Technology
Version disclosure check
Your site announces its exact software versions in its headers, which tells attackers which known flaws to try.
Check this on your own domain now. It is free with a DomainGuard account and works on any domain. The check reads only what your domain publishes, and gives you a report you can send to whoever runs your website.
What we look at
We read the Server header for a version number, and flag an X-Powered-By header that names the software behind the site (a CDN's or hosting platform's own label is ignored).
Why it matters to your business
Hiding versions does not fix anything by itself, but announcing them makes your site easy to match against lists of vulnerable versions, which is exactly how automated attacks pick targets.
How to fix it
- Turn off version disclosure (Apache: ServerTokens Prod; nginx: server_tokens off; PHP: expose_php = Off).
- Remove the X-Powered-By header.
- And keep the software updated; that is the actual fix.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.
Keep an eye on it
A one-off check tells you how things stand today. On Starter and up, DomainGuard re-checks the domains it watches every day and alerts you in the app when something important changes, so you hear about it before a customer does.