Security finding
Response headers name the server software and its version
Security Info Severity: Low
Part of the audit Information exposure. Finding id: security.versionHeaders.
What it costs you
A stranger learns the exact version you run and can look up the flaws published for it. Hiding the number fixes none of them, it only stops advertising them.
What to do
Stop sending the version, and keep the software itself up to date.
What it checks
- Software versions shown in page headers