Website Tech Stack Detector & Checker (Wappalyzer Alternative)

Give it website URLs. Each one comes back with the technologies it runs — CMS, e-commerce platform, frameworks, analytics, ad pixels, chat widgets, payment processors, hosting and more — with the category, the version where visible and the evidence for every match. Built for lead qualification (filter prospects by stack), competitor research and sales-ops enrichment.

Scans the server-rendered homepage with one plain HTTP request. No browser, no proxy, no login — so it is fast and cheap.

Price: $9 per 1,000 sites ($0.009 each) plus $0.001 per run start, charged only on successful scans (HTTP 2xx). Unreachable sites, invalid URLs and error pages are returned with an error field and are not charged.

What it detects

113 signatures across these families:

Family	Examples
CMS & site builders	WordPress, Drupal, Joomla, Ghost, Wix, Squarespace, Webflow, Framer, Weebly, HubSpot CMS, Contentful, Sanity, Strapi, TYPO3
E-commerce	Shopify, WooCommerce, Magento, PrestaShop, BigCommerce, Salla, Zid, OpenCart
Frameworks & languages	Next.js, Nuxt, Gatsby, Remix, Astro, SvelteKit, Angular, React, Vue.js, Svelte, Laravel, Django, Ruby on Rails, Express, ASP.NET, PHP, Python
UI & JS libraries	jQuery, Bootstrap, Tailwind CSS, Alpine.js, htmx
Web servers, CDN, hosting	Nginx, Apache, LiteSpeed, IIS, Caddy, Cloudflare, CloudFront, Fastly, Akamai, Vercel, Netlify, Heroku, WP Engine, Kinsta, Varnish
Analytics & tags	Google Analytics, Google Tag Manager, Hotjar, Microsoft Clarity, Plausible, Matomo, Mixpanel, Segment, Amplitude, PostHog, Heap
Advertising pixels	Google Ads, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag
Marketing, chat, CRM	HubSpot, Mailchimp, Klaviyo, Intercom, Drift, Crisp, Zendesk, Tawk.to, LiveChat, Freshdesk, Calendly, Typeform, Pardot, Marketo
Payments	Stripe, PayPal, Square, Checkout.com
Security & consent	reCAPTCHA, hCaptcha, Cloudflare Turnstile, OneTrust, Cookiebot
Other	Google Fonts, Font Awesome, YouTube/Vimeo embeds, Google Maps, Mapbox, Sentry, Cloudinary, Algolia, Elementor, Yoast SEO, Rank Math

Where one technology implies another (WooCommerce → WordPress → PHP), the implied ones are added with implied-by: evidence.

What it does NOT do

• No JavaScript is executed. Technologies injected only at runtime (some tag-manager-loaded tools, client-only widgets) can be missed, and client-side-only apps may under-detect. If a match came from the raw HTML, headers or cookies, it is reported; nothing is guessed.
• Only the page you give is scanned (usually the homepage) — it does not crawl the whole site.
• Sites that block datacenter traffic (some Cloudflare/Akamai setups) may answer 403; those rows are not charged.

Input

Field	What it does
urls	Website URLs or bare domains, one per line. Duplicates are removed. Up to 5,000 per run.
concurrency	Sites scanned at the same time, 1–50 (default 10).

Example output

Input: https://wordpress.org

{
  "url": "https://wordpress.org",
  "finalUrl": "https://wordpress.org/",
  "status": 200,
  "scanOk": true,
  "technologyCount": 4,
  "technologies": [
    { "name": "WordPress", "category": "CMS", "version": "7.2", "evidence": ["meta:generator", "html"] },
    { "name": "Google Fonts", "category": "Font", "version": null, "evidence": ["html"] },
    { "name": "PHP", "category": "Programming language", "version": null, "evidence": ["implied-by:WordPress"] },
    { "name": "Nginx", "category": "Web server", "version": null, "evidence": ["header:server"] }
  ],
  "categories": {
    "CMS": ["WordPress"],
    "Font": ["Google Fonts"],
    "Programming language": ["PHP"],
    "Web server": ["Nginx"]
  },
  "server": "nginx",
  "error": null
}

From the same test batch: stripe.com → Next.js, React, Nginx; airbnb.com → Ruby on Rails, Ruby, Nginx.

Use it from code

curl -X POST "https://api.apify.com/v2/acts/leadharbor~website-tech-stack-detector/run-sync-get-dataset-items?token=YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"urls":["https://www.shopify.com","https://wordpress.org"]}'

Python, with the apify-client package:

from apify_client import ApifyClient

client = ApifyClient("YOUR_TOKEN")
run = client.actor("leadharbor/website-tech-stack-detector").call(
    run_input={"urls": ["https://www.shopify.com", "https://wordpress.org"]}
)
for row in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(row["url"], row["technologyCount"], [t["name"] for t in row["technologies"]])

Use it from an AI agent

This Actor is pay-per-event and works with the Apify MCP server, so AI agents (Claude, custom agents, anything MCP-compatible) can call it directly: point your agent at the Apify MCP server, and ask it to run leadharbor/website-tech-stack-detector with a list of URLs. Agents can also pay per call through Apify's agentic payment support.

FAQ

How is this different from Wappalyzer or BuiltWith? Same idea — fingerprint a site's technologies — at a different price point and shape: $0.009 per site, bulk lists up to 5,000 per run, structured JSON output with evidence per match, callable from code or AI agents. Browser extensions are fine for one site at a time; this is for lists.

Am I charged for sites that don't load? No. Only sites that answered with HTTP 2xx and were scanned are charged. DNS failures, timeouts, 403s and 500s come back with an error field, free.

Why does a site I know uses tool X not show it? No JavaScript is executed. If tool X is only injected at runtime (for example via Google Tag Manager), its marker may not be in the server-rendered HTML. Every reported match carries its evidence, so you can see exactly why it was detected.

What does version: null mean? The technology was identified but its marker carries no version string. Versions are reported where the site exposes them (meta generator tags, header values, script filenames).

Can I pass bare domains? Yes, shopify.com works — https:// is assumed. Redirects are followed (up to 4), and finalUrl shows where the scan landed.

How many sites per run? Up to 5,000. Split larger lists into several runs. With the default concurrency of 10, a 1,000-site list takes a few minutes.

Find us on RapidAPI

• Website Technology Detector on RapidAPI: a REST API that detects the technologies of one site per call, with a free plan.

Related actors

• Website Contact Extractor: find emails and phones on the sites you just qualified by stack.
• Domain Trust Check: 0–100 trust score, domain age, SSL and email DNS for any domain.
• Google Maps Scraper, MX-Checked Business Email Leads: business leads with emails from Google Maps.
• UAE / UK / USA business email finders.

Changelog

• 1.0.0 (5 Oct 2026): first release. 113 signatures, pay-per-event $0.009 per successful scan.