Server signature checker
What is a Server Signature Checker?
The Server Signature Checker reads the Server HTTP response header, which servers use to advertise the software (and sometimes version) powering the website, such as nginx, Apache, or a CDN provider.
Why It Matters
- Security through obscurity — Advertising exact server software and version numbers gives attackers a head start on finding known vulnerabilities for that specific version.
- Infrastructure fingerprinting — Competitors or researchers can use this header to identify what stack and hosting a site runs on.
- Best practice — Many security guides recommend suppressing or genericizing this header in production.