Tech Stack Detector: Website Technology Lookup in Bulk

A tech stack detector for lists of websites. Paste a list of websites and get back what each one is built with: CMS, ecommerce platform, analytics, tag managers, JavaScript frameworks, CDN, hosting, payment processors, email provider and marketing tools. It also lists the SaaS a company has verified its domain with, read from public DNS records (for example HubSpot, Atlassian, DocuSign, Microsoft 365).

USD 5 per 1,000 websites. You pay only for websites that were scanned successfully. Unreachable sites are reported free.

What people use it for

• Lead lists by technology. Keep only the Shopify stores, the WordPress sites running WooCommerce, or the companies on HubSpot, before you spend on outreach.
• Competitor research. See which analytics, A/B testing, chat and payment tools competitors run.
• Sales qualification. Add a tech-stack column to a CRM export and route accounts by platform.
• Agency audits. Check a client's stack, versions and CDN in seconds.
• Market sizing. Count how many sites in a list use a given platform.

Sample output

One result per website:

{
  "domain": "allbirds.com",
  "url": "https://www.allbirds.com/",
  "statusCode": 200,
  "title": "Allbirds: Comfortable, Sustainable Shoes & Apparel",
  "technologyCount": 16,
  "technologies": [
    { "name": "Cloudflare", "version": null, "confidence": 100, "categories": ["CDN"], "detectedVia": ["headers"] },
    { "name": "Shopify", "version": null, "confidence": 100, "categories": ["Ecommerce"], "detectedVia": ["meta", "scripts"] },
    { "name": "Google Tag Manager", "version": null, "confidence": 100, "categories": ["Tag managers"], "detectedVia": ["scripts"] },
    { "name": "Microsoft 365", "version": null, "confidence": 100, "categories": ["Webmail", "Email"], "detectedVia": ["dns"] }
  ],
  "categories": {
    "Ecommerce": ["Shopify"],
    "CDN": ["Cloudflare"],
    "Payment processors": ["Apple Pay", "PayPal"],
    "Tag managers": ["Google Tag Manager"]
  },
  "saasFromDnsRecords": ["DocuSign", "Miro", "Microsoft 365"],
  "dns": { "mx": ["allbirds-com.mail.protection.outlook.com"], "ns": ["ns4.markmonitor.com"] },
  "tlsIssuer": "Let's Encrypt",
  "scannedAt": "2026-09-28T17:59:18.033Z"
}

Export as JSON, CSV or Excel, or pull the results through the Apify API.

How to use it

1. Put your websites in Websites, one per line. Bare domains (example.com) and full URLs both work.
2. Click Start.
3. Download the results, or connect the actor to Make, Zapier, n8n, Google Sheets or your own code through the Apify API.

For large lists (10,000+ sites), raise Parallel scans to 30 to 50.

What it checks

For each website it fetches the homepage over HTTP(S) and matches it against more than 7,600 technology fingerprints:

• HTTP headers and cookies
• HTML, meta tags and page structure (DOM selectors)
• Script and stylesheet URLs, and inline scripts
• robots.txt
• TLS certificate issuer
• DNS: MX (email provider), NS (DNS host) and TXT (SPF and domain verification records)

detectedVia tells you which signal found each technology. Technologies found only in DNS records appear last, and are also listed in saasFromDnsRecords.

Pricing

What	Price
Website scanned successfully	USD 0.005 (USD 5 per 1,000)
Website unreachable, invalid or failed	Free

Set a maximum cost per run in the run options and the actor stops cleanly when it reaches it. Results collected before that are kept.

Limits and accuracy

• The actor identifies itself. Every request carries the user agent Mozilla/5.0 (compatible; tech-stack-detector/1.0; +https://apify.com/JTPalms/tech-stack-detector), with plain request headers. It never pretends to be a browser. Some sites block bots; a blocked request is reported as an error, not hidden.
• It reads what a website serves to a plain request from this actor (no browser). It does not run the page's JavaScript, so technologies that only appear after scripts load (some single-page-app libraries and tag-manager-injected tools) can be missed.
• A few sites block automated requests. Those come back with a warning; this actor does not get around such blocks.
• Detection is only as good as the fingerprints. The database is the open community-maintained Wappalyzer format and is refreshed regularly.

Related actors

• Company Enrichment From Domain: Tech Stack, Socials, Hiring: Company enrichment from a list of website domains: company name, description, official social links, tech stack (CMS, ecommerce,...
• Bulk DMARC, SPF & DKIM Checker + Email Provider & SaaS Finder: Check thousands of domains for email security in one run: MX records and mail provider (Google Workspace, Microsoft 365...), SPF with...
• Website Screenshot API: Full Page, Mobile & URL to PDF: Screenshot a list of URLs as PNG, JPEG, WebP or PDF: full page, first screen, one element, or an exact clip rectangle, on desktop,...
• Shopify Products Scraper & Price Tracker: Variants, Stock, SKUs: Scrape every product and variant from Shopify stores: prices, compare-at prices, stock, SKUs, images, tags and descriptions.

FAQ

Is this the same data as Wappalyzer or BuiltWith? It uses the same open fingerprint format Wappalyzer used, from the community-maintained successor database. It is not affiliated with Wappalyzer or BuiltWith.

Can I search for all sites that use a technology? No. This actor scans the websites you give it. It does not have an index of the whole web.

Is it legal? It requests each site's public homepage and robots.txt and reads public DNS records, the same as a browser and nslookup. It does not log in, bypass protections, or collect personal data.

Something is detected wrongly or missing? Open an issue with the domain and the technology.

License

Detection engine and fingerprint data are GPL-3.0 (wappalyzer-core and enthec/webappanalyzer). This actor's code is GPL-3.0.