Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e3419e74e3419e74e3419e74e3419e74e3419e74
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: POST /api/v1/Calculator/CalculatePremiums
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d6012d698b312d698b312d698b312d698b312d698b3
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: POST /api/v1/Calculator/CalculatePremiums
Open service 23.50.131.133:443 · ultragard.getgard.com
2026-01-23 12:15
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN Link: </dist/677-4566738f1ba361b282fb.min.css>; as=style; rel=preload,</dist/layout-7fdb90b38e081c42af98.min.css>; as=style; rel=preload,</dist/677-89237d2f804fa6dbf2ca.min.js>; as=script; rel=preload,</dist/layout-519f002156b2ca0c1ee3.min.js>; as=script; rel=preload,</dist/531-69de48ed18c73c2dadda.min.js>; as=script; rel=preload,</dist/Index-795624509213de05ebfb.min.js>; as=script; rel=preload X-Akamai-Transformed: 9 40439 0 pmb=mRUM,2 Expires: Fri, 23 Jan 2026 12:15:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 12:15:25 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: .AspNetCore.Antiforgery.sGkP5zti-VQ=CfDJ8PoO_xNp3Pg0ocfMYc41jFx7jvYYrF1s1RPoXDYtIXMoMjTDXfLrF8GcXg_dvxFSjIoTxLXlIAXZNjoIovPgJtcj8M6Aw8t6Ojus_ACJUm9vMf0sqAzG7bRwUP-03J9YfQvAae1KhPXNZe8JFltzw7k; path=/; samesite=strict; httponly Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=103 Server-Timing: origin; dur=573 Server-Timing: ak_p; desc="1769170524821_389224197_357278402_67486_4485_0_4_-";dur=1
Open service 23.50.131.133:443 · ultragard.getgard.com
2026-01-09 07:38
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN Link: </dist/677-4566738f1ba361b282fb.min.css>; as=style; rel=preload,</dist/layout-7fdb90b38e081c42af98.min.css>; as=style; rel=preload,</dist/677-89237d2f804fa6dbf2ca.min.js>; as=script; rel=preload,</dist/layout-519f002156b2ca0c1ee3.min.js>; as=script; rel=preload,</dist/531-69de48ed18c73c2dadda.min.js>; as=script; rel=preload,</dist/Index-795624509213de05ebfb.min.js>; as=script; rel=preload X-Akamai-Transformed: 9 40439 0 pmb=mRUM,2 Expires: Fri, 09 Jan 2026 07:38:12 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 07:38:12 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: .AspNetCore.Antiforgery.sGkP5zti-VQ=CfDJ8PoO_xNp3Pg0ocfMYc41jFyYzqpnHMXfM3P1CS15b4-qIagFsn88q7nRVLBXk8aaSsyGD_FM5Hq_u2JA9liEKYDZXgd7ZKxvpo_eXMmtR0IAWB-RF_kXm59-skI3KfupbvdCHnWUtnZOvtSwidhmSGA; path=/; samesite=strict; httponly Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=322 Server-Timing: origin; dur=642 Server-Timing: ak_p; desc="1767944291660_389224222_4080103516_96239_9636_12_40_-";dur=1
Open service 23.50.131.133:443 · ultragard.getgard.com
2026-01-02 08:13
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 375 Expires: Fri, 02 Jan 2026 08:13:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 08:13:46 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767341626533_389224222_2512589694_10_6000_236_261_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://ultragard.getgard.com/" on this server.<P> Reference #18.1e173317.1767341626.95c3137e <P>https://errors.edgesuite.net/18.1e173317.1767341626.95c3137e</P> </BODY> </HTML>
Open service 23.50.131.133:443 · ultragard.getgard.com
2025-12-23 04:41
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN Link: </dist/677-4566738f1ba361b282fb.min.css>; as=style; rel=preload,</dist/layout-7fdb90b38e081c42af98.min.css>; as=style; rel=preload,</dist/677-89237d2f804fa6dbf2ca.min.js>; as=script; rel=preload,</dist/layout-519f002156b2ca0c1ee3.min.js>; as=script; rel=preload,</dist/531-69de48ed18c73c2dadda.min.js>; as=script; rel=preload,</dist/Index-795624509213de05ebfb.min.js>; as=script; rel=preload X-Akamai-Transformed: 9 40439 0 pmb=mRUM,2 Expires: Tue, 23 Dec 2025 04:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 23 Dec 2025 04:41:45 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: .AspNetCore.Antiforgery.sGkP5zti-VQ=CfDJ8PoO_xNp3Pg0ocfMYc41jFzbSqtUyz9xp5AHD4GJ0pSEm0aQvEVa-3Q5UPjiwGzJRG3eoBWvkguGfSbty635OFAAuugzmHz_qj_v04VAFrbpWyABM1VBhbqEr_YcrAxiV8eP10GmYhcStPPvNOHvCcw; path=/; samesite=strict; httponly Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=591 Server-Timing: origin; dur=629 Server-Timing: ak_p; desc="1766464903909_389224222_834249531_121808_31870_14_43_-";dur=1