Website Intelligence Scanner — Tech Stack, Security & Contacts

Scan any list of websites and get back a complete intelligence profile for each one — in a single structured JSON item:

• Tech stack — CMS/site builder (WordPress, Shopify, Wix, Webflow, ...), JS frameworks (Next.js, React, Vue, Angular, ...), e-commerce & payment platforms
• Marketing stack — analytics, pixels, tag managers, chat widgets (GA4, GTM, Facebook Pixel, Hotjar, Plausible, Intercom, ...)
• Infrastructure — CDN/hosting provider (Cloudflare, Vercel, Netlify, CloudFront, ...), server and X-Powered-By headers
• Security grade — A+ to F rating based on 6 key HTTP security headers, with the missing ones listed
• Contacts — emails and social profile links (LinkedIn, X, Facebook, Instagram, GitHub, ...) found on the homepage

Who is this for?

• Agencies & freelancers — qualify leads by tech stack ("show me prospects on WordPress with no analytics")
• Sales teams — enrich CRM records with technology and contact data
• Competitor research — see what your competitors run and how they track visitors
• Security/SEO audits — bulk-grade security headers across a portfolio of sites

Input

{
  "websites": ["https://example.com", "shopify.com"],
  "extractContacts": true,
  "checkSecurity": true,
  "timeoutSecs": 30
}

Bare domains work — https:// is added automatically.

Output (one item per website)

{
  "url": "https://example-store.com",
  "finalUrl": "https://www.example-store.com/",
  "statusCode": 200,
  "responseTimeMs": 412,
  "title": "Example Store — Handmade Goods",
  "cms": "Shopify",
  "frameworks": ["jQuery", "Tailwind CSS"],
  "analytics": ["Google Analytics 4", "Facebook Pixel", "Hotjar"],
  "ecommerce": ["Shopify", "Stripe"],
  "cdn": "Cloudflare",
  "securityGrade": "B",
  "securityScore": 4,
  "missingSecurityHeaders": ["content-security-policy", "permissions-policy"],
  "emails": ["hello@example-store.com"],
  "socialProfiles": ["https://instagram.com/examplestore", "https://www.linkedin.com/company/example-store"]
}

Pricing

Pay per event: you are charged a small fee per website scanned. No subscriptions, no minimums — scan 5 sites or 5,000.

FAQ

Does it render JavaScript? No — it analyzes the raw HTML and HTTP headers, which is where the vast majority of fingerprints live. That's what keeps it fast and cheap.

How accurate is the CMS detection? Fingerprints cover the 12 most popular CMS/site builders plus the generator meta tag as a fallback. Unknown stacks return null rather than a guess.

Can I scan thousands of sites? Yes — websites are scanned concurrently (5 at a time) and each one produces exactly one dataset item.