CHECK GLOSSARY · SEC-002

Server version disclosed

In plain words: Exact software versions help attackers target known vulnerabilities.

How to fix it

Hide version numbers in Server and X-Powered-By.

Official sources

• OWASP: secure headers

Related checks

• CACHE-001: Weak browser caching
• SEC-001: Missing security headers
• NOTFOUND-001: Soft 404 or bare 404 page
• SPF-001: No SPF record

Check my site free → All checks