Checks

No common disclosure headers

Server, X-Powered-By, X-AspNet-Version, and X-Generator were not on the response.

Why it matters

Those headers are the ones this scan treats as routine stack disclosure.

What to do

No change is required for these headers. Technology detection can still recognize a product another way.

Reference

Server and framework disclosure headers reveal implementation details useful to attackers.

OWASP WSTG — Fingerprint Web Server