The most common form of API documentation for RESTful APIs (which are the most common type of web API) is a collection of Swagger files based on the OpenAPI specification. Ideally, API documentation is created by developers when an API is designed or implemented. In reality, however, API documentation is frequently out of date, resulting in a mismatch between real world API usage and documentation. To address this issue, some API security platforms, including Neosec, can generate Swagger files from the actual API activity, highlighting the gaps between what is documented and what is actually deployed - an integral component in any API risk assessment.