Tech Stack Detector + Email & DNS Stack Lookup

Find out what any website is built with and how it handles email, for one site or 100,000. Each result lists the technologies detected (CMS, ecommerce platform, JavaScript frameworks, analytics and marketing tags, CDN, hosting, payments, security headers and more) with version, category and confidence, plus the company's email and DNS stack: mailbox provider, the services it sends email through, its DMARC policy, DNS host and TLS certificate issuer.

Uses 7,600+ open technology fingerprints (the community-maintained successor of Wappalyzer's dataset, refreshed on every build), checked against the page HTML, scripts, meta tags, HTTP headers, cookies, robots.txt, DNS records and the TLS certificate. No browser is needed, so it's fast and cheap.

What you get

Field	Description
technologies	name, version, categories, confidence, website, icon for each technology
byCategory	Technologies grouped by category (CMS, Ecommerce, Analytics, CDN, JavaScript frameworks...)
technologyNames, technologyCount	Flat list for spreadsheets
servicesFromDns	SaaS the company has verified its domain with (TXT records such as DocuSign, Atlassian, Notion, Zoom, Stripe, OpenAI): what the company uses, not what its website runs
emailDns.mailProvider	From MX records: Google Workspace, Microsoft 365, Zoho, Proofpoint, Mimecast...
emailDns.sendingServices	From the SPF record: SendGrid, Mailchimp, HubSpot, Salesforce, Zendesk, Klaviyo, Amazon SES...
emailDns.dmarcPolicy	reject, quarantine, none or missing
emailDns.dnsProvider, nameservers	Cloudflare, Route 53, GoDaddy, Azure DNS...
tlsIssuer	Who issued the site's certificate (Let's Encrypt, Google Trust Services, DigiCert...)
title, statusCode, finalUrl	Page basics

Use cases

• Lead generation and sales prospecting: find every Shopify store using Klaviyo, or every company on Microsoft 365 without DMARC, and segment your list by stack. servicesFromDns adds the SaaS tools a company pays for (Notion, Zoom, Atlassian, DocuSign...).
• Competitor and market research: see which CMS, analytics and payment tools competitors use, and how a market splits between platforms.
• Agencies and consultants: audit a client's site and email setup in one pass before a pitch or a migration.
• Security and IT due diligence: spot outdated versions, missing security headers, weak DMARC and the mail gateway in front of a domain.
• Enriching CRM and spreadsheet data: add technology and email-provider columns to a list of company domains.

Input example

{
  "startUrls": ["https://www.allbirds.com", "https://vercel.com", "https://wordpress.org/news/"],
  "minConfidence": 50
}

Output example

From a test run on 26 Oct 2026 (lists shortened):

{
  "url": "https://www.allbirds.com",
  "statusCode": 200,
  "technologyNames": ["Shopify", "Cloudflare", "Google Tag Manager", "PayPal", "Apple Pay", "Swiper", "HSTS", "HTTP/3"],
  "byCategory": {"Ecommerce": ["Shopify"], "Payment processors": ["Apple Pay", "PayPal"], "CDN": ["Cloudflare"]},
  "servicesFromDns": ["DocuSign", "Microsoft 365", "Miro"],
  "emailDns": {
    "mailProvider": ["Microsoft 365"],
    "sendingServices": ["Microsoft 365"],
    "dmarcPolicy": "quarantine"
  },
  "tlsIssuer": "Let's Encrypt"
}

Pricing

Pay per event: $2 per 1,000 websites (less on higher Apify plans). Sites that can't be loaded, or that return an HTTP error such as a 403 bot block, are not charged. Set a maximum spend per run in the run options; the actor stops cleanly when it is reached.

Good to know

• Detection works on what a normal page load shows: technologies that appear only after JavaScript runs in a browser (some single-page-app internals) can be missed.
• The email & DNS stack comes from public DNS, so it works even when the website itself blocks bots.
• Sites behind strict bot protection may answer 403; turn on Proxy (residential works best). Those results are free.

Credits

Technology fingerprints: webappanalyzer (GPL-3.0), the open, community-maintained continuation of the Wappalyzer fingerprints. Not affiliated with Wappalyzer or BuiltWith.

FAQ

Is this the same as Wappalyzer? It uses the same open fingerprint format, maintained by the community, and adds the email and DNS stack. It is not the Wappalyzer product.

Something wrong or a technology missing? Open an issue on the actor's Issues tab and it will be fixed.