← Static Shield

Fingerprinting

Can you hide that a site runs WordPress?

Largely, yes — Fingerprint Shield removes most of the common public markers (the generator tag, discovery links, predictable asset paths) that reveal WordPress at a glance. It's a useful complement to real route isolation, not a substitute for it.

What actually reveals WordPress

By default, WordPress leaves several public markers behind: a generator meta tag naming the exact version, RSD/wlwmanifest discovery links, wp-emoji references, and predictable wp-content/wp-includes paths in every page's HTML.

What Fingerprint Shield removes

Fingerprint Shield strips or rewrites these markers from the served static release, so an automated scanner has fewer easy signals to latch onto before it even tries anything.

Why this isn't the whole answer

Hiding fingerprints reduces casual, automated identification — it doesn't make the underlying routes unreachable on its own. Pairing it with the Attack Surface tab and Zero-WordPress Mode (Pro) is what actually restricts what's reachable, rather than just what's labeled.

Related

See how this applies to your own site

Static Shield Lite is free to install and inspects your actual WordPress install, not just the public surface.

Get Static Shield