A website called Drupal X-Ray can detect a Drupal site's Drupal version and modules in use. So if I don't want others to find that information, what can I do?


1 Answer 1


You can look at deploying a site and scrubbing it of files like CHANGELOG.txt/INSTALL.txt automatically. Other things, like removing the meta generator tag in the head also can hide that it is Drupal, but nothing is bulletproof. For example, typing 'Drupal' in the browser devtools window is another way to tell if a site is Drupal or not (in most cases). You could also try banning requests originating from that domain/service at the server level.

Not the answer you're looking for? Browse other questions tagged or ask your own question.