CMS Fingerprinting

There aren’t any reliable ones, I’m afraid. There are some plugins that try to hide WP and its plugins/themes, but it doesn’t really work.
NinjaFirewall uses some heuristic detection tricks to confuse or block suspicious bots instead.

Thanks for the response, but I’ve noticed it seems doable with hosted WAFs. I’ve followed up with a message to your sales team on the commercial side. Thanks!

Hi there,
to remove the version numbers, you can try something like, which has helped me in many cases (in functions.php of child theme):

// remove version from head
remove_action('wp_head', 'wp_generator');

// remove version from rss
add_filter('the_generator', '__return_empty_string');

// remove version from scripts and styles
function remove_version_scripts_styles($src) {
	if (strpos($src, 'ver=')) {
		$src = remove_query_arg('ver', $src);
	}
	return $src;
}
add_filter('style_loader_src', 'remove_version_scripts_styles', 9999);
add_filter('script_loader_src', 'remove_version_scripts_styles', 9999);