DNS Technographics - SaaS Stack from DNS Records (Bulk)
Pricing
Pay per event + usage
DNS Technographics - SaaS Stack from DNS Records (Bulk)
Find which SaaS any company uses (email, security, marketing automation, CRM, support, hosting, collaboration, AI) from its public DNS: SPF, TXT verification, MX, DMARC, nameservers, subdomain CNAMEs. Bulk and cheap.
Pricing
Pay per event + usage
Rating
0.0
(0)
Developer
Musedenny
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
2 days ago
Last modified
Categories
Security
Limited permissionsShare
DNS Technographics – SaaS Stack from DNS Records
Find out which SaaS any company uses, in bulk, from its public DNS records. Page-based tech detectors only see what's on the homepage. DNS also reveals the back-office tools a company has connected to its domain: email and email security, marketing automation, CRM, support desk, collaboration, e-signature, payments, AI, hosting and CDN.
What it reads
| Record | Reveals (examples) |
|---|---|
| SPF includes | Google Workspace, Microsoft 365, SendGrid, Mailgun, Amazon SES, HubSpot, Marketo, Salesforce, Zendesk, Klaviyo |
| TXT verification records | Atlassian, Slack, Zoom, DocuSign, Adobe, Stripe, OpenAI, Anthropic, Okta, 1Password, Canva, Miro, Notion, Meta Business |
| MX | Email provider and security gateway (Proofpoint, Mimecast, Barracuda, Cisco) |
| DMARC report address | DMARC vendor (dmarcian, Valimail, Red Sift, EasyDMARC…) |
| Nameservers | DNS and CDN provider (Cloudflare, Route 53, Akamai…) |
| CNAMEs of help., status., docs., careers., shop., go.… | Zendesk, Freshdesk, Intercom, Statuspage, GitBook, Greenhouse, Lever, Shopify, Marketo, Webflow… |
About 150 vendor signatures. Each detected tool comes with its evidence (the exact record), so you can verify it.
Input
| Field | Default | Meaning |
|---|---|---|
domains | – | Domains, website URLs or email addresses (the domain part is used) |
onlyIfUsing | – | Only output domains using any of these vendors (e.g. Zendesk, HubSpot). Good for building lead lists |
checkSubdomains | true | Also check common subdomains |
maxDomains | 10000 | Cap per run |
Output
{"domain": "acme.com","emailProvider": "Google Workspace", "emailSecurityGateway": null, "dmarcVendor": "dmarcian", "dnsProvider": "Cloudflare","toolCount": 9,"categories": ["Collaboration", "Customer support", "Email", "Email delivery", "AI", "..."],"tools": [{"name": "Zendesk", "category": "Customer support", "evidence": ["SPF include mail.zendesk.com", "help.acme.com → acme.zendesk.com"]}, "..."],"spfIncludes": ["_spf.google.com", "sendgrid.net", "mail.zendesk.com"], "hasMx": true, "checkedAt": "…"}
Verification token values are never output, only which vendor they belong to.
Pricing (pay per event)
$0.001 per run and $0.001 per domain: 10,000 domains for about $10.
How it works
Lookups go through DNS-over-HTTPS (Cloudflare, with Google as fallback), about 20 queries per domain, 10 domains at a time. It doesn't load the company's website.