Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Out of curiosity, does anyone know how builtwith.com works? How does it identify the platform or app a website is using? And most importantly does anyone know how to hide the details from it?

Somehow I'm not very comfortable with users being able to identify the platform I am in.

share|improve this question
add comment

3 Answers

up vote 7 down vote accepted

From their suggestion page:

The technology has to be discoverable in either the page body, cookies or server headers.

In theory, this could also involve things like testing known locations, such as http://example.com/wp-admin/

Most applications let you hide various bits of such identifying information, but on the whole: get over it if not. Hiding what apps you use isn't going to make nearly as much difference as keeping them up to date and secure.

share|improve this answer
1  
There is a meta tag "generator" which they are probably looking for, as that gives a fairly definitive answer, if present. –  paulmorriss Jul 13 '12 at 8:18
    
Thanks for your input Su! I guess i shouldn't be such a a paranoid :) –  bernie Jul 17 '12 at 2:44
    
I have changed my default link and built with still has the information about my website –  c s h Jun 6 '13 at 21:04
add comment

I think they test some path those are unique path for CMSs and index your website info in their databases. I try to use "IP Deny Manager" in Cpanel to denny IP of those domains in order to prevents from unwanted indexing by those sites.

share|improve this answer
add comment

If you are using Apache, you can turn off its signature as detailed on this page: http://www.shanison.com/2012/07/05/unset-apache-response-header-protect-your-server-information/

Sites can tell what server software you are running through the Server and X-Powered-By headers, as well as by message placed on error pages by the server. Use the following directives in httpd.conf to turn them off:

ServerSignature Off
ServerTokens Prod
Header unset Server  
Header unset X-Powered-By

For the Header command to be used, you'll need to be running Apache 2.x or higher with mod_headers enabled:

LoadModule headers_module modules/mod_headers.so  
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.