The purpose of this blog post is to discuss how to remove unwanted HTTP response headers from the response. Typically we have 3 response headers which many people want to remove for security reason. Server – Specifies web server version. X-Powered-By – Indicates that the website is “powered by ASP.NET.” X-AspNet-Version – Specifies the version of ASP.NET used. Before you go any further, you should evaluate whether or not you need to remove these headers. If you have decided to remove these headers because of a security scan on your site, you may want to read the following blog post