Tech Stack Detector – Wappalyzer Alternative

Tech Stack Detector — find out what any website is built with

Give it a list of websites and get back, for each one, the technologies it runs on: CMS, ecommerce platform, JavaScript frameworks, analytics, marketing and advertising tools, CDN, hosting, payment providers, email provider and much more.

It recognizes 7,600+ technologies using the open-source Wappalyzer fingerprints (maintained by the community in webappanalyzer), and it adds what a page alone doesn't show: DNS records reveal the email provider (Google Workspace, Microsoft 365), the DNS host and SaaS tools the company has verified (Atlassian, HubSpot, Stripe, DocuSign, Zendesk…).

Why this Actor

• Fast and cheap at scale. No browser: one HTTP request and a few DNS lookups per website, so thousands of sites take minutes, not hours. Other tech-stack Actors charge up to $0.10 per website; this one costs half that, and less on higher Apify plans.
• Pay only for results. Websites that are unreachable, or that answer with an anti-bot page, are returned with the reason and are not charged.
• Versions and confidence, like Wappalyzer: WordPress 7.2, jQuery 2.0.3, Shopify…
• Evidence on demand. Turn on Include evidence to see the exact header, cookie, HTML snippet or DNS record behind every detection.
• Spreadsheet friendly. Every item has a technologyNames column (a plain comma-separated list) next to the full JSON.

Use cases

• Lead generation and qualification: find stores on Shopify, sites on WordPress, companies using HubSpot or Salesforce.
• Competitor research: see which analytics, A/B testing, chat and ad tools your competitors use.
• Market research: measure how popular a technology is across thousands of domains.
• Sales intelligence and CRM enrichment: add the tech stack to every account in your list.

Input

Field	Description
Websites	Domains or URLs, one per line. shopify.com, www.example.com and https://example.com/shop all work.
Check DNS records	Detect technologies from MX, TXT, NS and SOA records (default: on).
Include evidence	Add what revealed each technology (default: off).
Minimum confidence	Drop detections below this confidence (default: 0, keep all).
Parallel requests	Websites analyzed at the same time (default: 30).
Proxy	Apify Proxy by default.

Output

One item per website. Real output for nextjs.org (shortened):

{
  "input": "nextjs.org",
  "url": "https://nextjs.org/",
  "domain": "nextjs.org",
  "status": "ok",
  "httpStatus": 200,
  "title": "Next.js by Vercel - The React Framework",
  "technologyCount": 11,
  "technologyNames": "Next.js, Google Workspace, Radix UI, React, Vercel, HSTS, HTTP/3, Open Graph, Priority Hints, Sendgrid, Webpack",
  "technologies": [
    {
      "name": "Next.js",
      "version": null,
      "confidence": 100,
      "categories": ["JavaScript frameworks", "Web frameworks", "Web servers", "Static site generator"],
      "website": "https://nextjs.org",
      "detectedBy": ["headers"],
      "evidence": ["headers: Next.js"]
    },
    {
      "name": "Google Workspace",
      "version": null,
      "confidence": 100,
      "categories": ["Webmail", "Email"],
      "website": "https://workspace.google.com/",
      "detectedBy": ["dns"],
      "evidence": ["dns: aspmx.l.google.com"]
    }
  ],
  "categories": {
    "JavaScript frameworks": ["Next.js", "React"],
    "Email": ["Google Workspace", "Sendgrid"],
    "PaaS": ["Vercel"]
  },
  "analyzedAt": "2026-09-28T18:17:07.581Z"
}

status is ok, blocked (the site showed an anti-bot page: only header and DNS detections are returned, not charged) or failed (not reachable, or it answered with an error page such as 404 or 502: not charged).

How it works and its limits

The Actor downloads each page once, like a browser would, and matches the fingerprints against headers, cookies, HTML, script URLs, inline scripts, meta tags, page text, the static DOM, the TLS certificate issuer and DNS records. Framework variables that pages write into their HTML (such as __NEXT_DATA__ or __NUXT__) are recognized too.

Honest limits:

• About 1,500 of the fingerprints can only be seen by running the page's JavaScript in a real browser (for example tools loaded after user interaction). Those are not detected.
• Only the page you give is analyzed (usually the home page). Tools used only on other pages (e.g. checkout) may not show up.
• Some websites protect themselves with anti-bot pages. They are marked blocked and not charged.
• Keep the default 4 GB of memory for large lists: with less memory the Actor still works, but it is slower and may give up on slow websites (not charged).

Credits

Technology fingerprints: enthec/webappanalyzer, the community continuation of the open-source Wappalyzer fingerprints (GPL-3.0). Wappalyzer is a trademark of its owner; this Actor is not affiliated with it.