Tech Stack Detector: Website Technologies + Email & SaaS (DNS)

Find out what any website is built with — and which business tools the company behind it uses — for $2 per 1,000 websites. Paste domains, get one clean row per site.

What you get for each website

From the website (7,000+ fingerprints, Wappalyzer-compatible):

• CMS and site builders (WordPress, Shopify, Webflow, Wix, Squarespace, Drupal, HubSpot CMS...)
• JavaScript frameworks and libraries (React, Next.js, Vue, Nuxt, Angular, jQuery...) with versions when exposed
• Analytics, tag managers, A/B testing, chat widgets, marketing automation, ad pixels
• Ecommerce platforms, payment providers, CDNs, hosting, web servers, programming languages
• Implied technologies (e.g. WordPress → PHP + MySQL), each with a confidence score and category

From DNS (what the HTML never shows):

• emailProvider — Google Workspace, Microsoft 365, Zoho, Proton, Mimecast, Proofpoint...
• emailSenders — tools allowed to send email for the domain (SPF): SendGrid, HubSpot, Mailchimp, Salesforce, Zendesk, Amazon SES, Postmark, Klaviyo...
• verifiedServices — SaaS accounts the company verified with DNS TXT records: Atlassian, DocuSign, Adobe, Stripe, Zoom, Slack, OpenAI, Miro, Apple, Meta Business...
• dnsProvider (Cloudflare, Route 53, Azure DNS...) and dmarcPolicy

Plus: page title, meta description, language, generator, server header, HTTPS, response time, security headers, and the company's official social profiles (LinkedIn company page, X, Facebook, Instagram, YouTube, GitHub, TikTok).

Why this one

• Cheap and fast. Plain HTTP + DNS, no headless browser, so it's quick and costs $0.002 per site. 1,000 sites ≈ $2.
• DNS intelligence included. Knowing a lead uses Microsoft 365 + HubSpot + DocuSign is often more useful for sales than knowing their jQuery version.
• Failed sites are free. Timeouts, DNS errors, blocked sites (HTTP 4xx/5xx with nothing detected) and invalid URLs are returned as error rows and not charged.
• Spreadsheet-friendly. technologyNames and byCategory for quick filtering, full technologies array for detail.

Use cases

• Lead generation and list building: "all Shopify stores using Klaviyo", "companies on Microsoft 365 using Salesforce"
• Sales and agency prospecting, competitor research, market sizing by technology
• Enriching CRM accounts with tech and email-provider data
• Security and IT audits of your own domains (DMARC, HSTS, CSP)

Input

{
  "urls": ["stripe.com", "wordpress.org", "https://www.shopify.com"],
  "dnsLookup": true,
  "minConfidence": 50,
  "includeEvidence": false
}

Domains without https:// are fine. The homepage (or the exact URL you give) is fetched once, following redirects.

Output (shortened, illustrative values)

{
  "domain": "wordpress.org",
  "statusCode": 200,
  "title": "Blog Tool, Publishing Platform, and CMS – WordPress.org",
  "technologyCount": 12,
  "technologyNames": ["WordPress", "PHP", "Nginx", "Google Tag Manager", "..."],
  "byCategory": { "CMS": ["WordPress"], "Web servers": ["Nginx"], "Programming languages": ["PHP"] },
  "technologies": [{ "name": "WordPress", "version": "7.2", "categories": ["CMS", "Blogs"], "confidence": 100, "website": "https://wordpress.org", "implied": false }],
  "emailProvider": "Google Workspace",
  "emailSenders": ["Google Workspace", "SendGrid"],
  "verifiedServices": ["Atlassian", "DocuSign", "Stripe"],
  "dnsProvider": "Amazon Route 53",
  "dmarcPolicy": "reject",
  "socialProfiles": { "linkedin": "https://linkedin.com/company/wordpress", "x": "https://x.com/WordPress" }
}

Pricing

Pay per result: $0.002 per website analyzed ($2 per 1,000), plus a tiny Apify start fee per run. Error rows are free. Set Maximum cost per run to cap spend — the Actor stops cleanly when it's reached.

Limitations

• Detection is static (HTML, headers, cookies, script URLs, meta tags, DOM). Technologies that only appear after JavaScript runs, or only on inner pages, may be missed — just like any non-browser detector. Pass specific URLs (e.g. /pricing, /checkout) if needed.
• Sites behind aggressive bot protection may return an error row (not charged).
• DNS data shows what is configured, which can include services no longer in active use.

Legal

Only public information is used: the public homepage a browser would see and public DNS records. No logins, no personal data — the Actor does not collect emails or people. Technology fingerprints come from the open-source wappalyzergo project (MIT license). Use the results in line with applicable law and the target sites' terms.