All fixes

Disable the Spring Boot beans endpoint

tech-spring-beans

The beans endpoint prints every bean and how it is wired, which is a map of your internals. Drop it from the exposed actuator endpoint list.

Why this matters

Spring Boot's beans endpoint reveals application architecture — reconnaissance data that maps your internals but is not directly exploitable.

Spring Boot

  1. 1 Restrict actuator endpoint exposure in application.properties or application.yml
  2. 2 Only expose the endpoints you need (typically just health and info)
properties 
# application.properties
management.endpoints.web.exposure.include=health,info
management.endpoint.beans.enabled=false
Spring Boot docs

Does your app still have this?

Scan your domain