GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6819f7ca433eb5528e0ed21ebe9cc2bccd75730f4
GraphQL introspection enabled at /api/graphql Types: 99 (by kind: ENUM: 9, INPUT_OBJECT: 31, INTERFACE: 1, OBJECT: 51, SCALAR: 6, UNION: 1) Operations: - Query: Query | fields: features, hub, room, sharingPagesByOwnerIds - Mutation: Mutation | fields: createInvitation, createLinks, createPost, createReply, createRoom Directives: deprecated, include, skip (total: 3)
Open service 13.226.244.72:443 ยท video-test.vyexample.com
2026-01-22 21:20
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Thu, 22 Jan 2026 21:20:40 GMT
X-Request-Id: fac899db-7333-448e-9a40-62f6bf6e4159
X-Runtime: 0.093460
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex
ETag: W/"4dacf1f8a3c1f940f5093983f557546a"
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: default-src * mailto: tel:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'
Set-Cookie: _Shire_session=NnYrK2x5UXFKM3pKdnNveHFqM0dGNU5tTnBJUnNTZHk0ZUQ4alhzbXVmSEhQTXUyaERzQUZCcE1YMFplcDAxNGVlMzdDUUxVL3EyZklqWGwzcWg1YUxsTVpMb1lsRnphS0M1SVVvMUk3VlhsTFVnOUdJbzF2VnhUd3hjeWFsMDVPb3dYTVVYUEVyWTBZS0VzdGpyTnJRPT0tLTJ4dnM3VVZXUGtSVlM2YlVMUzYwZ3c9PQ%3D%3D--cd836f07f0e993dadab7519cde3e07b0320cf22d; path=/; secure; HttpOnly
X-Cache: Miss from cloudfront
Via: 1.1 8e089c6c0c5b8cc7839add40802b8dee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P14
X-Amz-Cf-Id: Glirhn5ZTcRiKDRCQIgzeDbePk1lcc0Dob4e59qQNqr5i1MehGvz4A==
Vary: Origin
Page title: Legacy SSL Hub
<!DOCTYPE html>
<!-- paulirish.com/2008/conditional-stylesheets-vs-css-hacks-answer-neither/ -->
<!--[if IE 8]> <html lang="en" class="no-js ie8 old-ie"> <![endif]-->
<!--[if IE 9]> <html lang="en" class="no-js ie9 old-ie"> <![endif]-->
<!--[if (gte IE 10)|!(IE)]><!--> <html lang="en" class="no-js"> <!--<![endif]-->
<head>
<title>Legacy SSL Hub</title>
<script>
//<![CDATA[
const ENV = (function() {
return {
MULTIPASS_HOST: 'https://auth.vidyard.com',
SHIRE_HOST: 'share.vidyard.com',
ASSET_DOMAIN: '//assets.vidyard.com',
ROLLBAR_CLIENT_ACCESS_TOKEN: '77e1e8e0dd4d4164a328d393aa5d1b1a',
RAILS_ENV: 'production',
DATADOG_ENVIRONMENT: 'production',
DATADOG_CLIENT_TOKEN: 'pub56bc56349208f8f9062002ebe4062cde',
REEFER_API_URL: 'raw.vidyard.com',
};
}());
//]]>
</script>
<link rel="icon" href="/favicon.ico" type="image/x-icon"/>
<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"/>
<meta name="robots" content="noindex, nofollow" />
<meta name="googlebot" content="noindex" />
<meta name="title" content="Legacy SSL Hub" />
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<meta name="generator" content="vidyard.com">
<meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="teUJ2uuImWLHlikgi9mc5+WoBAKFkNxsbqdumlETsT6nuG6+UKFcMcVuGuXBOgxCxukym7swI5It6c0AF8ka4A==" />
<script src="//assets.vidyard.com/share/webpack/js/runtime~common-64694b1ca711cac66eb3.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/vendors~common~hub-scripts/assurance/manifest~hub-scripts/beckman_coulter/manifest~hub-scripts/brand~901e432c-aad4bfe7232b2696ee86.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/vendors~common-39e26c8b16f83ce19abc.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/common-25aea70985dfe60b0519.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/runtime~hub-scripts/remove_partner_query_params-8f266534cf97c463578c.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/hub-scripts/remove_partner_query_params-c4a29e4f739c2a9b4380.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/runtime~hub-scripts/manifest_bootstrap-82de397d9d8570c419f2.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/vendors~common~hub-scripts/assurance/manifest~hub-scripts/beckman_coulter/manifest~hub-scripts/brand~901e432c-aad4bfe7232b2696ee86.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/hub-scripts/manifest_bootstrap-f194b645f54e6397a3ad.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/runtime~hub-scripts/magnum_smoke/manifest-222c9a1e2863742b5aaa.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/vendors~common~hub-scripts/assurance/manifest~hub-scripts/beckman_coulter/manifest~hub-scripts/brand~901e432c-aad4bfe7232b2696ee86.chunk.js" crossorigin="anonymous"></script>
<script src="//assets.vidyard.com/share/webpack/js/hub-scripts/magnum_smoke/manifest-8ca1f73fef52014508e1.chunk.js" crossorigin="anonymous"></script>
<link rel="stylesheet" href="//assets.vidyard.com/share/webpack/css/hub-styles/manifest_bootstrap-bf471e7a.chunk.css" media="screen" />
<link rel="stylesheet" href="//assets.vidyard.com/share/webpack/hub-styles/manifest_bootstrap.bf471e7ad1ea5a3c6ce8.css" media="screen" />
<link rel="stylesheet" href="//assets.vidyard.com/share/webpack/css/hub-styles/magnum_smoke/manifest-e948e2fd.chunk.css" media="screen" />
<link rel="stylesheet" href="//assets.vidyard.com/share/webpack/hub-styles/magnum_smoke/manifest.e948e