https://shipreadyai.dev/learn/findings/o5-version-disclosure

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# A response header names a software version

Naming the exact version tells anyone scanning the internet which known issues to try first against your host.

## Why AI-built apps get this

Builders leave traces: a header, a build artefact, a familiar path, a meta tag nobody removed. On its own a fingerprint is harmless. It becomes useful to someone else when a class of issue is reported against a particular builder and they want a list of apps to try it on.

## Evidence line

x-powered-by: Express, build artefact names the framework

## The fix

Remove or shorten the Server and X-Powered-By headers in your hosting settings. Observed: {value}.

## Prompt

Your responses announce the server software ({value}). Remove or shorten the Server and X-Powered-By headers in your server or hosting settings.
