Tech Stack Detector: Website Technology, CMS & Analytics Lookup

Find out what any website is built with, in bulk. Paste a list of domains and get each site's CMS, ecommerce platform, analytics and tag managers, advertising pixels, marketing automation, CRM, live chat, payment providers, JavaScript frameworks, web server, hosting, CDN and email provider, with versions where the site exposes them.

It checks every website against 7,600+ technology fingerprints in 100+ categories, reads the domain's DNS records (MX, SPF, TXT, NS, CNAME) and TLS certificate, and can render pages in a real browser to catch tools that only appear after JavaScript runs. You also get a market-share report across all the sites you scanned.

---

Highlights

• Bulk technology lookup. Scan 10 or 100,000 websites in one run. Domains, www. hosts and full URLs are all accepted; duplicates are removed.
• Clean, grouped output. Each website comes back as one row with ready-made columns: cms, ecommerce, analytics, tagManagers, advertising, marketingAutomation, crm, liveChat, payments, javascriptFrameworks, webServers, hosting, cdn, emailProvider and more, plus a detailed technologies list with version, confidence, categories, pricing tier and how each one was detected.
• Email and SaaS signals from DNS. MX records show who hosts the mailboxes (Google Workspace, Microsoft 365, Zoho and others). SPF and verification records reveal sending services and SaaS accounts, reported separately in servicesFromDnsRecords so they never get mixed up with what runs on the page.
• Find every site that uses X. Add Shopify, HubSpot or Klaviyo under Technologies to look for and each row gets matchedTechnologies. Turn on Save only websites that match for a ready-made lead list.
• Fast by default, a real browser when you need it. The HTTP scan takes about a second per site. Render pages in a real browser loads the page in headless Chrome and also detects JavaScript globals, the rendered page and background requests.
• Market-share report. Every run writes a SUMMARY JSON and a printable HTML REPORT with the most used technologies and the leaders in each category.
• You only pay for results. Websites that are down, blocked, missing or disallowed by robots.txt are reported with a clear status and are free.

Use cases

• Sales prospecting and lead generation: build lists of online stores on Shopify or WooCommerce, companies on HubSpot or Salesforce, or sites missing a cookie banner.
• Competitor and market research: see which analytics, ad networks and frameworks a market uses, with the share of each.
• Agency audits and pitches: check a prospect's CMS, page builder, hosting, CDN and tracking setup before the first call.
• Lead enrichment: add technographic columns (CMS, ecommerce platform, email provider) to a CRM export.
• Security and IT inventory: list web servers, languages and versions across a portfolio of your own domains.

Quick start

1. Paste websites into Websites, one per line, for example wordpress.org, www.shopify.com, https://vercel.com.
2. Optionally add Technologies to look for.
3. Click Start. Results appear in the Output tab; open the Technology report for the overview.

Input options

Field	Default	What it does
urls		Domains or URLs to scan, one per line. The page you give is scanned (usually the homepage), plus the domain's DNS.
technologiesToFind	none	Technology names to flag on each row, matched case-insensitively against the names in the output.
onlyMatchingSites	false	Save only websites that use at least one of the technologies above. Every successfully scanned website is still charged.
renderJavaScript	false	Load pages in headless Chrome to detect tools that only appear after JavaScript runs. Slower and priced higher; give the run 2 GB or more of memory.
checkDns	true	Read MX, TXT, NS, SOA and CNAME records and the TLS certificate issuer.
minConfidence	50	Hide detections below this confidence (0 to 100).
includeTechnologyDetails	true	Add website, description, pricing tier, SaaS/open-source flags and CPE to each technology.
maxConcurrency	10	Websites scanned in parallel (1 to 50).
pageTimeoutSecs	30	Give up on a website that does not answer in time.
respectRobotsTxt	true	Skip pages a site's robots.txt disallows (DNS detection still runs).

Example input

{
  "urls": ["wordpress.org", "www.shopify.com", "vercel.com", "github.com"],
  "technologiesToFind": ["Shopify", "WordPress"],
  "checkDns": true
}

Output

One dataset row per website. The Overview, Marketing stack, Infrastructure, All technologies and Scan status views show the columns that matter for each job, and everything can be exported as JSON, CSV, Excel, XML or HTML, or read through the API.

Example row (shortened):

{
  "inputUrl": "www.shopify.com",
  "url": "https://www.shopify.com/",
  "domain": "shopify.com",
  "status": "ok",
  "statusCode": 200,
  "scanMode": "http",
  "pageTitle": "Shopify: The All-in-One Commerce Platform for Businesses - Shopify",
  "pageLanguage": "en",
  "technologyCount": 31,
  "ecommerce": ["Cart Functionality", "Shopify"],
  "uiFrameworks": ["Tailwind CSS"],
  "cdn": ["Cloudflare"],
  "hosting": ["Amazon Web Services"],
  "emailProvider": ["Google Workspace"],
  "emailServices": ["Google Workspace", "Microsoft 365", "Amazon SES", "Sendgrid"],
  "security": ["HSTS"],
  "sslCertificateAuthority": ["GlobalSign"],
  "servicesFromDnsRecords": ["Atlassian Cloud", "DocuSign", "Stripe", "Zapier", "Zendesk", "..."],
  "technologies": [
    {
      "name": "Shopify",
      "version": null,
      "confidence": 50,
      "categories": ["Ecommerce"],
      "website": "https://shopify.com",
      "pricing": ["low", "recurring"],
      "saas": true,
      "detectedBy": ["dom"],
      "impliedBy": null
    },
    {
      "name": "Google Workspace",
      "version": null,
      "confidence": 100,
      "categories": ["Webmail", "Email"],
      "website": "https://workspace.google.com/",
      "detectedBy": ["dns"],
      "dnsRecords": ["MX"],
      "impliedBy": null
    }
  ],
  "responseTimeMs": 821,
  "scannedAt": "2026-10-29T15:40:12.000Z"
}

Status values

Status	Meaning	Charged
ok	Page scanned.	Yes
blocked	The site answered with a bot challenge. Detections come from headers and DNS only.	No
blocked_by_robots	robots.txt disallows the page. Detections come from DNS only.	No
http_error	The page returned a 4xx or 5xx error.	No
empty_page	No HTML was returned.	No
domain_not_found	The domain does not exist in DNS.	No
error	Connection error or timeout.	No

Run summary and HTML report

The key-value store holds two extra records, linked from the Output tab:

• REPORT: a printable HTML page with the most used technologies, their share of scanned websites and the top five in each category.
• SUMMARY: the same data as JSON (technology counts and share, version breakdown, category counts, status counts and fingerprint data version) for dashboards and spreadsheets.

Pricing

Pay per result, with no monthly fee:

Event	Price
Website scanned (fast HTTP mode)	$1.50 per 1,000 websites ($0.0015 each)
Website scanned in a real browser	$5.00 per 1,000 websites ($0.005 each)

Failed, blocked and missing websites are free. Set Maximum cost per run in the run options and the Actor stops cleanly when it is reached. Free Apify plan credits work here too.

How detection works

Each website is checked against an open-source technology fingerprint database. A fingerprint can match on the HTML, script URLs, inline scripts, CSS, cookies, HTTP headers, meta tags, robots.txt, the page URL, DNS records, the TLS certificate issuer and, in browser mode, JavaScript globals, rendered page elements and background requests. Matches add up to a confidence score, versions are read from the matching text, and related technologies are added automatically (for example WordPress implies PHP and MySQL).

HTTP or browser mode? The fast HTTP mode finds most CMS, ecommerce, server, hosting, CDN, framework and DNS-based technologies. Tools injected by a tag manager or loaded later by JavaScript, such as many analytics and advertising pixels, often show up only in browser mode.

FAQ

Which page is scanned? The URL you give, usually the homepage. Add more URLs from the same site if you want inner pages checked as well.

Why is a technology missing? It may be loaded only after a click or a cookie consent, hidden behind a login, or served without a recognisable trace. Try browser mode, and remember that a missing technology is not proof the site does not use it.

What does servicesFromDnsRecords mean? Many SaaS tools ask customers to add a TXT record to prove they own the domain. Those records show the organisation has an account with the service, which is useful for sales research, but not that the website runs it, so they are kept out of the page columns.

How accurate are versions? Versions appear only when the site exposes them, for example in a generator meta tag, a script filename or a header.

Can I run it on a schedule? Yes. Save your input as a task and schedule it daily or weekly to track changes in a list of websites.

Can I use it through the API or with Make, Zapier or n8n? Yes, like any Apify Actor.

Legal and fair use

This Actor reads only what any visitor's browser receives from a website's public page, plus public DNS records and the TLS certificate. It loads one page per website you list, respects robots.txt by default, does not log in, does not bypass bot protection and collects no personal data. Make sure your use of the results complies with the laws that apply to you and with the terms of the websites you scan.

Product names belong to their owners and are used only to describe what was detected; no endorsement is implied.

Credits and licenses

Technology fingerprints (the patterns, categories and the technology descriptions and website links in the output) come from the open-source webappanalyzer project, a community continuation of the Wappalyzer open-source fingerprints, by its contributors. They are used under the GNU General Public License v3.0, pinned to commit d91f7e5 with a small set of local corrections (stricter Apple iCloud Mail DNS rules). The unmodified data is available from that repository, and we will provide the exact data files used by this Actor on request. Thank you to everyone who maintains it.

Support

Found a wrong or missing detection, or need a feature? Open an issue on the Issues tab with the website and what you expected, and we will look into it.