET","stack":"NotFoundException: Cannot GET /\n at callback (/app/node_modules/.pnpm/@nestjs+core@11.1.6_@nestjs+common@11.1.6_class-transformer@0.5.1_class-validator@0.14.2_refl_vpdooah7xgjlgjjlui7nrlyzsq/node_modules/@nestjs/core/router/routes-resolver.js:77:19)\n at /app/node_modules/.pnpm/@nestjs+core@11.1.6_@nestjs+common@11.1.6_class-transformer@0.5.1_class-validator@0.14.2_refl_vpdooah7xgjlgjjlui7nrlyzsq/node_modules/@nestjs/core/router/router-proxy.js:9:23\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)\n at /app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:297:9\n at processParams (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:582:12)\n at next (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:291:5)\n at urlencodedParser (/app/node_modules/.pnpm/body-parser@2.2.0/node_modules/body-parser/lib/types/urlencoded.js:68:7)\n at Layer.handleRequest (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/lib/layer.js:152:17)\n at trimPrefix (/app/node_modules/.pnpm/router@2.2.0/node_modules/router/index.js:342:13)","error":"NotFoundException","details":{"message":"Cannot GET /","error":"Not Found","statusCode":404}}