Shrink the surface
Recon is passive and unstoppable, so defence is about having less to find:
Tip: Keep an inventory of your own assets and decommission forgotten ones, don't leak stack details in headers or verbose errors, keep admin and internal APIs off the public internet, and monitor logs for the burst of 404s that content discovery produces.