Skip to main content

Security fix guide

How to Fix Server Header Disclosure

Server header disclosure means responses reveal server, framework, or version details that attackers can use for fingerprinting.

Run Full Website Security Scan

What the issue means

Server header disclosure means responses reveal server, framework, or version details that attackers can use for fingerprinting.

Why it matters

Reducing unnecessary version details makes automated targeting harder and keeps public responses cleaner.

How to check it

Inspect response headers for Server, X-Powered-By, framework, or version headers.

How to fix it

Disable or minimize server and framework headers where your platform allows it.

Configuration examples

Nginx
Set server_tokens off; and remove upstream disclosure headers where appropriate.
Apache
Use ServerTokens Prod and ServerSignature Off.
Vercel / Next.js
poweredByHeader: false
Cloudflare
Use response header modification rules to remove unnecessary disclosure headers.

Related fix guides