Tech Stack Detector API

Detect the complete technology stack of any website — frameworks, CMS, CDN, hosting, analytics, payment systems, email providers, and 7000+ more technologies.

What it does

Given one or more URLs, this actor analyzes:

1. Technology Fingerprinting — Powered by the Wappalyzer engine with 7500+ technology signatures. Detects frameworks, libraries, CMS, CDN, analytics, payment processors, and more from HTTP headers, HTML, cookies, script sources, DNS records, and meta tags.
2. DNS Intelligence — CNAME/A record analysis for CDN and hosting detection, MX records for email provider, TXT records for 30+ third-party service verifications (Stripe, Klaviyo, Zendesk, etc.), NS records for DNS provider.
3. TLS Certificate Analysis — Certificate issuer reveals CDN/hosting provider, protocol version, and certificate validity.
4. Security Score — Grades security headers (HSTS, CSP, X-Frame-Options, etc.) on a 0-100 scale and flags known vulnerable library versions.
5. Cost Estimation — Estimates monthly hosting/platform cost based on the detected stack.

Use Cases

• Sales prospecting: Know what tech a prospect uses before reaching out
• Competitive analysis: Compare your stack vs competitors side-by-side
• Security audits: Quick security header assessment for any website
• Lead generation: Find companies using specific technologies
• Market research: Understand technology adoption in your industry

Input

Field	Type	Default	Description
urls	string[]	required	URLs to analyze (max 10)
enableDns	boolean	true	Run DNS analysis (CDN, hosting, email, verifications)
enableTls	boolean	true	Run TLS certificate analysis
enableSecurityScore	boolean	true	Calculate security score (0-100)
enableCostEstimate	boolean	true	Estimate monthly cost
compareMode	boolean	false	Compare stacks across multiple URLs
maxUrls	integer	10	Max URLs per run

Example Input

{
    "urls": ["https://shopify.com", "https://notion.so"],
    "enableDns": true,
    "enableTls": true,
    "enableSecurityScore": true,
    "enableCostEstimate": true,
    "compareMode": true
}

Output

Each URL produces a detailed result:

{
    "url": "https://www.shopify.com/",
    "technologies": [
        {
            "name": "Shopify",
            "category": "Ecommerce",
            "version": null,
            "confidence": 100,
            "source": "wappalyzer"
        },
        {
            "name": "Cloudflare",
            "category": "CDN",
            "version": null,
            "confidence": 100,
            "source": "wappalyzer"
        },
        {
            "name": "Stripe",
            "category": "Payment processors",
            "version": null,
            "confidence": 100,
            "source": "wappalyzer"
        },
        {
            "name": "Google Workspace",
            "category": "Webmail",
            "version": null,
            "confidence": 100,
            "source": "wappalyzer"
        },
        {
            "name": "Zendesk",
            "category": "Documentation",
            "version": null,
            "confidence": 100,
            "source": "wappalyzer"
        }
    ],
    "totalTechnologies": 14,
    "dns": {
        "cdn": "Cloudflare",
        "emailProvider": "Google Workspace",
        "hosting": "Shopify",
        "nameserver": "Shopify DNS",
        "verifications": [
            "Adobe", "Amazon SES", "Apple", "Atlassian", "DocuSign",
            "Facebook/Meta", "Google Search Console", "Klaviyo",
            "Microsoft 365", "OpenAI", "SendGrid", "Stripe",
            "Twilio", "Zapier", "Zendesk"
        ]
    },
    "tls": {
        "issuer": "Google Trust Services",
        "protocol": "TLSv1.3",
        "subject": "shopify.com",
        "validFrom": "Feb 14 16:30:43 2026 GMT",
        "validTo": "May 15 17:30:36 2026 GMT"
    },
    "securityScore": {
        "score": 35,
        "grade": "D",
        "headers": {
            "HSTS": true,
            "CSP": false,
            "X-Frame-Options": false,
            "X-Content-Type-Options": true,
            "X-XSS-Protection": false,
            "Referrer-Policy": false,
            "Permissions-Policy": false,
            "COOP": false,
            "CORP": false,
            "COEP": false
        },
        "headersPresent": 2,
        "headersTotal": 10,
        "vulnerabilities": []
    },
    "costEstimate": {
        "monthly": "$54-412/mo",
        "breakdown": {
            "cdn": { "service": "Cloudflare", "min": 0, "max": 200 },
            "email": { "service": "Google Workspace", "min": 6, "max": 18 },
            "platform": { "service": "Shopify", "min": 29, "max": 79 },
            "payment": { "service": "Stripe", "min": 0, "max": 0, "note": "2.9% + $0.30/txn" },
            "support": { "service": "Zendesk", "min": 19, "max": 115 }
        }
    },
    "scannedAt": "2026-03-15T21:15:36.210952+00:00"
}

Compare Mode

When compareMode is enabled with multiple URLs, each result also includes:

{
    "comparison": {
        "common": ["Cloudflare", "Open Graph", "React"],
        "unique": {
            "https://shopify.com": ["Shopify", "Stripe", "Zendesk"],
            "https://notion.so": ["Next.js", "Vercel", "hCaptcha"]
        },
        "totalUrls": 2
    }
}

What Makes This Different

Feature	This Actor	BuiltWith	Wappalyzer
Technology detection	7500+ fingerprints	✅	✅
DNS intelligence	✅ 30+ services	❌	❌
Security scoring	✅ 0-100 grade	❌	❌
Cost estimation	✅	❌	❌
Stack comparison	✅	❌	❌
TXT verification detection	✅ Stripe, Klaviyo, etc.	❌	❌
Price	Pay per use	$295/mo	$450/mo

Technology

• Detection engine: wappalyzer-next with up-to-date fingerprints
• HTTP client: curl_cffi with Chrome impersonation (bypasses Cloudflare and bot protection)
• DNS analysis: Custom multi-record analysis (A, CNAME, MX, TXT, NS)
• Async processing: Concurrent URL analysis for fast batch scans