Version Fingerprint Reduction SOP

Version Fingerprint Reduction SOP
Run on every site to slow automated targeting.

— Step 1: Remove the generator meta tag and version query strings from enqueued assets.
— Step 2: Delete or block readme.html and license.txt — they print your exact core version.
— Step 3: Strip the X-Powered-By and server-version headers at the web server.
— Step 4: Block /wp-includes/ direct access except for required static assets.
— Step 5: Understand the limit: this is friction, not a fix. Patch on schedule regardless of how hidden the version is.
— Step 6: Verify with a fingerprinting scanner that core, theme, and plugin versions aren't trivially readable.

Run this every time.