Remove the X-Powered-By HTTP header

Objective

  • Remove the X-Powered-By HTTP header

To remove the X-Powered-By HTTP header from each response from ASP.NET, add the following code to the web.config file:

<system.webServer>
<httpProtocol>
 <customHeaders>
 <remove name="X-Powered-By" />
 </customHeaders>
 </httpProtocol>
 </system.webServer>