HTTP Methods Scanner
Checks whether the server advertises risky HTTP methods like TRACE, PUT or DELETE it shouldn't.
What it checks
This scanner asks your server which HTTP methods it supports and detects whether it advertises risky methods like TRACE, PUT or DELETE. It flags when the server offers verbs that a normal website should not expose.
Why it matters
Methods like PUT or DELETE could let an attacker upload or delete files if they are not tightly controlled, and TRACE has been used in attacks to steal session data. Leaving them enabled without need needlessly widens your site's attack surface.
How to fix it
Configure your server or CDN to allow only the methods your site actually uses, typically GET, POST and HEAD. Any risky methods you do not need should be disabled in the server configuration.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free