Bulk Tech Stack Detector: Wappalyzer Alternative for Thousands of Websites

Find out what technology any website is built with, in bulk. Paste a list of domains (or upload a CSV) and get each site's CMS, ecommerce platform, JavaScript frameworks, analytics and marketing tools, CDN, hosting, payment providers, security/WAF, email provider and more. Every result includes versions, confidence scores and categories.

• 7,600+ technologies from the open-source Wappalyzer fingerprint set (webappanalyzer, GPL-3.0), plus HTTP-only improvements for modern frameworks (Next.js app router, Remix, SvelteKit, Framer…)
• Accurate: full Wappalyzer pattern syntax (\;version:\1, ternary versions, \;confidence:N, implies, excludes, requires, requiresCategory), with matching on headers, cookies, meta tags, script URLs, inline scripts, HTML, DOM selectors, and optionally DNS
• Fast and cheap: HTTP-only (no browser), with 25+ sites in parallel. About $20 per 1,000 sites, 5× cheaper than the market leader
• Bulk input: domain list, pasted text or CSV, or a link to a TXT/CSV file
• Explainable: optional evidence shows why each technology was detected

What can I use it for?

• Lead generation and sales prospecting: find all Shopify stores, WordPress + WooCommerce sites, HubSpot or Salesforce users in a list of leads
• Competitor research: see which analytics, A/B testing, CDP, chat and ad tools your competitors run
• Market research: measure technology market share across thousands of domains
• Agencies: audit a client's stack before a pitch or migration (outdated jQuery, CMS versions)
• Security and IT asset inventory: CPE identifiers and versions for software across your domains
• Data enrichment: add a "tech stack" column to a CRM or spreadsheet

Input

Field	Description
urls	Domains or URLs (shopify.com, https://www.example.com/shop). https:// is added automatically, with fallback to http://
bulkText	Paste any list: one per line, comma separated, or a whole CSV export
sourceFileUrl	Public URL of a .txt/.csv file (e.g. a published Google Sheet)
maxSites	Limit how many sites to process (0 = all)
minConfidence	Hide weak detections (0 = show all, like Wappalyzer)
includeTechDetails	Add description, icon URL, CPE, open-source/SaaS flags and pricing tier
includeEvidence	Show the matched header/meta/script/HTML for every technology
includeDns	Detect email/DNS/SaaS providers from TXT/MX/NS/SOA/CNAME records
maxConcurrency, requestTimeoutSecs, proxyConfiguration	Advanced tuning

{
  "urls": ["allbirds.com", "wordpress.org", "nextjs.org", "www.bbc.com", "webflow.com"],
  "bulkText": "stripe.com\nhttps://www.shopify.com",
  "includeEvidence": true,
  "includeDns": false,
  "minConfidence": 0
}

Output

One dataset item per website. Export as JSON, CSV, Excel or HTML, or read it via the API.

{
  "inputUrl": "https://wordpress.org",
  "url": "https://wordpress.org",
  "domain": "wordpress.org",
  "statusCode": 200,
  "title": "Blog Tool, Publishing Platform, and CMS – WordPress.org",
  "technologyCount": 13,
  "technologyNames": "WordPress, WordPress Block Editor, Gutenberg, MySQL, PHP, Nginx, Google Tag Manager, HSTS, ...",
  "technologies": [
    {
      "name": "WordPress",
      "version": "7.2",
      "confidence": 100,
      "categories": ["CMS", "Blogs"],
      "website": "https://wordpress.org",
      "evidence": ["headers[link]: rel=\"https://api.w.org/\"", "meta[generator]: WordPress 7.2"]
    },
    {
      "name": "PHP",
      "version": null,
      "confidence": 100,
      "categories": ["Programming languages"],
      "website": "https://php.net",
      "evidence": ["scripts: .php?"]
    }
  ],
  "categories": {
    "CMS": ["WordPress"],
    "Programming languages": ["PHP"],
    "Web servers": ["Nginx"],
    "Tag managers": ["Google Tag Manager"]
  },
  "redirectChain": null,
  "ip": "2620:109:b00a::4206:2afc",
  "responseTimeMs": 888,
  "blocked": false,
  "error": null,
  "checkedAt": "2026-09-27T10:15:02+00:00"
}

Sites that cannot be reached are still listed, with error set (e.g. DNS resolution failed), and are not charged. Pages behind bot protection (Cloudflare challenge, DataDome…) are marked blocked: true. The WAF/CDN itself is still detected.

Accuracy check (live, 2026-09-27)

Run with tests/accuracy.py: 41/41 expected technologies detected (100%) on 19 well-known sites.

Site	Detected (excerpt)
allbirds.com	Shopify, Shop Pay, Apple Pay, PayPal, Cloudflare, Google Tag Manager
kyliecosmetics.com	Shopify, Klaviyo, Afterpay, Yotpo Reviews, OneTrust, Bazaarvoice
gymshark.com	Shopify, Shop Pay, Cloudflare
wordpress.org	WordPress 7.2, Gutenberg 24.0.0, PHP, MySQL, Nginx
techcrunch.com	WordPress 6.9.9, WordPress VIP, Yoast SEO Premium 25.1
whitehouse.gov	WordPress, PHP, Nginx
nextjs.org / vercel.com	Next.js, React, Vercel, Webpack
bbc.com	Next.js, React, styled-components 6.1.19, Optimizely, Piano
webflow.com	Webflow, jQuery 3.5.1, Cloudflare, Intellimize
squarespace.com / wix.com	Squarespace (+Commerce) / Wix (+eCommerce)
vuejs.org / svelte.dev	Vue.js, VitePress, Netlify / SvelteKit, Svelte, Vite, Vercel
laravel.com	Laravel, Statamic, Inertia.js, PHP, Cloudflare
gatsbyjs.com	Gatsby 4.24.6, React, Netlify, Contentful, Segment 4.1.0
mass.gov / joomla.org	Drupal 11 / Joomla

Pricing

Pay per event: $0.02 per analyzed website ($20 per 1,000) plus a tiny $0.0005 run-start fee. Sites that fail to load are free.

Actor (Apify Store, Sep 2026)	Price per site	1,000 sites
nexgendata/wappalyzer-replacement	$0.10	$100
automation-lab/tech-stack-detector	$0.0023	$2.30
Bulk Tech Stack Detector (this)	$0.02	$20

That is 5× cheaper than the market leader. Budget options exist; this Actor focuses on accuracy and depth: 7,600+ fingerprints, versions and confidence scores, 41/41 expected technologies on the live accuracy test, a blocked flag for bot-protected pages, and bulk CSV/TXT input. BuiltWith's official Actor/API uses separate subscription pricing. Set Maximum cost per run in Apify: the Actor stops gracefully when it is reached.

FAQ

How is this different from Wappalyzer? It uses the same open fingerprint format and a maintained open-source fingerprint set, built for bulk runs: thousands of domains per run, CSV/JSON/Excel export, API and schedules, and no browser extension.

Does it run JavaScript? No. Plain HTTP keeps it fast and cheap. Wappalyzer's js (window variable) checks are approximated statically from inline scripts and element IDs, and extra static fingerprints cover modern frameworks. Tools that are only injected later by JavaScript (some tag-manager loaded pixels) may be missed. That trade-off is why it is about 5× cheaper than the market leader.

Which pages are analyzed? The URL you give (normally the homepage), after following redirects. You can also pass deep URLs such as /shop or /blog.

What does confidence mean? Wappalyzer semantics. Each matched pattern adds its confidence (default 100), capped at 100. Implied technologies inherit the confidence of the technology that implies them.

Can I detect email providers (Google Workspace, Microsoft 365)? Yes, turn on includeDns. MX/TXT/NS records also reveal DNS hosts and dozens of SaaS domain verifications.

Is it legal? It downloads the public homepage once, like a browser, and reads public DNS records. Respect the target sites' terms and applicable law for your use case.

Sites return 403? Some sites block all automated traffic. You can try proxyConfiguration with Apify Proxy. Blocked pages still reveal the CDN/WAF.

Use with AI agents / Apify MCP

The Actor works well as a tool for AI agents: fast (seconds per site), cheap, with clean structured JSON.

• Apify MCP server: add https://mcp.apify.com/?actors=gazidev/tech-stack-detector to Claude Desktop, Cursor, VS Code or any MCP client. The agent can then call it, for example: "What CMS and analytics does example.com use?"
• API: POST https://api.apify.com/v2/acts/gazidev~tech-stack-detector/run-sync-get-dataset-items?token=... with {"urls": ["example.com"]} returns results synchronously for small lists.
• Tip for agents: read technologyNames for a compact answer, or categories to answer "which CMS / which ecommerce platform" questions directly.

Attribution and license

Technology fingerprints and categories: enthec/webappanalyzer (GPL-3.0), a community-maintained continuation of the Wappalyzer open-source dataset. They are bundled in src/data together with the upstream license. The code refreshes them with scripts/fetch_fingerprints.py. Wappalyzer is a trademark of its respective owner. This Actor is not affiliated with Wappalyzer or BuiltWith.