hide-powered-by

library 1.1.0 ·javascript

✓ verified Jun 17, 2026

web-framework auth-security

Simple middleware to remove or spoof the X-Powered-By HTTP header. Version 1.1.0 is stable with minimal maintenance. Part of the Helmet.js security middleware family. Differentiates from alternatives by allowing custom header values to mislead attackers. Removing X-Powered-By only obfuscates the framework and is not a strong security measure.

Traffic · last 30 days stale · no recent hits · indexed Sat Apr 25 · updated Sat Jul 11

total hits 9

actors 3 distinct systems

last hit 18d ago AhrefsBot

GPTBot

4

Script

1

top countries 🇺🇸 United States · 🇬🇧 United Kingdom · 🇨🇦 Canada · 🇩🇪 Germany

Resources

githubgithub.com/helmetjs/hide-powered-by ↗

packagewww.npmjs.com/package/hide-powered-by ↗

homepagehelmetjs.github.io/docs/hide-powered-by/ ↗

API endpoints

full doc /v1/registry/hide-powered-by

install /v1/registry/hide-powered-by/install

compatibility /v1/registry/hide-powered-by/compatibility