Glossary
Fingerprint
What your app quietly tells the internet about how it was built.
What it means
A fingerprint is the collection of small signals that identify your stack from outside: a header naming the host, a build artefact naming the framework, a cookie name, a familiar path, a meta tag left by a builder.
On its own it is not a problem. Every app on the internet has one. It matters because it tells someone which known issues are worth trying against you, and it turns a general scan into a targeted one. When CVE entries for AI-generated code climb month over month, being identifiable as a particular builder is a filter someone can search on.
A check records what it can see so the fingerprint is a fact rather than a guess. Reducing it is mostly removing what you do not need to publish.
Findings that use this term
Incidents where it mattered
No incident in the library maps to this one yet.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026