How can we help?

Answers from the HostedScan team on setting up scans, internal network scanning, reports, and billing, and on fixing scans that fail or run long.

HostedScan Security

Configuration

Scanning your Open API and Swagger endpoints

Configuration

Scanning your Open API and Swagger endpoints

Scan your API with OWASP ZAP by uploading your OpenAPI or Swagger file, so the scanner finds the endpoints your API exposes and tests them for SQL injection.

Last updated on 28 Oct, 2026

- Available on Premium tier plans -

Configuring the OWASP ZAP scanner with your Open API or Swagger specification file gives the scanner better insight into the endpoints your application exposes. Doing so improves the thoroughness and detail of OWASP ZAP when testing your API, for scanning for risks like SQL injection, Remote Execution Vulnerabilities, and others.

We've written up a detailed guide to configuring the API Scanning feature here .

Did you find this article helpful?

Can HostedScan integrate with my ticketing system?