Server or framework version disclosed

Why it matters

Version headers help attackers pick known exploits.

How to fix it

Remove X-Powered-By (Next.js: poweredByHeader: false) and generic Server headers.

How we test it

Passive — runs in the free check, looks only at what a browser can see.