Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 23.36.162.12:443 · twitter-api.numeriq.ca
2026-01-23 09:44
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
Access-Control-Allow-Origin: *
ETag: W/"1fc-vcpJQ4HwJjb/GXFv+goaEJxoVdk"
x-envoy-upstream-service-time: 5
Cache-Control: max-age=59
Date: Fri, 23 Jan 2026 09:44:20 GMT
Content-Length: 508
Connection: close
[{"id":"1589256855167139841","text":"Gabriel Côté (@CtGabriel8) nous apprend que le gouvernement de la CAQ pourrait revoir sa position sur les seuils d’immigration, si les nouveaux arrivants sélectionnés parlent français #Assnat #qc2022 #polqc #polcan https://t.co/wzZ5wz5jqm","createdAt":"2022-11-06T14:02:15.000Z","user":{"id":"104626228","name":"Nicolas Lachance","profile_image_url":"https://pbs.twimg.com/profile_images/1563197749566312448/dHWbHFAE_normal.jpg","username":"NicolasLachance"}}]
Open service 23.36.162.13:443 · twitter-api.numeriq.ca
2026-01-05 14:42
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
Access-Control-Allow-Origin: *
ETag: W/"1fc-vcpJQ4HwJjb/GXFv+goaEJxoVdk"
x-envoy-upstream-service-time: 1
Cache-Control: max-age=59
Date: Mon, 05 Jan 2026 14:42:56 GMT
Content-Length: 508
Connection: close
[{"id":"1589256855167139841","text":"Gabriel Côté (@CtGabriel8) nous apprend que le gouvernement de la CAQ pourrait revoir sa position sur les seuils d’immigration, si les nouveaux arrivants sélectionnés parlent français #Assnat #qc2022 #polqc #polcan https://t.co/wzZ5wz5jqm","createdAt":"2022-11-06T14:02:15.000Z","user":{"id":"104626228","name":"Nicolas Lachance","profile_image_url":"https://pbs.twimg.com/profile_images/1563197749566312448/dHWbHFAE_normal.jpg","username":"NicolasLachance"}}]
Open service 23.36.162.12:80 · twitter-api.numeriq.ca
2026-01-05 14:42
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 134 Location: https://twitter-api.numeriq.ca:443/ Cache-Control: max-age=60 Date: Mon, 05 Jan 2026 14:42:58 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Open service 23.36.162.13:80 · twitter-api.numeriq.ca
2026-01-05 14:42
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 134 Location: https://twitter-api.numeriq.ca:443/ Cache-Control: max-age=60 Date: Mon, 05 Jan 2026 14:42:58 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Open service 23.36.162.12:443 · twitter-api.numeriq.ca
2026-01-05 14:42
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
Access-Control-Allow-Origin: *
ETag: W/"1fc-vcpJQ4HwJjb/GXFv+goaEJxoVdk"
x-envoy-upstream-service-time: 1
Cache-Control: max-age=60
Date: Mon, 05 Jan 2026 14:42:55 GMT
Content-Length: 508
Connection: close
[{"id":"1589256855167139841","text":"Gabriel Côté (@CtGabriel8) nous apprend que le gouvernement de la CAQ pourrait revoir sa position sur les seuils d’immigration, si les nouveaux arrivants sélectionnés parlent français #Assnat #qc2022 #polqc #polcan https://t.co/wzZ5wz5jqm","createdAt":"2022-11-06T14:02:15.000Z","user":{"id":"104626228","name":"Nicolas Lachance","profile_image_url":"https://pbs.twimg.com/profile_images/1563197749566312448/dHWbHFAE_normal.jpg","username":"NicolasLachance"}}]