Bulk Tech Stack Detector: CMS, Hosting, Analytics per Domain

Bulk Tech Stack Detector: Detect CMS of Website Lists, Hosting and Analytics per Domain

Paste a list of domains, get back what each one runs — CMS, framework, hosting, analytics, payments, support widgets — with the evidence that proved each detection and a confidence level.

Built for lists, not single lookups. Unreachable domains are reported and never charged.

---

Why the evidence matters

Most detectors hand you WordPress: true. When that's wrong on 200 rows of a 10,000-row list, you have no way to find which 200. Every detection here returns what proved it:

Technology	Confidence	Evidence
Shopify	high	cdn.shopify.com
Vercel	high	server: Vercel
WordPress	high	/wp-content/
jQuery	low	jquery-3.6.0.min.js

Now a row is auditable in two seconds instead of being taken on faith.

Confidence is not decoration

• high — the site declares it, or a first-party branded asset path proves it (a generator meta tag, cdn.shopify.com, a server header)
• medium — a characteristic asset path or header
• low — a weaker heuristic, worth reporting but not worth filtering a campaign on

Flattening these into a single boolean is how a bulk list becomes untrustworthy. You can filter on confidence and decide your own bar.

Three things this deliberately does not do

No vulnerability claims. Some detectors report "WordPress 5.2 — 14 known CVEs". A version string in HTML is routinely stale, cached, or spoofed, and converting it into a security assertion is unfounded. We report the version we saw and where we saw it. Nothing further.

No guessing. A site we can't classify comes back with an empty technology list and classified: false. Silent guessing is exactly what makes bulk output useless at scale — one plausible-looking wrong row poisons trust in all 10,000.

No double-counting. example.com and www.example.com are one company. We follow redirects to the final URL and report both it and whether a redirect happened, so your list doesn't double-count or silently miss.

What it detects

CMS & builders — WordPress, Drupal, Joomla, Ghost, Shopify, Wix, Squarespace, Webflow Frameworks — Next.js, Nuxt, Gatsby, Astro, React, Vue Hosting & CDN — Cloudflare, Vercel, Netlify, Fastly, CloudFront, Nginx, Apache Analytics — GA4, Google Tag Manager, Meta Pixel, Hotjar, Plausible, Segment Marketing & support — HubSpot, Klaviyo, Mailchimp, Intercom, Zendesk, Drift, Crisp Payments & security — Stripe, PayPal, reCAPTCHA, Cloudflare Turnstile Plus any self-declared generator meta tag, reported verbatim.

Input

{ "domainsText": "shopify.com\nvercel.com\nexample.com" }

Separators can be new lines, commas or spaces; https:// is optional and duplicates are removed.

Field	Type	Default	Notes
domainsText	string	—	Pasted list
domains	array	—	For API use
domain	string	—	A single domain
maxDomains	integer	100	Cap on domains, and therefore on spend

Output

{
  "domain": "shopify.com",
  "ok": true,
  "finalUrl": "https://www.shopify.com/",
  "redirected": true,
  "technologyCount": 2,
  "technologies": [
    { "technology": "Shopify", "category": "Ecommerce", "confidence": "high", "evidence": "cdn.shopify.com" },
    { "technology": "Cloudflare", "category": "CDN", "confidence": "high", "evidence": "server: cloudflare" }
  ],
  "byCategory": { "Ecommerce": ["Shopify"], "CDN": ["Cloudflare"] },
  "classified": true
}

For agents and automation

• Capability: bulk detection of web technologies across a domain list
• Required input: one of domainsText, domains, domain
• Returns: one record per domain plus a SUMMARY; byCategory is pre-grouped for filtering
• Bounded: maxDomains caps the run and the spend
• Side effects: none — fetches each homepage once, stores nothing externally
• Honest unknowns: classified: false with an empty list rather than a guess

Example

A real run on 2026-10-31 with the input this page's form is prefilled with:

{
  "domainsText": "shopify.com\nvercel.com\nwordpress.org",
  "domains": [],
  "domain": ""
}

It finished in 2 seconds and returned 4 results. It was charged for 3 domain-analysed events ($0.03 on the Free plan). The first result (long text and lists cut for display):

{
  "domain": "shopify.com",
  "ok": true,
  "finalUrl": "https://www.shopify.com/",
  "httpStatus": 200,
  "redirected": true,
  "title": "Shopify: The All-in-One Commerce Platform for Businesses - Shopify",
  "technologyCount": 4,
  "technologies": [
    {
      "technology": "Shopify",
      "category": "Ecommerce",
      "confidence": "high",
      "evidence": "`${t.slice(0,f)}...`:t:\"\",N=[\"cdn.shopify.com\",\"shopify.com\",\"shopifycloud\""
    },
    {
      "technology": "Ghost",
      "category": "CMS",
      "confidence": "medium",
      "evidence": "t 100%);--background-image-mc-ghost-lg:url(https://cdn.shopify.com"
    },
    {
      "technology": "Tailwind",
      "category": "CSS",
      "confidence": "low",
      "evidence": "-inline-stylesheet=\"true\">/*! tailwindcss v4.1.18 | MIT License | ht"
    },
    "… 1 more"
  ],
  "byCategory": {
    "Ecommerce": [
      "Shopify"
    ],
    "CMS": [
      "Ghost"
    ],
    "CSS": [
      "Tailwind"
    ],
    "CDN": [
      "Cloudflare"
    ]
  },
  "classified": true,
  "tookMs": 196
}

Pricing

Pay per domain successfully analysed. Unreachable domains are free.

Limits

• maxDomains: at most 5000 (default 100), at least 1.
• Default run settings: 1024 MB memory, 600 s timeout. Change them per run under Options if a large input needs more.
• Time: the prefilled example finished in 2 s on 2026-10-31; run time grows with the number of inputs.

FAQ

How do I find out what technology a list of websites uses? Paste the domains into domainsText (newlines, commas, or spaces — duplicates removed) and each record returns the detected CMS, framework, hosting, analytics, payments, and support tools, grouped in byCategory for filtering.

Why does every detection include evidence? So a wrong row is auditable in seconds. WordPress: true on its own is faith; WordPress — /wp-content/ is checkable. On a 10,000-row list, that difference is whether you can trust the output at all.

What does the confidence level mean? high = the site declares it or a first-party branded asset proves it; medium = a characteristic path or header; low = a weak heuristic worth seeing but not worth filtering a campaign on. Filter on it and set your own bar.

Can it tell me if a site's stack is vulnerable? Deliberately not — version strings in HTML are routinely stale or spoofed, and turning one into a CVE claim would be unfounded. You get the version seen and where it was seen, nothing invented.

How does it handle sites it can't classify? classified: false with an empty technology list — an honest unknown instead of a plausible guess, because one wrong-but-plausible row poisons trust in the whole list.

Changelog

• 2026-11-01: Page text only: a clearer page heading, an Example section from a real run and a Limits section. Code, output and price are unchanged.

For AI agents

This Actor is built to be called by software, not just by people.

• Mount it directly as an MCP tool — no Store search, no ranking, just this one tool: https://mcp.apify.com/?actors=eliai/bulk-tech-stack-detector
• Or call it over HTTP and get the results in the same request: POST https://api.apify.com/v2/acts/eliai~bulk-tech-stack-detector/run-sync-get-dataset-items
• Costs are predictable before you call. Pricing is pay-per-event (see Pricing above), so an agent can budget a run in advance instead of discovering the bill afterwards.
• Send only the field you mean. If you pass the bulk field, it is used on its own; the single-value field is a fallback, never merged into your request. You are charged for the items you sent and nothing else.

Who uses it

• Agency sales teams sorting a prospect list into "runs WordPress" vs "runs Shopify" before choosing which pitch to send
• Lead-gen researchers pasting a scraped domain list and keeping only the ones with a payments or support-widget detection
• Competitive analysts checking which analytics and hosting a set of rival sites share, with the evidence line for each call
• Migration consultants confirming a client portfolio's CMS and framework before quoting a replatform
• Data teams enriching a CRM account table with a tech-stack column, skipping unreachable domains at no charge

Cost per domain

Pay-per-event: one domain-analysed event per domain analysed. Unreachable domains are reported with an error and not charged. The pricing record has this one event and no per-run start fee. The price depends on your Apify plan (live pricing record, in effect since 2026-08-23):

Apify plan	price per domain analysed
Free	$0.01
Bronze	$0.0093
Silver	$0.0087
Gold	$0.008
Platinum	$0.0073
Diamond	$0.0067

Example: 1,000 reachable domains on the Free plan cost $10.00. maxDomains caps the run, which caps the spend.