Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 76.223.57.73:443 · staging.saltview.com
2026-01-09 08:20
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Jan 2026 08:20:03 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ffMMUbElXnojNWdvy913phdrjyF3scn%2Ff67NMDYV7a8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767946803"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ffMMUbElXnojNWdvy913phdrjyF3scn%2Ff67NMDYV7a8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767946803"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 13.248.213.92:80 · staging.saltview.com
2026-01-08 23:38
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Thu, 08 Jan 2026 23:39:51 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=uymtojtfPKVBjqamfcljSx5%2B60EZnt5vOo74x50YRSo%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767915591"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=uymtojtfPKVBjqamfcljSx5%2B60EZnt5vOo74x50YRSo%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767915591"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 76.223.57.73:443 · staging.saltview.com
2026-01-02 11:55
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Jan 2026 11:55:47 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=dIi8I5zUS5YqbDoEXLKC4u48zPAfViW0gk4J%2FmHuofc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767354947"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=dIi8I5zUS5YqbDoEXLKC4u48zPAfViW0gk4J%2FmHuofc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767354947"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 13.248.213.92:80 · staging.saltview.com
2026-01-01 22:00
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Thu, 01 Jan 2026 22:00:50 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=KBouBMlwgySPgC4NdRQi%2FLowxiNStihQT%2BZ7f5n5a4A%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767304850"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=KBouBMlwgySPgC4NdRQi%2FLowxiNStihQT%2BZ7f5n5a4A%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767304850"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 13.248.213.92:80 · staging.saltview.com
2025-12-30 06:33
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Tue, 30 Dec 2025 06:34:02 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xtXyF0NbbWPFskW%2FWH15lfeLXDmc0ktrv7IrSIrz8vw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767076442"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xtXyF0NbbWPFskW%2FWH15lfeLXDmc0ktrv7IrSIrz8vw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767076442"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 76.223.57.73:443 · staging.saltview.com
2025-12-22 20:01
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Mon, 22 Dec 2025 20:01:20 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=geYU1m%2BAo63NGdPkhD17Iggre0cfGgkh2tUkIlp5rzY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766433680"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=geYU1m%2BAo63NGdPkhD17Iggre0cfGgkh2tUkIlp5rzY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766433680"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 13.248.213.92:80 · staging.saltview.com
2025-12-22 14:44
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Mon, 22 Dec 2025 14:44:36 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1MbUxLWja0YbBDI34TmsWEZUmosqDN6ShE4q6U7%2Bdaw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766414676"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1MbUxLWja0YbBDI34TmsWEZUmosqDN6ShE4q6U7%2Bdaw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766414676"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 76.223.57.73:443 · staging.saltview.com
2025-12-21 04:19
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Sun, 21 Dec 2025 04:19:43 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=IZNtbhPJgyODW6KK26smXvRv0eMa67xDF1qag9SJHl0%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766290783"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=IZNtbhPJgyODW6KK26smXvRv0eMa67xDF1qag9SJHl0%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766290783"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 13.248.213.92:80 · staging.saltview.com
2025-12-20 13:04
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Sat, 20 Dec 2025 13:04:45 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=nA3LLr256hireCtZaBODqA89%2FxRqHgK4STuPvIDLTdU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766235885"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=nA3LLr256hireCtZaBODqA89%2FxRqHgK4STuPvIDLTdU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766235885"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>
Open service 76.223.57.73:443 · staging.saltview.com
2025-12-19 04:30
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=0
Content-Length: 455
Content-Type: text/html; charset=UTF-8
Date: Fri, 19 Dec 2025 04:30:06 GMT
Etag: W/"1c7-199a1691ae0"
Last-Modified: Wed, 01 Oct 2025 20:14:04 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hvw49txmANOX%2BEyhEPY5j07mnumZqgHxC3iO01a14GY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766118606"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hvw49txmANOX%2BEyhEPY5j07mnumZqgHxC3iO01a14GY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766118606"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: SaltView 2.0
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/saltview.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>SaltView 2.0</title>
<script type="module" crossorigin src="/assets/index-67d72fb3.js"></script>
<link rel="stylesheet" href="/assets/index-fdb68a46.css">
</head>
<body>
<div id="app"></div>
</body>
</html>