Hide the Apache Web Server Version number

There are two config directives that controls Apache version.

The ServerSignature directive adds a line containing the Apache HTTP Server server version and the ServerName to any server-generated documents, such as error messages sent back to clients.

The ServerTokens directive controls whether Server response header field which is sent back to clients includes a description of the generic OS-type of the server as well as information about compiled-in modules.

Add the following to .htaccess

ServerSignature Off
ServerTokens Prod
%d bloggers like this: