Attackers can obtain a lot of information about your servers and network by looking at the response header your server returns.

To give attackers a little information as possible, you can remove the HTTP response header in Windows IIS.

To remove the HTTP response header in Windows IIS

• Read the instructions in the following links:

  • https://github.com/dionach/stripheaders

  • https://www.saotn.org/remove-iis-server-version-http-response-header/