Technology
Version disclosure check
Your site announces its exact software versions in its headers, which tells attackers which known flaws to try.
Check this on your own domain now. It is free with a DomainGuard account, reads only public records, and gives you a report you can send to whoever runs your website.
What we look at
We read the Server and X-Powered-By headers for version numbers.
Why it matters to your business
Hiding versions does not fix anything by itself, but announcing them makes your site easy to match against lists of vulnerable versions, which is exactly how automated attacks pick targets.
How to fix it
- Turn off version disclosure (Apache: ServerTokens Prod; nginx: server_tokens off; PHP: expose_php = Off).
- Remove the X-Powered-By header.
- And keep the software updated; that is the actual fix.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.
Keep an eye on it
A one-off check tells you how things stand today. On Starter and up, DomainGuard re-checks the domains it watches every day and alerts you in the app when something important changes, so you hear about it before a customer does.