# Tech Stack Detector: Website Technology, CMS & Analytics Lookup (`2000nights/tech-stack-detector`) Actor

Find the technologies behind any website: CMS, ecommerce platform, analytics, ads, CRM, frameworks, hosting, CDN and email provider. 7,600+ fingerprints, bulk lists, versions.

- **URL**: https://apify.com/2000nights/tech-stack-detector.md
- **Developed by:** [2000 Nights](https://apify.com/2000nights) (community)
- **Categories:** Lead generation, Developer tools, SEO tools
- **Security:** Limited permissions
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $1.50 / 1,000 website scanneds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Tech Stack Detector: Website Technology, CMS & Analytics Lookup

**Find out what any website is built with, in bulk.** Paste a list of domains and get each site's CMS, ecommerce platform, analytics and tag managers, advertising pixels, marketing automation, CRM, live chat, payment providers, JavaScript frameworks, web server, hosting, CDN and **email provider**, with versions where the site exposes them.

It checks every website against **7,600+ technology fingerprints** in **100+ categories**, reads the domain's **DNS records** (MX, SPF, TXT, NS, CNAME) and **TLS certificate**, and can render pages in a **real browser** to catch tools that only appear after JavaScript runs. You also get a **market-share report** across all the sites you scanned.

***

### Highlights

- **Bulk technology lookup.** Scan 10 or 100,000 websites in one run. Domains, `www.` hosts and full URLs are all accepted; duplicates are removed.
- **Clean, grouped output.** Each website comes back as one row with ready-made columns: `cms`, `ecommerce`, `analytics`, `tagManagers`, `advertising`, `marketingAutomation`, `crm`, `liveChat`, `payments`, `javascriptFrameworks`, `webServers`, `hosting`, `cdn`, `emailProvider` and more, plus a detailed `technologies` list with version, confidence, categories, pricing tier and how each one was detected.
- **Email and SaaS signals from DNS.** MX records show who hosts the mailboxes (Google Workspace, Microsoft 365, Zoho and others). SPF and verification records reveal sending services and SaaS accounts, reported separately in `servicesFromDnsRecords` so they never get mixed up with what runs on the page.
- **Find every site that uses X.** Add `Shopify`, `HubSpot` or `Klaviyo` under *Technologies to look for* and each row gets `matchedTechnologies`. Turn on *Save only websites that match* for a ready-made lead list.
- **Fast by default, a real browser when you need it.** The HTTP scan takes about a second per site. *Render pages in a real browser* loads the page in headless Chrome and also detects JavaScript globals, the rendered page and background requests.
- **Market-share report.** Every run writes a `SUMMARY` JSON and a printable HTML `REPORT` with the most used technologies and the leaders in each category.
- **You only pay for results.** Websites that are down, blocked, missing or disallowed by robots.txt are reported with a clear status and are free.

### Use cases

- **Sales prospecting and lead generation:** build lists of online stores on Shopify or WooCommerce, companies on HubSpot or Salesforce, or sites missing a cookie banner.
- **Competitor and market research:** see which analytics, ad networks and frameworks a market uses, with the share of each.
- **Agency audits and pitches:** check a prospect's CMS, page builder, hosting, CDN and tracking setup before the first call.
- **Lead enrichment:** add technographic columns (CMS, ecommerce platform, email provider) to a CRM export.
- **Security and IT inventory:** list web servers, languages and versions across a portfolio of your own domains.

### Quick start

1. Paste websites into **Websites**, one per line, for example `wordpress.org`, `www.shopify.com`, `https://vercel.com`.
2. Optionally add **Technologies to look for**.
3. Click **Start**. Results appear in the **Output** tab; open the *Technology report* for the overview.

### Input options

| Field | Default | What it does |
|---|---|---|
| `urls` | | Domains or URLs to scan, one per line. The page you give is scanned (usually the homepage), plus the domain's DNS. |
| `technologiesToFind` | none | Technology names to flag on each row, matched case-insensitively against the names in the output. |
| `onlyMatchingSites` | `false` | Save only websites that use at least one of the technologies above. Every successfully scanned website is still charged. |
| `renderJavaScript` | `false` | Load pages in headless Chrome to detect tools that only appear after JavaScript runs. Slower and priced higher; give the run 2 GB or more of memory. |
| `checkDns` | `true` | Read MX, TXT, NS, SOA and CNAME records and the TLS certificate issuer. |
| `minConfidence` | `50` | Hide detections below this confidence (0 to 100). |
| `includeTechnologyDetails` | `true` | Add website, description, pricing tier, SaaS/open-source flags and CPE to each technology. |
| `maxConcurrency` | `10` | Websites scanned in parallel (1 to 50). |
| `pageTimeoutSecs` | `30` | Give up on a website that does not answer in time. |
| `respectRobotsTxt` | `true` | Skip pages a site's robots.txt disallows (DNS detection still runs). |

#### Example input

```json
{
  "urls": ["wordpress.org", "www.shopify.com", "vercel.com", "github.com"],
  "technologiesToFind": ["Shopify", "WordPress"],
  "checkDns": true
}
```

### Output

One dataset row per website. The **Overview**, **Marketing stack**, **Infrastructure**, **All technologies** and **Scan status** views show the columns that matter for each job, and everything can be exported as JSON, CSV, Excel, XML or HTML, or read through the API.

Example row (shortened):

```json
{
  "inputUrl": "www.shopify.com",
  "url": "https://www.shopify.com/",
  "domain": "shopify.com",
  "status": "ok",
  "statusCode": 200,
  "scanMode": "http",
  "pageTitle": "Shopify: The All-in-One Commerce Platform for Businesses - Shopify",
  "pageLanguage": "en",
  "technologyCount": 31,
  "ecommerce": ["Cart Functionality", "Shopify"],
  "uiFrameworks": ["Tailwind CSS"],
  "cdn": ["Cloudflare"],
  "hosting": ["Amazon Web Services"],
  "emailProvider": ["Google Workspace"],
  "emailServices": ["Google Workspace", "Microsoft 365", "Amazon SES", "Sendgrid"],
  "security": ["HSTS"],
  "sslCertificateAuthority": ["GlobalSign"],
  "servicesFromDnsRecords": ["Atlassian Cloud", "DocuSign", "Stripe", "Zapier", "Zendesk", "..."],
  "technologies": [
    {
      "name": "Shopify",
      "version": null,
      "confidence": 50,
      "categories": ["Ecommerce"],
      "website": "https://shopify.com",
      "pricing": ["low", "recurring"],
      "saas": true,
      "detectedBy": ["dom"],
      "impliedBy": null
    },
    {
      "name": "Google Workspace",
      "version": null,
      "confidence": 100,
      "categories": ["Webmail", "Email"],
      "website": "https://workspace.google.com/",
      "detectedBy": ["dns"],
      "dnsRecords": ["MX"],
      "impliedBy": null
    }
  ],
  "responseTimeMs": 821,
  "scannedAt": "2026-10-29T15:40:12.000Z"
}
```

#### Status values

| Status | Meaning | Charged |
|---|---|---|
| `ok` | Page scanned. | Yes |
| `blocked` | The site answered with a bot challenge. Detections come from headers and DNS only. | No |
| `blocked_by_robots` | robots.txt disallows the page. Detections come from DNS only. | No |
| `http_error` | The page returned a 4xx or 5xx error. | No |
| `empty_page` | No HTML was returned. | No |
| `domain_not_found` | The domain does not exist in DNS. | No |
| `error` | Connection error or timeout. | No |

#### Run summary and HTML report

The key-value store holds two extra records, linked from the **Output** tab:

- `REPORT`: a printable HTML page with the most used technologies, their share of scanned websites and the top five in each category.
- `SUMMARY`: the same data as JSON (technology counts and share, version breakdown, category counts, status counts and fingerprint data version) for dashboards and spreadsheets.

### Pricing

Pay per result, with no monthly fee:

| Event | Price |
|---|---|
| Website scanned (fast HTTP mode) | **$1.50 per 1,000 websites** ($0.0015 each) |
| Website scanned in a real browser | **$5.00 per 1,000 websites** ($0.005 each) |

Failed, blocked and missing websites are free. Set **Maximum cost per run** in the run options and the Actor stops cleanly when it is reached. Free Apify plan credits work here too.

### How detection works

Each website is checked against an open-source technology fingerprint database. A fingerprint can match on the HTML, script URLs, inline scripts, CSS, cookies, HTTP headers, meta tags, robots.txt, the page URL, DNS records, the TLS certificate issuer and, in browser mode, JavaScript globals, rendered page elements and background requests. Matches add up to a confidence score, versions are read from the matching text, and related technologies are added automatically (for example WordPress implies PHP and MySQL).

**HTTP or browser mode?** The fast HTTP mode finds most CMS, ecommerce, server, hosting, CDN, framework and DNS-based technologies. Tools injected by a tag manager or loaded later by JavaScript, such as many analytics and advertising pixels, often show up only in browser mode.

### FAQ

**Which page is scanned?** The URL you give, usually the homepage. Add more URLs from the same site if you want inner pages checked as well.

**Why is a technology missing?** It may be loaded only after a click or a cookie consent, hidden behind a login, or served without a recognisable trace. Try browser mode, and remember that a missing technology is not proof the site does not use it.

**What does `servicesFromDnsRecords` mean?** Many SaaS tools ask customers to add a TXT record to prove they own the domain. Those records show the organisation has an account with the service, which is useful for sales research, but not that the website runs it, so they are kept out of the page columns.

**How accurate are versions?** Versions appear only when the site exposes them, for example in a generator meta tag, a script filename or a header.

**Can I run it on a schedule?** Yes. Save your input as a task and schedule it daily or weekly to track changes in a list of websites.

**Can I use it through the API or with Make, Zapier or n8n?** Yes, like any Apify Actor.

### Legal and fair use

This Actor reads only what any visitor's browser receives from a website's public page, plus public DNS records and the TLS certificate. It loads one page per website you list, respects robots.txt by default, does not log in, does not bypass bot protection and collects no personal data. Make sure your use of the results complies with the laws that apply to you and with the terms of the websites you scan.

Product names belong to their owners and are used only to describe what was detected; no endorsement is implied.

### Credits and licenses

Technology fingerprints (the patterns, categories and the technology descriptions and website links in the output) come from the open-source [webappanalyzer](https://github.com/enthec/webappanalyzer) project, a community continuation of the Wappalyzer open-source fingerprints, by its contributors. They are used under the [GNU General Public License v3.0](https://github.com/enthec/webappanalyzer/blob/main/LICENSE), pinned to commit [`d91f7e5`](https://github.com/enthec/webappanalyzer/tree/d91f7e510e93457041bea874e8a9ffb011e3e4fe) with a small set of local corrections (stricter Apple iCloud Mail DNS rules). The unmodified data is available from that repository, and we will provide the exact data files used by this Actor on request. Thank you to everyone who maintains it.

### Support

Found a wrong or missing detection, or need a feature? Open an issue on the **Issues** tab with the website and what you expected, and we will look into it.

# Actor input Schema

## `urls` (type: `array`):

Domains or URLs to scan, one per line: <code>example.com</code>, <code>www.example.com</code> or <code>https://example.com/shop</code>. The page you give is scanned (usually the homepage), plus the domain's DNS records. Duplicates are removed.

## `technologiesToFind` (type: `array`):

Flag websites that use these technologies, e.g. <code>Shopify</code>, <code>HubSpot</code>, <code>Klaviyo</code>. Names are matched case-insensitively against the technology names in the output. Results get <code>matchedTechnologies</code> and <code>matchesAllRequested</code> fields.

## `onlyMatchingSites` (type: `boolean`):

With technologies to look for, save only websites using at least one of them. Every successfully scanned website is still charged, matching or not.

## `renderJavaScript` (type: `boolean`):

Off (default): fast HTTP scan of the page HTML, headers, cookies, scripts and DNS. On: the page is loaded in headless Chrome, which also detects technologies only visible after JavaScript runs (JavaScript globals, the rendered page and background requests). Slower and priced higher; give the run 2 GB or more of memory.

## `checkDns` (type: `boolean`):

Look up the domain's MX, TXT, NS, SOA and CNAME records and the TLS certificate issuer. Reveals the email provider (e.g. Google Workspace, Microsoft 365), DNS host, email-sending services and verified SaaS tools.

## `minConfidence` (type: `integer`):

Hide detections below this confidence. Most fingerprints are 100% when they match; a few weaker signals score lower.

## `includeTechnologyDetails` (type: `boolean`):

Add the website, description, pricing tier, SaaS/open-source flags and CPE identifier of each detected technology. Turn off for smaller output.

## `maxConcurrency` (type: `integer`):

How many websites to scan at the same time. In browser mode this is also limited to about one per GB of run memory.

## `pageTimeoutSecs` (type: `integer`):

Give up on a website that does not respond within this time.

## `respectRobotsTxt` (type: `boolean`):

Skip pages the website's robots.txt disallows for crawlers (DNS-based detection still runs). Leave on unless you own the website.

## Actor input object example

```json
{
  "urls": [
    "wordpress.org",
    "www.shopify.com",
    "vercel.com"
  ],
  "technologiesToFind": [],
  "onlyMatchingSites": false,
  "renderJavaScript": false,
  "checkDns": true,
  "minConfidence": 50,
  "includeTechnologyDetails": true,
  "maxConcurrency": 10,
  "pageTimeoutSecs": 30,
  "respectRobotsTxt": true
}
```

# Actor output Schema

## `results` (type: `string`):

Detected technologies for every website, grouped by category.

## `report` (type: `string`):

Printable report: most used technologies and the leaders in each category across all scanned websites.

## `summary` (type: `string`):

Technology and category counts with market share across all scanned websites, status counts and fingerprint data version.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "urls": [
        "wordpress.org",
        "www.shopify.com",
        "vercel.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("2000nights/tech-stack-detector").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "urls": [
        "wordpress.org",
        "www.shopify.com",
        "vercel.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("2000nights/tech-stack-detector").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "urls": [
    "wordpress.org",
    "www.shopify.com",
    "vercel.com"
  ]
}' |
apify call 2000nights/tech-stack-detector --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,2000nights/tech-stack-detector"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/ovMFVp5cXSxNHeQml/builds/5zNal2hGaAVRcrGD8/openapi.json