Audit rules

Server Version Disclosed

The Server header reveals a software version number (for example "Apache/2.4.58"). Listed under Security in the plan. In a QuikSEO audit, a failure of this rule has info severity and counts against the score. Below are the exact condition, its exceptions and the sources behind it, followed by the other rules of the same group.

01 — Definition

How This Rule Is Checked

The rule is a pure function of the fetched page: no extra requests, no account settings. The same input always gives the same result.

Rule Severity and Score

Rule id: http.server_header
Group: HTTP
Severity of a failure: Info
Counts in the score: Yes, whenever it applies to the page
Required for a score: No
Replaces the check: header_server

Condition and Exceptions

Condition: Group "Security" in the plan: Server header with a version number → fail (info)
Exceptions: —

Sources

Sources: RFC 9110: HTTP Semantics, section 10.2.4 Server (IETF, Q78)
HTTP Headers Cheat Sheet (OWASP Cheat Sheet Series), Server (OWASP, Q15)

02 — HTTP

Other Rules in This Group

The other checks of the same group, each with its own condition and sources.

No Cache Validatorshttp.cache_validators
HTML Not Compressedhttp.compression
Page Answers With an Error Statushttp.error_status
WWW and Non-WWW Both Serve the Pagehttp.host_variant_duplicate
HTTP Protocol Versionhttp.http2
HTTP Version Not Redirected to HTTPShttp.http_variant_not_redirected
Page Not Served Over HTTPShttp.https
Mixed Contenthttp.mixed_content
X-Powered-By Version Disclosedhttp.powered_by
Redirect Chainhttp.redirect_chain
TLS Certificate Expiring Soonhttp.tls_expiring
Invalid TLS Certificatehttp.tls_invalid