Web security
Server software versions hidden
Security headers, HTTPS enforcement, cookies and cross-origin rules of the website.
Why it matters
Exact version numbers let attackers look up which public exploits work against your server, and automated tools target vulnerable versions specifically.
How to fix it
Quick fix · under 1 hour- Turn off version banners in the web server and the application runtime.
- Keep the software updated - hiding the version is not a replacement for patching.
- Reload the web server and re-run the scan to confirm.
nginx
server_tokens off;
Apache
ServerTokens Prod ServerSignature Off
PHP (php.ini)
expose_php = Off
Test this now, free: Security headers checker - no sign-up.
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free