Website Tech Stack Detector: BuiltWith & Wappalyzer alternative

Find out what any website is built with in bulk, quickly, and for a fraction of a cent per site. Give it a list of domains and get each site's CMS, ecommerce platform, JavaScript framework, analytics, ad pixels, marketing automation, live chat, CDN, hosting, and web server. DNS insights add the company's email provider (Google Workspace, Microsoft 365, …) and the SaaS tools verified on the domain (HubSpot, Salesforce, Zendesk, Atlassian, Slack, Stripe, OpenAI, …).

It detects 275+ technologies across 50+ categories from HTTP headers, cookies, HTML, script URLs, meta tags, and MX/TXT/NS records. Each site takes a single page request, with no browser, no login, and no proxies needed.

Why use this Actor

• Low cost per site: typical alternatives charge around $0.10 per site. This Actor is priced per website analyzed with no start fee (see the Pricing tab).
• DNS-based detection most page scanners miss: email provider, email security gateway (Proofpoint, Mimecast), transactional email (SendGrid, Amazon SES, Postmark, Mailgun), DNS host, and SaaS verification records.
• Fast: 25 websites in about 6 seconds in our tests, with 10–50 sites processed in parallel.
• Spreadsheet-ready: technologyNames is a flat list for CSV/Excel, categories groups technologies by type, and technologies includes versions where detectable.
• Fair billing: unreachable sites are recorded with an error message but not charged.

Use cases

• Lead generation and sales prospecting: find Shopify stores using Klaviyo, WordPress sites without a CDN, or companies on HubSpot vs. Salesforce, then build lists for outbound.
• Competitive intelligence: see which analytics, A/B testing, and marketing stack competitors run.
• Agency audits: check a client's stack, CMS version, consent banner, and pixels before a pitch.
• Market research: measure the adoption of Next.js, Webflow, or Intercom across thousands of domains.
• Lead enrichment: add "tech stack" and "email provider" columns to your CRM or Clay table through the Apify API or integrations.

Input

{
  "urls": ["stripe.com", "allbirds.com", "https://www.gymshark.com"],
  "includeDns": true,
  "includeEvidence": false,
  "maxConcurrency": 10
}

Field	Description
urls	Domains or URLs, one per line. Duplicates are removed.
includeDns	Add email provider, DNS provider, and SaaS tools from MX/TXT/NS records (default on).
includeEvidence	Add detectedBy (header, cookie, script, html, meta, dns-mx, dns-txt, dns-ns, implied-by) to each technology.
maxConcurrency	Number of sites analyzed in parallel (1–50).
requestTimeoutSecs	Per-site timeout.

Output example

{
  "input": "linear.app",
  "url": "https://linear.app/",
  "domain": "linear.app",
  "finalUrl": "https://linear.app/",
  "statusCode": 200,
  "error": null,
  "title": "Linear – The system for product development",
  "techCount": 19,
  "technologyNames": ["Cloudflare", "Next.js", "React", "HubSpot", "Google Workspace", "Slack", "Stripe (verified)", "Amazon SES", "Postmark", "…"],
  "categories": {
    "CDN": ["Cloudflare"],
    "JavaScript framework": ["Next.js", "React"],
    "Marketing automation": ["HubSpot"],
    "Email provider": ["Google Workspace"],
    "Transactional email": ["Amazon SES", "Postmark"],
    "DNS provider": ["Cloudflare DNS"]
  },
  "technologies": [
    { "name": "Next.js", "category": "JavaScript framework", "version": null },
    { "name": "Google Workspace", "category": "Email provider", "version": null }
  ],
  "emailProvider": "Google Workspace",
  "dnsProvider": "Cloudflare DNS",
  "mxRecords": ["aspmx.l.google.com", "alt1.aspmx.l.google.com"],
  "spfIncludes": ["_spf.google.com", "spf.mtasv.net", "44092442.spf10.hubspotemail.net", "amazonses.com"],
  "nameservers": ["tim.ns.cloudflare.com", "zara.ns.cloudflare.com"],
  "socialLinks": { "x": "https://x.com/linear", "youtube": "https://www.youtube.com/@linear", "github": "https://github.com/linear" },
  "language": "en",
  "generator": null,
  "responseTimeMs": 630,
  "scrapedAt": "2026-10-02T00:14:24.719Z"
}

Categories detected

CMS, website builders, headless CMS, static site generators, documentation platforms, ecommerce platforms, payments, reviews, JavaScript frameworks and libraries, UI frameworks, fonts, page builders, SEO plugins, translation, analytics, tag managers, CDPs, session recording, advertising pixels, marketing automation, email marketing, CRM, lead capture, forms, scheduling, sales intelligence, live chat, customer support, A/B testing, feature flags, product analytics, error tracking, monitoring, cookie consent, security, video, media CDNs, search, web servers, programming languages, web frameworks, CDNs, caches, hosting/PaaS, email providers, email security, transactional email, collaboration/SaaS verifications, and DNS providers.

Pricing

You pay per website analyzed, with no start fee. See the Pricing tab for the current price. Sites that can't be reached are listed with an error and are free. Set "Maximum cost per run" to cap spend; the Actor stops cleanly at the cap.

FAQ

How accurate is it? Detections come from concrete fingerprints such as asset URLs, response headers, cookie names, generator tags, and DNS records, not guesses. Turn on includeEvidence to see exactly why each technology was flagged. Tools that load only after user interaction or through a tag manager may not appear in the raw HTML, which is a limit shared by all non-browser detectors.

What do "(verified)" technologies mean? They come from DNS TXT verification records (e.g. stripe-verification=, openai-domain-verification=). They show the organization has an account with that vendor, even if the tool isn't visible on the website.

Can I analyze specific pages, not just homepages? Yes. Pass a full URL such as https://example.com/pricing. For DNS lookups, the Actor uses the site's root domain.

What about sites behind bot protection? If a site returns 403/503, you still get DNS-based results and any header-based detections, and error explains why the result may be partial. The Actor doesn't try to bypass protections.

Is this legal? The Actor makes one normal page request per site (like a browser visit) and reads public DNS records. It doesn't log in, bypass access controls, or collect personal data. Only the company's own social profile links are extracted.

Can I request a technology? Yes, open an issue. New fingerprints are usually added within a few days.