Remove the X-Powered-By header

proxy_hide_header X-Powered-By;

Header always unset X-Powered-By

header -X-Powered-By

// next.config.js
module.exports = {
  poweredByHeader: false,
};

// helmet removes X-Powered-By by default
const helmet = require("helmet");
app.use(helmet());

// Or manually
app.disable("x-powered-by");

// app/Http/Middleware/RemoveHeaders.php
public function handle($request, Closure $next)
{
    $response = $next($request);
    $response->headers->remove('X-Powered-By');
    return $response;
}

# config/application.rb
config.action_dispatch.default_headers.delete('X-Powered-By')

# application.properties
server.server-header=

# .htaccess
Header always unset X-Powered-By

# Or functions.php
header_remove('X-Powered-By');

builder.WebHost.ConfigureKestrel(options =>
{
    options.AddServerHeader = false;
});