developer-roadmap/src/data/best-practices/api-security/content/remove-fingerprint-header.md

Remove Fingerprints

Remove fingerprinting headers (i.e. x-powered-by etc) from the HTTP request.

Fingerprinting headers can be used to identify the web server and its version. This information can be used by attackers to identify vulnerabilities in the web server and exploit them.