Website Server Checker

See what a website's own response headers report about its server software.

What is a website server checker?

A website server checker shows what a site says about the software running behind it. Many web servers include a Server header in their responses, such as nginx, Apache or cloudflare, and some applications add an X-Powered-By header naming the language or framework, such as PHP/8.2 or Express. This tool reads both headers and shows them clearly, with the HTTP status code.

It is a quick, non-intrusive way to get a first idea of a site's technology.

How the website server check works

The tool sends a single, normal request to the address you enter, adding https:// if it is missing, and follows up to five redirects. It then reads the headers from the final response. Nothing else is probed or scanned: the result is only what the server chose to say about itself.

Self-reported, not verified

Server headers are written by whoever configures the server. They can be shortened, changed, removed or replaced by a CDN or proxy in front of the real server. Treat the result as the site's own statement, not as proof.

How to use the website server checker

  1. Enter a domain, such as example.com, or a full page address.
  2. Press Check Server.
  3. Read the Server header, the X-Powered-By header and the status code.
  4. If both say "Not disclosed", the site does not reveal this information.

What the server results mean

Server header

This normally names the web server or the service in front of it. A value such as cloudflare means a CDN answered the request, so the origin server behind it stays hidden. Some servers also add a version number, such as Apache/2.4.58.

X-Powered-By header

This names the language or framework that built the response. Many sites remove it, because it reveals details that are not needed by visitors.

Not disclosed

The server did not send the header. This is common and often deliberate, especially on larger sites and on sites behind a CDN.

Should you hide your server details?

Showing exact software versions does not create a weakness on its own, but it makes it easier for automated scanners to match a site with known problems in old versions. Many administrators therefore remove version numbers from the Server header and turn off X-Powered-By. Keeping the software up to date matters far more than hiding its name.

Common Server header values

  • nginx: a popular high-performance web server, often used in front of other servers.
  • Apache: a long-established web server, common on shared hosting.
  • LiteSpeed: a fast web server used by many shared hosts, often with WordPress.
  • Microsoft-IIS: Microsoft's web server for Windows.
  • cloudflare: the Cloudflare CDN answered the request.

Common uses

  • Seeing whether a site sits behind a CDN.
  • Checking that a version number has been hidden after a server hardening change.
  • Getting a rough idea of a competitor's or client's hosting stack.
  • Confirming which web server a new hosting account uses before following setup guides written for a specific server.

Common problems and fixes

The header shows your CDN, not your server. That is expected; the CDN answers first. Check the origin server directly from your hosting panel if you need its details.

A version number is shown. On Apache, set ServerTokens Prod; on Nginx, set server_tokens off. For PHP, set expose_php = Off to remove X-Powered-By.

X-Powered-By is missing. Many hosts and frameworks now remove it by default, so its absence is normal and nothing needs fixing.

Related tools

Frequently asked questions

How can I find out what server a website uses?

Enter the address in the website server checker. It shows the Server and X-Powered-By headers the site sends, which often name the web server, CDN or framework. If both are hidden, check the IP Lookup to see which hosting network the address belongs to.

Is the server information always accurate?

Not necessarily. These headers are set by the site's own configuration and can be changed, shortened or removed. A CDN or proxy may also replace them with its own name. The tool shows exactly what was received, so treat it as the site's own statement rather than verified fact.

Why does the Server header say cloudflare?

The site uses Cloudflare as a CDN or proxy, so Cloudflare's servers answer requests first and pass them on to the real server behind it. The origin server's software stays hidden. The same happens with other CDNs, which may show their own names in this header.

Should I hide the Server header on my website?

Hiding the version number is a sensible small step, because it gives automated scanners less to work with. It does not make an outdated server safe, though. Keeping the server software and applications updated is far more important than hiding their names.

What does X-Powered-By tell me?

It names the technology that generated the page, such as PHP, ASP.NET or Express, sometimes with a version number. It is not needed by browsers, so many sites remove it. If your own site shows it, you can usually turn it off in the language or framework settings.

Does this tool scan the server for vulnerabilities?

No. It makes one ordinary request, the same kind a browser makes, and reads the headers in the reply. It does not probe ports, test for weaknesses or try to access anything. It only reports what the server openly sends to every visitor.

Why do both headers say "Not disclosed"?

The server was configured not to send them, or a CDN or proxy removed them. That is common on well-maintained sites and is not a problem. The status code is still shown, so you can confirm the site responded even though it does not name its software.