Forum Discussion

pinkzeppelin's avatar
pinkzeppelin
Icon for Altostratus rankAltostratus
Apr 10, 2023

How to block web site technologies information with ASM/Advance WAF

Hi, How can we block what technologies are used on our website on ASM to protect web-sites like buildwith.com. Thanks.
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP

Hi pinkzeppelin,

it is difficult to block sites like builtwith or wappalyzer from profiling your web application.
builtwith offers a site for removing your site data: https://builtwith.com/removals 
wappalyzer offers some guidance how to hide the technologies you are using from their scanner: https://www.wappalyzer.com/articles/how-to-hide-technologies-from-wappalyzer/

Also F5 offers some guidance and also some information on why it is difficult to hide your technology: K35304481: Is there any way to prevent ''Wappalyzer'' from detecting my server technology by F5 ASM? 

These tools are often using your browser for profiling the technologies of a website. Webservers, frameworks and CMS can be easily identified by Headers, file extensions or cookies. You cannot identify these tools by their user-agent or source IPs. Best you can do is to hide and obfuscate your technology stack.

KR
Daniel