How to fix server version on Webflow
Remove or suppress HTTP response headers that advertise your server software name and version to the public internet.
Steps for Webflow
- Webflow's hosting layer controls 'Server' headers — they cannot be changed from the Webflow Designer or Project Settings.
- For custom code or API calls made from Webflow Logic or embedded scripts, ensure any server-side code you control suppresses its own headers.
- Add Cloudflare as a proxy (set Webflow's custom domain DNS to Cloudflare, enable proxy/orange-cloud), then use Rules → Transform Rules → Modify Response Header to remove 'X-Powered-By'.
- Verify in DevTools that the header is absent or neutralised after Cloudflare is active.
What is server version?
Every time a browser (or a bot) requests a page from your store, your web server sends back a set of "response headers" — invisible metadata about the response. Two of these headers, `Server` and `X-Powered-By`, often broadcast exactly what software is running your site and which version it is (for example, `Server: Vercel` or `X-Powered-By: Next.js`). This is called "server version disclosure" or "technology fingerprinting." While the header itself doesn't break anything, it acts like a name-badge that tells the whole internet: "Here's exactly what I'm running."
Attackers routinely scan millions of websites looking for servers running known vulnerable versions of software. When your headers announce your exact stack, you become a much easier target — automated exploit tools can match your version against public vulnerability databases (CVEs) and launch targeted attacks in seconds, without any human involvement. Suppressing these headers is a recognised security hardening step that reduces your "attack surface" and is increasingly expected by security audits, PCI-DSS assessments, and enterprise buyers reviewing your store. It also prevents competitors or scrapers from trivially identifying and copying your technology stack. Fixing it is usually a quick-win configuration change that has zero impact on site speed or user experience.
See the complete Server version guide for every platform and the full background.
Not sure if your Webflow store has this?
Run a free SEOLZ scan — we’ll find server version and every other issue across your whole site.
Scan my site free