Security Headers
Server & X-Powered-By version headers: free recon for attackers
Your responses may be broadcasting the exact version of your web server and framework. It is not a breach, but it hands attackers a head start. Here is how to turn it off.