Your server is sending an X-Powered-By response header that reveals which technology framework is running your website to anyone who inspects your HTTP headers.
Why this matters
Attackers use this information to narrow their targeting - if they know your exact platform and version, they can look up known vulnerabilities specific to it and focus their probing. Removing this header does not fix vulnerabilities, but it removes one piece of information that makes targeted attacks easier.
How to fix it
Configure your server or hosting environment to remove the X-Powered-By header from all responses. Most platforms have a one-line setting to suppress it.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.