Skip to content
RU Sign In
RU
← All HTTP Headers
Response

Server

Identifies the web server software. Should be minimized for security reasons.

Syntax

Server: <product>

Example

Server: nginx

Description

Server identifies the software used by the origin server. Common values: nginx, Apache, cloudflare.

Can expose details that help attackers find known vulnerabilities. Best practice: remove or set to a generic value.

In nginx: server_tokens off;. In Apache: ServerTokens Prod.

How real sites send this header

Home-page responses of 502 popular sites from the enterno.io /check catalogue, checked in the last 30 days.

88.4% (444 of 502) send Server.

Most common values:

  • cloudflare — 117 sites
  • nginx — 103 sites
  • QRATOR — 33 sites

See it on: google.com, discord.com, github.com, cloudflare.com, habr.com

Check if your website sends this header correctly

Check your headers →

Related Articles

PHP-FPM and 502: queue, pm.max_children and pool sizing
See how a saturated PHP-FPM pool can contribute to 502 or 504. Inspect logs and the listen queue, then estimate pm.max_children from available memory.
Nginx TLS configuration: an annotated path toward A+
Annotated nginx TLS configuration covering protocols, certificate chains, HSTS and validation. An A+ grade depends on a real test of the entire delivery path.
Let’s Encrypt ended OCSP: what to check on your server
Let’s Encrypt shut down OCSP on August 6, 2025. Check stapling, certificate metadata and nginx settings without mistaking missing OCSP for revocation.

Related Headers

Connection
Controls whether the network connection stays open after the current transaction finishes.
Content-Disposition
Indicates whether the response should be displayed inline or downloaded as a file attachment.
Content-Encoding
Specifies the compression algorithm applied to the response body, such as gzip or brotli.
Content-Length
Specifies the size of the response body in bytes.
Content-Type
Indicates the media type of the response body, telling the browser how to interpret and display the content.
Date
Indicates the date and time at which the response was generated by the server.

Related guides

Longer-form reading on this topic from the knowledge base.

Automate this check

Set up continuous monitoring and get an alert when something breaks. No manual runs to remember.

Start free

Related Articles

HTTP

How to Fix 404 Not Found Errors: Visitors, nginx, Apache, CDN

19 min · Read → HTTP

HTTP Methods Explained: GET, POST, PUT, DELETE and Beyond

6 min · Read → HTTP

Server-Sent Events vs WebSockets: Which to Use for Realtime

5 min · Read →
All articles →

Start monitoring for free

Sign up and get access to API, monitoring and notifications

Create Account API Documentation