X-RAY // WEB // CDN

SERVER, CDN AND WAF
CHECK.

Find the CDN or WAF in front of a site (Cloudflare, CloudFront, Akamai…), its platform (WordPress, Vercel…) and exposed software versions.

Runs only this check. For all 33 checks at once, use the full Domain X-Ray. Public lookups only; nothing is stored on the server.

CDN

Server, CDN and WAF

WAITING

Enter a domain above to run this check.

01 // WHAT THE CHECK VERIFIES

What the check verifies

Identifies the CDN or the web application firewall (WAF) in front of the site, from its address and headers, and whether the software version is exposed. The site's Server header is not visible from here: Cloudflare replaces it on Worker requests.

02 // WHY IT MATTERS

Why it matters

A version exposed in Server or X-Powered-By makes it easier to look up known flaws of that version.

03 // HOW TO READ THE RESULT

What each result means

WARNING: The software version shows in X-Powered-By, X-AspNet-Version or Server.
INFO: Shows the CDN or WAF and the platform (WordPress, Vercel, Shopify…), identified from the site's address and headers.

ERROR and TIMEOUT mean the query did not finish (the source was down or slow), not a problem with the domain: run the check again.

04 // HOW TO FIX

How to fix

Hide the software version:

# nginx
server_tokens off;

# Apache
ServerTokens Prod
ServerSignature Off

# PHP (php.ini)
expose_php = Off

Would rather have someone else do it? Bit Happens can fix this →

05 // CONTINUE

More checks in Website and HTTPS

Full Domain X-Ray: all 33 DNS, email, HTTPS, certificate and reputation checks at once →