Server version disclosed
Check id: hdr.server_leak · fix effort: low
What it means
Your responses advertise exact server software versions, which is free reconnaissance for attackers.
The technical detail
Server or X-Powered-By includes a version string. Suppress or genericize it.
How to fix it
- Suppress or genericize the header (Apache ServerTokens Prod, nginx server_tokens off, remove X-Powered-By).
Does your domain have this problem?
Run a free scan, takes about ten seconds.