Tech Stack Detector: Website Technologies + DNS & SaaS Signals

Find out what any website is built with (CMS, e-commerce platform, analytics, tag managers, JavaScript frameworks, CDN, hosting, payment providers, consent tools and 6,600+ more technologies) and which business tools the company uses, read from its public DNS: email provider, email-sending services, DNS host, DMARC policy and SaaS tools that verified the domain.

Why this Actor

• 6,600+ technologies from the open Wappalyzer fingerprint set, with versions when the site exposes them (e.g. WordPress 7.2, Gutenberg 24.3.0) and a confidence score.
• DNS & SaaS signals no page scan can see: Google Workspace or Microsoft 365, Mailchimp, HubSpot, SendGrid, Salesforce, Zendesk senders, and domain verifications for Atlassian, Slack, Zoom, DocuSign, Stripe, OpenAI, Figma, Miro, Okta and many more. Ideal for B2B prospecting and competitive research.
• Fast and cheap: no browser, one request per site plus DNS, sites processed in parallel. Pay per website analysed, no start fee.
• Honest results: a site that blocks automated visits or does not answer is reported as blocked or with an error, and is not charged.

Use cases

• Sales prospecting: find Shopify stores using Klaviyo, WordPress sites without a consent tool, companies on Microsoft 365 using Salesforce
• Competitive research: compare the stack of competitors and market leaders
• Agencies and SEO: audit a list of client or prospect sites in minutes
• Market research: measure the adoption of a technology across thousands of domains

Input example

{
  "websites": ["wordpress.org", "https://www.gymshark.com", "apify.com"],
  "includeDns": true,
  "minConfidence": 50
}

Output example

{
  "input": "https://www.gymshark.com",
  "url": "https://www.gymshark.com",
  "finalUrl": "https://www.gymshark.com/",
  "domain": "www.gymshark.com",
  "statusCode": 200,
  "title": "Gymshark | Gym Clothes & Workout Clothes",
  "technologyNames": ["Amazon CloudFront", "Contentful", "Shopify", "Next.js", "Afterpay", "PayPal", "Algolia", "React"],
  "technologies": [
    { "name": "Shopify", "version": null, "categories": ["Ecommerce"], "confidence": 100, "implied": false, "website": "https://shopify.com" },
    { "name": "Next.js", "version": null, "categories": ["JavaScript frameworks", "Web frameworks", "Static site generator"], "confidence": 100, "implied": false, "website": "https://nextjs.org" }
  ],
  "categories": { "Ecommerce": ["Shopify"], "Payment processors": ["Afterpay", "PayPal"], "Search engines": ["Algolia"] },
  "dns": {
    "emailProvider": ["Proofpoint"],
    "emailSenders": ["Proofpoint"],
    "verifiedServices": ["Atlassian", "Figma", "Google Search Console", "Meta Business", "Microsoft 365", "OneTrust", "Zoom"],
    "dnsProvider": ["Amazon Route 53"],
    "dmarcPolicy": null,
    "mx": ["…"], "nameservers": ["…"], "spf": "v=spf1 …"
  },
  "blocked": false,
  "error": null
}

How it works

The Actor loads each website's home page like a normal visitor (no login, no proxy, no browser) and matches headers, cookies, HTML, scripts, meta tags and page elements against the fingerprints. DNS records are read from public resolvers. Technologies that are only visible after JavaScript runs in a browser may not be detected.

Tips

• Enter domains (example.com) or full URLs; for a specific shop or blog section use its URL.
• Use Minimum confidence 100 for the strictest results, 25 to see weak signals too.
• Schedule the Actor monthly on your prospect list to catch stack changes.

Credits and privacy

Technology fingerprints: wappalyzergo by ProjectDiscovery (MIT license). Only public data about websites and companies is returned, no personal data. At the end of each run the developer receives an anonymous notification with only numbers (websites analysed, amount charged, duration, success or failure). Your input, the results and your identity are never sent.