Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d98b7dbe3cf105fc43ea83b2924d3a4b8c013740
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_dates_by_method/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /returns/
GET /returns/order/{order_id}/
GET /returns/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/aftership/
POST /webhooks/braintree/revoke/
POST /webhooks/gladly/
POST /webhooks/orderdesk/
POST /webhooks/shipfusion/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60860ae0e7c846336962dc7845ac38d19033e1469f
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/aftership/
POST /webhooks/braintree/revoke/
POST /webhooks/gladly/
POST /webhooks/orderdesk/
POST /webhooks/shipfusion/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d98b7dbe3cf105fc43ea83b2924d3a4bd303ce22
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/aftership/
POST /webhooks/braintree/revoke/
POST /webhooks/gladly/
POST /webhooks/orderdesk/
POST /webhooks/shipfusion/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d98b7dbe3cf105fc43ea83b2924d3a4b580d187a
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/braintree/revoke/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d98b7dbe3cf105fc43ea83b2924d3a4b8c013740
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_dates_by_method/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /returns/
GET /returns/order/{order_id}/
GET /returns/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/aftership/
POST /webhooks/braintree/revoke/
POST /webhooks/gladly/
POST /webhooks/orderdesk/
POST /webhooks/shipfusion/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d98b7dbe3cf105fc43ea83b2924d3a4bd303ce22
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/aftership/
POST /webhooks/braintree/revoke/
POST /webhooks/gladly/
POST /webhooks/orderdesk/
POST /webhooks/shipfusion/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d98b7dbe3cf105fc43ea83b2924d3a4b580d187a
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /pets/{id}/delete-image/
GET /accounts/
GET /accounts/{id}/
GET /accounts/{id}/can_update_pet/
GET /accounts/{id}/marketing_profile_subscriptions/
GET /accounts/{id}/shipping_estimates_by_method_from_plan_info/
GET /accounts/{id}/user_treatments/
GET /active_promotions/
GET /active_promotions/{id}/
GET /addresses/
GET /addresses/{id}/
GET /bark_user
GET /body_types/
GET /body_types/{id}/
GET /breeds/
GET /breeds/{id}/
GET /buffer_bags/
GET /buffer_bags/{id}/
GET /calculator/plan_options/
GET /claims/
GET /claims/order/{order_id}/
GET /claims/{id}/
GET /customer_changelog/{id}/
GET /decagon_search
GET /discount/
GET /discounts/
GET /discounts/{id}/
GET /feeding_guidelines/
GET /get_agent/{agent_id}
GET /health_conditions/
GET /health_conditions/{id}/
GET /impersonate/
GET /items/
GET /items/skus/
GET /items/{id}/
GET /items_export/
GET /items_export/{id}/
GET /lifestyles/
GET /lifestyles/{id}/
GET /nutrient_analysis/
GET /nutrient_analysis/{id}/
GET /orders/
GET /orders/{id}/
GET /orders/{id}/addon_products/
GET /orders/{id}/estimated_shipping_dates/
GET /orders/{id}/manifest/
GET /orders/{id}/shipping_estimates_by_method/
GET /orders/{id}/shipping_rates_with_estimates/
GET /packing_slips/
GET /payment_methods/
GET /pet_form_options/
GET /pet_plans/
GET /pet_plans/{id}/
GET /pet_plans/{id}/products/
GET /pet_plans/{id}/reactivation_preview/
GET /pets/
GET /pets/{id}/
GET /plan_sizes/
GET /plan_sizes/{id}/
GET /prices/
GET /prices/meals_per_size/
GET /prices/{id}/
GET /product_items/
GET /product_items/{id}/
GET /product_items_export/
GET /product_items_export/{id}/
GET /product_summary/
GET /product_summary/{id}/
GET /products/
GET /products/codes/
GET /products/discount-eligible-codes/
GET /products/free/
GET /products/merchandise/
GET /products/one-time-codes/
GET /products/one-time-order-products/
GET /products/{code}/
GET /promotions/
GET /promotions/{id}/
GET /recipes/
GET /recipes/daily_essentials/
GET /recipes/fresh/
GET /recipes/ids/
GET /recipes/marketing_recipes/
GET /recipes/pupgum/
GET /recipes/snacks/
GET /recipes/supplements/
GET /recipes/unkibble/
GET /recipes/{id}/
GET /sessions/
GET /sessions/{id}/
GET /sessions/{id}/plan_options/
GET /sessions/{id}/products/
GET /sessions/{id}/shipping_rates_with_estimates/
GET /snacks/
GET /snacks/{id}/
GET /system_changelog/{id}/
GET /track_event/
GET /track_event/{id}/
PATCH /orders/{id}/update_shipping_method/
PATCH /sessions/{id}/clear/
PATCH /sessions/{id}/partial_update_pet_answers/
POST /accounts/{id}/activate/
POST /accounts/{id}/add_new_dog_preview/
POST /accounts/{id}/cancel/
POST /accounts/{id}/change_plan_frequency/
POST /accounts/{id}/create_exclusive_discount/
POST /accounts/{id}/is_eligible_for_exclusive_discount/
POST /accounts/{id}/should_receive_treatment/
POST /addresses/validate_address/
POST /addresses/validate_state/
POST /addresses/validate_street_address/
POST /addresses/validate_zip/
POST /anonymous_user/
POST /anonymous_user/get_or_create/
POST /calculator/build_plan/
POST /calculator/build_plans_for_recipes/
POST /calculator/build_plans_for_size/
POST /customer_search
POST /default_password_request/
POST /delete_pii/
POST /discounts/bulk_create/
POST /discounts/generate_exclusive_discount/
POST /fulfillments/{id}/split/
POST /generate_pr
POST /login/
POST /orders/calculate_shipping_rates_with_estimates/
POST /orders/charge_on_hold/
POST /orders/{id}/apply_discount/
POST /orders/{id}/remove_discount/
POST /password_reset_request/
POST /payment_methods/create_setup_intent/
POST /payment_methods/delete/
POST /payment_methods/set_default/
POST /payment_methods/switch_payment_processor/
POST /pet_plans/create_pet_and_pet_plan/
POST /pet_plans/update_plan_dates/
POST /pet_plans/{id}/update_with_exclusive_discount/
POST /pets/{id}/cancel/
POST /pets/{id}/reactivate/
POST /pets/{id}/upload-image/
POST /product_items/{id}/add_items/
POST /refunds/
POST /reset_password/
POST /sessions/check_valid_email/
POST /sessions/get_or_create_by_anonymous_id/
POST /sessions/get_or_create_by_email/
POST /sessions/{id}/add_survey_response/
POST /sessions/{id}/apply_discount/
POST /sessions/{id}/apply_discounts/
POST /sessions/{id}/build_plans/
POST /sessions/{id}/finalize/
POST /sessions/{id}/get_shipping_rates_zipcode_items/
POST /sessions/{id}/prepare_checkout/
POST /sessions/{id}/remove_discount/
POST /sessions/{id}/should_receive_treatment/
POST /sessions/{id}/update_email/
POST /sessions/{id}/validate_checkout/
POST /totp/
POST /update_password/
POST /webhooks/braintree/revoke/
PUT /accounts/mark_viewed_portal_tutorial/
PUT /accounts/{id}/update_customer_email/
PUT /accounts/{id}/update_proactive_customer_support/
PUT /orders/mark_fulfillment_delivery_failed/
PUT /orders/mark_order_cancelled/
Open service 3.33.241.96:80 · staging1-api.spotandtango.com
2025-12-22 07:47
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html
Cross-Origin-Opener-Policy: same-origin
Date: Mon, 22 Dec 2025 07:47:25 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=KNRO%2F7EKjF3hS4AfdAzeMAd9sVX7mQws%2Fg8HEZKj9hQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766389645"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=KNRO%2F7EKjF3hS4AfdAzeMAd9sVX7mQws%2Fg8HEZKj9hQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766389645"
Server: Heroku
Vary: Origin, Cookie
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 15.197.149.68:443 · staging1-api.spotandtango.com
2025-12-22 05:31
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html
Cross-Origin-Opener-Policy: same-origin
Date: Mon, 22 Dec 2025 05:31:43 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yEFdpm7qvyUixJeK7bI5KixSc9jfkjT8DY92abfQBYs%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766381503"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yEFdpm7qvyUixJeK7bI5KixSc9jfkjT8DY92abfQBYs%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766381503"
Server: Heroku
Vary: Origin, Cookie
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 3.33.241.96:80 · staging1-api.spotandtango.com
2025-12-20 08:13
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html
Cross-Origin-Opener-Policy: same-origin
Date: Sat, 20 Dec 2025 08:13:24 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lURLHloy4RdoYU3C3h4c6sNLUcr91b0Q7N8rI2qODJI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766218404"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lURLHloy4RdoYU3C3h4c6sNLUcr91b0Q7N8rI2qODJI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766218404"
Server: Heroku
Vary: Origin, Cookie
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 15.197.149.68:443 · staging1-api.spotandtango.com
2025-12-20 05:57
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html
Cross-Origin-Opener-Policy: same-origin
Date: Sat, 20 Dec 2025 05:57:57 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yNU6Y2HLocWiEe7%2FnIU4RKXJ0JdbRtJNQILvSHr4ugA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766210277"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yNU6Y2HLocWiEe7%2FnIU4RKXJ0JdbRtJNQILvSHr4ugA%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766210277"
Server: Heroku
Vary: Origin, Cookie
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>