Security
Free Server Signature Test
Use our free server signature test to check whether your server reveals its software and version. Enter any web address below and get your result in seconds, with plain-English fixes.
Free. You see the verdict at once; add your name and email to read the full result. We only read what is public on the page.
What this server signature test checks
Reads the Server and X-Powered-By headers and the signature on the error page for software names and version numbers.
The server signature test reads the Server and X-Powered-By headers and any signature in error pages and reports whether they reveal exact software and version numbers.
Why use a server signature test
Telling the world exactly which software and version you run helps attackers find known weaknesses for that version.
Developers and owners hardening a server. Use the server signature test after software updates.
How to use the server signature test
- Paste the full address of the page you want to test into the box at the top of this page. Use the exact page you care about, such as your home page or a service page, because each page can give a different server signature test result.
- Press the button and wait a few seconds. The tool fetches the page the way a visitor and a search engine would, then runs its checks. Nothing is installed, and you only need to enter your name and email to read the full result.
- Read the verdict and the plain-English notes, make the changes listed under the fixes, then run the test again to confirm the problem is gone. Keep a note of the date and the result so you can show progress.
How to read your server signature test results
- Pass means generic or absent headers.
- Warning means a product name without a version.
- Fail means exact versions that help attackers match known flaws.
How to fix problems the server signature test finds
- Apache: ServerTokens Prod and ServerSignature Off.
- nginx: server_tokens off.
- PHP: expose_php = Off.
- Keep server software up to date regardless.
Common mistakes
- Hiding the header and never patching.
- Showing the PHP version.
- Leaving default error pages.
Want everything fixed in one go? Our free website grader checks 40+ things at once, and you can ask for a free quote if you would rather have a person do it.
Server signature test for Cayman Islands websites
Financial and professional firms in the Cayman Islands face strict client expectations about security. Trimming server signatures is a cheap hardening step. Verify it with the server signature test.
Ranking in the Cayman Islands is a local contest: Google treats a .ky domain as aimed at the territory, and it rewards pages that name the places people search for, such as George Town, Grand Cayman, West Bay and Seven Mile Beach. After you act on your server signature test result, work through our SEO guides for Cayman businesses, read how the WebGuru features fit together, or see the pricing for the full report.
Cayman Islands local SEO checklist
- Name the place in your headings and first paragraph: George Town, Grand Cayman, West Bay, Cayman Brac or Little Cayman, whichever you serve.
- Keep your business name, address and phone number identical on your website, Google Business Profile, Facebook page and local directories.
- Use a .ky domain where you can. Google treats country-code domains as a signal that your audience is in that country.
- Add a Google Business Profile, ask happy customers for reviews and answer every review.
- Write for local questions, such as hurricane preparation, work permits or ferry times, in the words your customers would use.
Further reading
Frequently asked questions
Is hiding the version enough to be secure?
No. It is one small layer. Updating software matters far more.
Will hiding it break anything?
No. It only removes details from headers and error pages.
Is hiding the version enough?
No. It reduces information leakage, but patching is what protects you.
How do I hide it?
Apache: ServerTokens Prod and ServerSignature Off. Nginx: server_tokens off.
Related free SEO tools
- Directory listing checker
Test whether your server lists the files inside folders.
- Http headers checker
Review your website's server details and response.
- Https test
Check your website's HTTPS and SSL certificate.
More security tools: google safe browsing check, website blacklist check, email address obfuscation.