Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a33280e8ef196c0648f047d2bfea34cc08f95382
Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /cluster/jobs/{id}/processing
GET /cluster/jobs
GET /cluster/jobs/{id}
GET /cluster/licenses
GET /cluster/nodes
GET /config
GET /jobs/{id}/log
GET /jobs/{id}/metrics
GET /jobs/{id}/parameters
GET /ping
Open service 52.213.12.1:443 · grb1.portchain.com
2026-01-23 06:53
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1203
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 26 Jan 2023 22:29:25 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 23 Jan 2026 06:53:38 GMT
Connection: close
Page title: Gurobi Remote Services Agent
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Gurobi Remote Services Agent</title>
<link rel="icon" type="image/png" href="/img/favicon-16x16.png" sizes="16x16">
<link rel="icon" type="image/png" href="/img/favicon-32x32.png" sizes="32x32">
<link href="/css/grbrs.css" rel="stylesheet">
<style>
p {
max-width: 800px;
}
a {
color: #caf7ff; !important;
}
</style>
</head>
<body>
<a href="https://www.gurobi.com"> <img src="img/gurobi-logo.png"></img></a>
<h1>The Gurobi Remote Services Agent is functioning normally.</h1>
<p>
The Remote Services agent must be running on all the nodes that will form a Gurobi cluster.
Within a cluster, the agents are connected together to monitor themselves and to keep updated the status of the
cluster. In addition, the agent provides an interface so that client programs or client tools (grbcluster and
gurobi_cl) can communicate with the cluster. When a client submits an optimization job, the agents will coordinate
among themselves to decide where to execute the job.
</p>
<p>
The agent also provides a <a href="swagger.html">REST API</a> for advanced integration.
</p>
</body>
</html>
Open service 52.213.12.1:443 · grb1.portchain.com
2026-01-09 12:06
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1203
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 26 Jan 2023 22:29:25 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 09 Jan 2026 12:06:19 GMT
Connection: close
Page title: Gurobi Remote Services Agent
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Gurobi Remote Services Agent</title>
<link rel="icon" type="image/png" href="/img/favicon-16x16.png" sizes="16x16">
<link rel="icon" type="image/png" href="/img/favicon-32x32.png" sizes="32x32">
<link href="/css/grbrs.css" rel="stylesheet">
<style>
p {
max-width: 800px;
}
a {
color: #caf7ff; !important;
}
</style>
</head>
<body>
<a href="https://www.gurobi.com"> <img src="img/gurobi-logo.png"></img></a>
<h1>The Gurobi Remote Services Agent is functioning normally.</h1>
<p>
The Remote Services agent must be running on all the nodes that will form a Gurobi cluster.
Within a cluster, the agents are connected together to monitor themselves and to keep updated the status of the
cluster. In addition, the agent provides an interface so that client programs or client tools (grbcluster and
gurobi_cl) can communicate with the cluster. When a client submits an optimization job, the agents will coordinate
among themselves to decide where to execute the job.
</p>
<p>
The agent also provides a <a href="swagger.html">REST API</a> for advanced integration.
</p>
</body>
</html>