# Bulk Tech Stack Detector (Wappalyzer Alternative) (`gazidev/tech-stack-detector`) Actor

Detect the technology stack of thousands of websites: CMS, ecommerce platform, frameworks, analytics, CDN, hosting, payment and marketing tools, with versions and confidence. 7,600+ Wappalyzer-compatible fingerprints, HTTP-only, fast and cheap.

- **URL**: https://apify.com/gazidev/tech-stack-detector.md
- **Developed by:** [Cemal Atakli](https://apify.com/gazidev) (community)
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $20.00 / 1,000 website analyzeds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Bulk Tech Stack Detector: Wappalyzer Alternative for Thousands of Websites

Find out **what technology any website is built with**, in bulk. Paste a list of domains (or upload a CSV) and get each site's **CMS, ecommerce platform, JavaScript frameworks, analytics and marketing tools, CDN, hosting, payment providers, security/WAF, email provider** and more. Every result includes **versions, confidence scores and categories**.

- **7,600+ technologies** from the open-source Wappalyzer fingerprint set ([webappanalyzer](https://github.com/enthec/webappanalyzer), GPL-3.0), plus HTTP-only improvements for modern frameworks (Next.js app router, Remix, SvelteKit, Framer…)
- **Accurate**: full Wappalyzer pattern syntax (`\;version:\1`, ternary versions, `\;confidence:N`, `implies`, `excludes`, `requires`, `requiresCategory`), with matching on headers, cookies, meta tags, script URLs, inline scripts, HTML, DOM selectors, and optionally DNS
- **Fast and cheap**: HTTP-only (no browser), with 25+ sites in parallel. About **$20 per 1,000 sites**, 5× cheaper than the market leader
- **Bulk input**: domain list, pasted text or CSV, or a link to a TXT/CSV file
- **Explainable**: optional evidence shows *why* each technology was detected

### What can I use it for?

- **Lead generation and sales prospecting**: find all Shopify stores, WordPress + WooCommerce sites, HubSpot or Salesforce users in a list of leads
- **Competitor research**: see which analytics, A/B testing, CDP, chat and ad tools your competitors run
- **Market research**: measure technology market share across thousands of domains
- **Agencies**: audit a client's stack before a pitch or migration (outdated jQuery, CMS versions)
- **Security and IT asset inventory**: CPE identifiers and versions for software across your domains
- **Data enrichment**: add a "tech stack" column to a CRM or spreadsheet

### Input

| Field | Description |
|---|---|
| `urls` | Domains or URLs (`shopify.com`, `https://www.example.com/shop`). `https://` is added automatically, with fallback to `http://` |
| `bulkText` | Paste any list: one per line, comma separated, or a whole CSV export |
| `sourceFileUrl` | Public URL of a `.txt`/`.csv` file (e.g. a published Google Sheet) |
| `maxSites` | Limit how many sites to process (0 = all) |
| `minConfidence` | Hide weak detections (0 = show all, like Wappalyzer) |
| `includeTechDetails` | Add description, icon URL, CPE, open-source/SaaS flags and pricing tier |
| `includeEvidence` | Show the matched header/meta/script/HTML for every technology |
| `includeDns` | Detect email/DNS/SaaS providers from TXT/MX/NS/SOA/CNAME records |
| `maxConcurrency`, `requestTimeoutSecs`, `proxyConfiguration` | Advanced tuning |

```json
{
  "urls": ["allbirds.com", "wordpress.org", "nextjs.org", "www.bbc.com", "webflow.com"],
  "bulkText": "stripe.com\nhttps://www.shopify.com",
  "includeEvidence": true,
  "includeDns": false,
  "minConfidence": 0
}
```

### Output

One dataset item per website. Export as JSON, CSV, Excel or HTML, or read it via the API.

```json
{
  "inputUrl": "https://wordpress.org",
  "url": "https://wordpress.org",
  "domain": "wordpress.org",
  "statusCode": 200,
  "title": "Blog Tool, Publishing Platform, and CMS – WordPress.org",
  "technologyCount": 13,
  "technologyNames": "WordPress, WordPress Block Editor, Gutenberg, MySQL, PHP, Nginx, Google Tag Manager, HSTS, ...",
  "technologies": [
    {
      "name": "WordPress",
      "version": "7.2",
      "confidence": 100,
      "categories": ["CMS", "Blogs"],
      "website": "https://wordpress.org",
      "evidence": ["headers[link]: rel=\"https://api.w.org/\"", "meta[generator]: WordPress 7.2"]
    },
    {
      "name": "PHP",
      "version": null,
      "confidence": 100,
      "categories": ["Programming languages"],
      "website": "https://php.net",
      "evidence": ["scripts: .php?"]
    }
  ],
  "categories": {
    "CMS": ["WordPress"],
    "Programming languages": ["PHP"],
    "Web servers": ["Nginx"],
    "Tag managers": ["Google Tag Manager"]
  },
  "redirectChain": null,
  "ip": "2620:109:b00a::4206:2afc",
  "responseTimeMs": 888,
  "blocked": false,
  "error": null,
  "checkedAt": "2026-09-27T10:15:02+00:00"
}
```

Sites that cannot be reached are still listed, with `error` set (e.g. `DNS resolution failed`), and are **not charged**. Pages behind bot protection (Cloudflare challenge, DataDome…) are marked `blocked: true`. The WAF/CDN itself is still detected.

### Accuracy check (live, 2026-09-27)

Run with `tests/accuracy.py`: **41/41 expected technologies detected (100%)** on 19 well-known sites.

| Site | Detected (excerpt) |
|---|---|
| allbirds.com | Shopify, Shop Pay, Apple Pay, PayPal, Cloudflare, Google Tag Manager |
| kyliecosmetics.com | Shopify, Klaviyo, Afterpay, Yotpo Reviews, OneTrust, Bazaarvoice |
| gymshark.com | Shopify, Shop Pay, Cloudflare |
| wordpress.org | WordPress 7.2, Gutenberg 24.0.0, PHP, MySQL, Nginx |
| techcrunch.com | WordPress 6.9.9, WordPress VIP, Yoast SEO Premium 25.1 |
| whitehouse.gov | WordPress, PHP, Nginx |
| nextjs.org / vercel.com | Next.js, React, Vercel, Webpack |
| bbc.com | Next.js, React, styled-components 6.1.19, Optimizely, Piano |
| webflow.com | Webflow, jQuery 3.5.1, Cloudflare, Intellimize |
| squarespace.com / wix.com | Squarespace (+Commerce) / Wix (+eCommerce) |
| vuejs.org / svelte.dev | Vue.js, VitePress, Netlify / SvelteKit, Svelte, Vite, Vercel |
| laravel.com | Laravel, Statamic, Inertia.js, PHP, Cloudflare |
| gatsbyjs.com | Gatsby 4.24.6, React, Netlify, Contentful, Segment 4.1.0 |
| mass.gov / joomla.org | Drupal 11 / Joomla |

### Pricing

Pay per event: **$0.02 per analyzed website** ($20 per 1,000) plus a tiny $0.0005 run-start fee. Sites that fail to load are free.

| Actor (Apify Store, Sep 2026) | Price per site | 1,000 sites |
|---|---|---|
| nexgendata/wappalyzer-replacement | $0.10 | $100 |
| automation-lab/tech-stack-detector | $0.0023 | $2.30 |
| **Bulk Tech Stack Detector (this)** | **$0.02** | **$20** |

That is 5× cheaper than the market leader. Budget options exist; this Actor focuses on accuracy and depth: 7,600+ fingerprints, versions and confidence scores, 41/41 expected technologies on the live accuracy test, a `blocked` flag for bot-protected pages, and bulk CSV/TXT input. BuiltWith's official Actor/API uses separate subscription pricing. Set *Maximum cost per run* in Apify: the Actor stops gracefully when it is reached.

### FAQ

**How is this different from Wappalyzer?** It uses the same open fingerprint format and a maintained open-source fingerprint set, built for **bulk** runs: thousands of domains per run, CSV/JSON/Excel export, API and schedules, and no browser extension.

**Does it run JavaScript?** No. Plain HTTP keeps it fast and cheap. Wappalyzer's `js` (window variable) checks are approximated statically from inline scripts and element IDs, and extra static fingerprints cover modern frameworks. Tools that are only injected later by JavaScript (some tag-manager loaded pixels) may be missed. That trade-off is why it is about 5× cheaper than the market leader.

**Which pages are analyzed?** The URL you give (normally the homepage), after following redirects. You can also pass deep URLs such as `/shop` or `/blog`.

**What does confidence mean?** Wappalyzer semantics. Each matched pattern adds its confidence (default 100), capped at 100. Implied technologies inherit the confidence of the technology that implies them.

**Can I detect email providers (Google Workspace, Microsoft 365)?** Yes, turn on `includeDns`. MX/TXT/NS records also reveal DNS hosts and dozens of SaaS domain verifications.

**Is it legal?** It downloads the public homepage once, like a browser, and reads public DNS records. Respect the target sites' terms and applicable law for your use case.

**Sites return 403?** Some sites block all automated traffic. You can try `proxyConfiguration` with Apify Proxy. Blocked pages still reveal the CDN/WAF.

### Use with AI agents / Apify MCP

The Actor works well as a tool for AI agents: fast (seconds per site), cheap, with clean structured JSON.

- **Apify MCP server**: add `https://mcp.apify.com/?actors=gazidev/tech-stack-detector` to Claude Desktop, Cursor, VS Code or any MCP client. The agent can then call it, for example: "What CMS and analytics does example.com use?"
- **API**: `POST https://api.apify.com/v2/acts/gazidev~tech-stack-detector/run-sync-get-dataset-items?token=...` with `{"urls": ["example.com"]}` returns results synchronously for small lists.
- Tip for agents: read `technologyNames` for a compact answer, or `categories` to answer "which CMS / which ecommerce platform" questions directly.

### Attribution and license

Technology fingerprints and categories: [enthec/webappanalyzer](https://github.com/enthec/webappanalyzer) (GPL-3.0), a community-maintained continuation of the Wappalyzer open-source dataset. They are bundled in `src/data` together with the upstream license. The code refreshes them with `scripts/fetch_fingerprints.py`. Wappalyzer is a trademark of its respective owner. This Actor is not affiliated with Wappalyzer or BuiltWith.

# Actor input Schema

## `urls` (type: `array`):

Domains or URLs to analyze, e.g. `shopify.com` or `https://www.example.com/shop`. `https://` is added automatically when missing (falls back to `http://`).

## `bulkText` (type: `string`):

Paste a big list: one domain per line, comma/semicolon separated, or a whole CSV export (the first cell that looks like a domain/URL in each row is used).

## `sourceFileUrl` (type: `string`):

Public URL of a .txt or .csv file with domains/URLs (e.g. a Google Sheets 'publish to web' CSV link or an Apify key-value store record URL).

## `maxSites` (type: `integer`):

Stop after this many sites (0 = no limit). Useful to test a big list cheaply.

## `minConfidence` (type: `integer`):

Hide technologies detected with lower confidence. 0 shows everything (same as Wappalyzer); 50+ keeps only strong signals.

## `includeTechDetails` (type: `boolean`):

Add description, icon URL, CPE identifier, open-source/SaaS flags and pricing tier to every technology.

## `includeEvidence` (type: `boolean`):

Show why each technology was detected (matched header, meta tag, script URL, HTML snippet...). Great for auditing and sales research.

## `includeDns` (type: `boolean`):

Also query TXT/MX/NS/SOA/CNAME records. Detects email providers (Google Workspace, Microsoft 365...), DNS hosts and SaaS verification records, and adds the raw records to the output.

## `maxConcurrency` (type: `integer`):

How many sites are fetched in parallel.

## `requestTimeoutSecs` (type: `integer`):

Per-request timeout. Slow sites are retried once, then reported with an error.

## `proxyConfiguration` (type: `object`):

Optional. Not needed for most sites; use Apify datacenter proxy if many targets block your requests.

## Actor input object example

```json
{
  "urls": [
    "allbirds.com",
    "wordpress.org",
    "nextjs.org",
    "www.bbc.com",
    "webflow.com"
  ],
  "maxSites": 0,
  "minConfidence": 0,
  "includeTechDetails": false,
  "includeEvidence": false,
  "includeDns": false,
  "maxConcurrency": 25,
  "requestTimeoutSecs": 15,
  "proxyConfiguration": {
    "useApifyProxy": false
  }
}
```

# Actor output Schema

## `overview` (type: `string`):

No description

## `results` (type: `string`):

No description

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "urls": [
        "allbirds.com",
        "wordpress.org",
        "nextjs.org",
        "www.bbc.com",
        "webflow.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("gazidev/tech-stack-detector").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "urls": [
        "allbirds.com",
        "wordpress.org",
        "nextjs.org",
        "www.bbc.com",
        "webflow.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("gazidev/tech-stack-detector").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "urls": [
    "allbirds.com",
    "wordpress.org",
    "nextjs.org",
    "www.bbc.com",
    "webflow.com"
  ]
}' |
apify call gazidev/tech-stack-detector --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,gazidev/tech-stack-detector"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/PUrNmgLMgaDQha0C8/builds/baVUNYxEsAWj60b2h/openapi.json