← All fix guides
Website · Fix guide

Server header is exposed

The response identifies part of the serving software. This is informational.

The concept

What is the Server header?

The Server response header may identify the web server, proxy or CDN handling a request. Detailed product versions can provide unnecessary reconnaissance information, although hiding them is not a substitute for patching.

Recommended action

What to do next

  1. Avoid detailed version strings.
  2. If desired, suppress or generalise the header at the web server or proxy.
  3. Prioritise patching over hiding the product name.
Confirmation

How to verify the fix

Inspect responses from both the CDN and origin.

Interpret carefully

When this result may be wrong

A generic server name is low risk and may be inserted by infrastructure you do not control.

Ready to check again?

Run a fresh report after DNS caches and platform changes have had time to update.

Check a domain