Microsoft-IIS 10.0
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a8148a761d0053bbc45b5d9f2dcddc25abdb7be2
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Account/LoggedOut
GET /Account/Logout
GET /Account/ProcessLogout
GET /api/Notifications/Image
GET /api/Notifications/Register
GET /api/Tags
GET /api/Tasks
GET /api/Tasks({key})
GET /api/Tasks/$count
GET /api/Tasks/{id}/Action/{actionId}
GET /api/Tasks/{key}
GET /api/content/{contentItemId}
POST /api/Provision
POST /api/Provision/PublishAndRebuildCopiedContent
POST /api/Tasks/BulkDelete
POST /api/content
POST /api/tenants/create
POST /api/tenants/disable/{tenantName}
POST /api/tenants/edit
POST /api/tenants/enable/{tenantName}
POST /api/tenants/remove/{tenantName}
POST /api/tenants/setup
PUT /api/Tags/{key}
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a8148a761d0053bbc45b5d9ff4eb5af282e65b2b
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Account/LoggedOut
GET /Account/Logout
GET /Account/ProcessLogout
GET /api/About/api/About/Version
GET /api/Notifications/Image
GET /api/Notifications/Register
GET /api/Tasks
GET /api/Tasks({key})
GET /api/Tasks/$count
GET /api/Tasks/{id}/Action/{actionId}
GET /api/Tasks/{key}
GET /api/content/{contentItemId}
POST /api/Provision
POST /api/Provision/PublishAndRebuildCopiedContent
POST /api/Tasks/BulkDelete
POST /api/content
POST /api/tenants/create
POST /api/tenants/setup
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a8148a761d0053bbc45b5d9f2dcddc2580c095d7
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Account/LoggedOut
GET /Account/Logout
GET /Account/ProcessLogout
GET /api/Notifications/Image
GET /api/Notifications/Register
GET /api/Tasks
GET /api/Tasks({key})
GET /api/Tasks/$count
GET /api/Tasks/{id}/Action/{actionId}
GET /api/Tasks/{key}
GET /api/content/{contentItemId}
POST /api/Provision
POST /api/Provision/PublishAndRebuildCopiedContent
POST /api/Tasks/BulkDelete
POST /api/content
POST /api/tenants/create
POST /api/tenants/disable/{tenantName}
POST /api/tenants/edit
POST /api/tenants/enable/{tenantName}
POST /api/tenants/remove/{tenantName}
POST /api/tenants/setup
Open service 20.105.224.45:443 · tasks-svc.dev.workai.cloud
2026-01-09 17:43
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 09 Jan 2026 17:44:18 GMT Server: Microsoft-IIS/10.0 Location: https://tasks-svc.dev.workai.cloud/Login?ReturnUrl=%2F Set-Cookie: ARRAffinity=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;Secure;Domain=tasks-svc.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;SameSite=None;Secure;Domain=tasks-svc.dev.workai.cloud Request-Context: appId=cid-v1:93c16df7-539e-49a6-92be-11598c261c62 X-Content-Type-Options: nosniff X-XSS-Protection: 0
Open service 20.105.224.45:443 · tasks-svc.dev.workai.cloud
2026-01-08 00:02
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 08 Jan 2026 00:03:42 GMT Server: Microsoft-IIS/10.0 Location: https://tasks-svc.dev.workai.cloud/Login?ReturnUrl=%2F Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=tasks-svc.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=tasks-svc.dev.workai.cloud Request-Context: appId=cid-v1:93c16df7-539e-49a6-92be-11598c261c62 X-Content-Type-Options: nosniff X-XSS-Protection: 0
Open service 20.105.224.45:80 · tasks-svc.dev.workai.cloud
2026-01-08 00:02
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Thu, 08 Jan 2026 00:03:41 GMT Location: https://tasks-svc.dev.workai.cloud/
Open service 20.105.224.45:443 · tasks-svc.dev.workai.cloud
2026-01-02 09:51
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 02 Jan 2026 09:51:17 GMT Server: Microsoft-IIS/10.0 Location: https://tasks-svc.dev.workai.cloud/Login?ReturnUrl=%2F Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=tasks-svc.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=tasks-svc.dev.workai.cloud Request-Context: appId=cid-v1:93c16df7-539e-49a6-92be-11598c261c62 X-Content-Type-Options: nosniff X-XSS-Protection: 0
Open service 20.105.224.45:443 · tasks-svc.dev.workai.cloud
2025-12-22 23:37
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Mon, 22 Dec 2025 23:37:56 GMT Server: Microsoft-IIS/10.0 Location: https://tasks-svc.dev.workai.cloud/Login?ReturnUrl=%2F Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=tasks-svc.dev.workai.cloud Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=tasks-svc.dev.workai.cloud Request-Context: appId=cid-v1:93c16df7-539e-49a6-92be-11598c261c62 X-Content-Type-Options: nosniff X-XSS-Protection: 0