Bulk Website Tech Stack Detector & Change Monitor

Detect 300+ technologies (CMS, ecommerce, analytics, ads, CDN, hosting, frameworks, email/DNS) on thousands of websites, with no login, no browser and no code. Export to JSON, CSV or Excel, or use the API.

A fast, affordable website technology lookup and tech stack checker for lead generation, sales prospecting, competitor research and market sizing.

What can it detect?

300+ technologies in 60+ categories, using its own fingerprint library (HTTP headers, meta generator tags, script sources, cookies, HTML patterns, and DNS MX/NS/TXT records), for example:

• CMS & site builders: WordPress, Drupal, Webflow, Wix, Squarespace, Ghost, HubSpot CMS, Framer, Duda, Contentful, Sanity
• Ecommerce & payments: Shopify, WooCommerce, Magento, BigCommerce, Salesforce Commerce Cloud, Stripe, PayPal, Klarna, Afterpay, Shop Pay
• Analytics & ads: Google Analytics, GTM, Hotjar, Clarity, Segment, Mixpanel, Meta Pixel, Google Ads, TikTok Pixel, LinkedIn Insight
• Marketing & sales: HubSpot, Klaviyo, Mailchimp, Marketo, Intercom, Drift, Zendesk, 6sense, ZoomInfo
• Infrastructure: Cloudflare, Fastly, Akamai, CloudFront, Vercel, Netlify, WP Engine, Nginx, Apache, Next.js, Nuxt, React, Vue
• DNS-based: Google Workspace, Microsoft 365, Proofpoint, Mimecast, SendGrid, Mailgun, Route 53, plus SaaS domain verifications (Atlassian, DocuSign, Slack, Zoom, Stripe, Apple…)

Monitor mode: "started using / stopped using" change feed

Turn on Monitor mode and schedule the Actor (daily or weekly). It remembers each domain's stack and adds a change object with added and removed technologies. Combine with Output only changed domains for a clean alert feed, e.g. "competitor X just added Klaviyo" or "prospect Y dropped Intercom". Use a different state store name per watchlist.

Use cases

• Build lead lists: every store on Shopify that uses Klaviyo but not Attentive
• Qualify inbound leads by stack before a sales call
• Track competitors' martech changes over time
• Agencies: audit a client portfolio's CMS, hosting and tracking

Input rules

• domains: 1 to 10,000 domains or URLs per run (duplicates are removed).
• Anything that is not a valid domain or URL (typos, spaces, % signs, a bare word with no dot) gets its own row with error: INVALID_DOMAIN ... and is not charged. The rest of the run carries on normally.
• Sites that are down or time out also get a row with an error field and are not charged.

Input example

{
  "domains": ["allbirds.com", "gymshark.com", "stripe.com"],
  "includeDns": true,
  "monitorMode": true,
  "onlyChanged": false,
  "minConfidence": 50,
  "maxConcurrency": 10
}

Output example

{
  "domain": "allbirds.com",
  "finalUrl": "https://www.allbirds.com/",
  "statusCode": 200,
  "technologyCount": 11,
  "technologyNames": ["Cloudflare", "Shopify", "Microsoft 365", "SPF", "Swiper", "HTTP/3", "HSTS", "Google Tag Manager"],
  "categories": ["CDN", "Ecommerce", "Email hosting", "Tag manager"],
  "technologies": [
    { "name": "Shopify", "category": "Ecommerce", "version": null, "confidence": 100, "evidence": ["header:x-shopid", "script", "cookie"] }
  ],
  "change": { "firstScan": false, "previousScanAt": "2026-10-04T00:00:00.000Z", "added": ["Klaviyo"], "removed": [] },
  "changed": true,
  "error": null,
  "scannedAt": "2026-10-11T00:00:00.000Z"
}

Each technology includes confidence (50 = one signal, 75+ = several independent signals) and evidence showing where it was found, so you can filter false positives. Failed sites are still returned with an error field so nothing silently disappears.

Limitations

• Scans the homepage (or the URL you give) with a plain HTTP request; tools that load only after user interaction or inside apps may be missed.
• Sites behind strict bot protection (about 20% of big consumer brands) return a challenge page. Those records get blocked: true; CDN/WAF and DNS results are still valid, page-level technologies are not.
• Tags that Google Tag Manager injects at runtime (most GA4, Meta, LinkedIn and TikTok pixels) are not visible to a static fetch. GTM itself is detected.
• Fingerprints are original to this Actor; it is not affiliated with any other technology-lookup service.

Accuracy

Tested on 249 real domains (198 reachable). Estimated precision is about 99% across all detections, after fixing the false positives that review found (vendor links counted as usage, look-alike file names). Headless Shopify (Hydrogen/Oxygen) stores are detected too. Details: accuracy/ACCURACY.md.

Example output

{
  "domain": "wordpress.org",
  "inputUrl": "https://wordpress.org/",
  "finalUrl": "https://wordpress.org/",
  "statusCode": 200,
  "title": "Blog Tool, Publishing Platform, and CMS – WordPress.org",
  "generator": "WordPress 7.2-alpha-64303",
  "technologyCount": 8,
  "technologyNames": [
    "WordPress",
    "SPF",
    "Google Fonts"
  ],
  "categories": [
    "CMS",
    "Email security",
    "Font"
  ],
  "technologies": [
    {
      "name": "WordPress",
      "category": "CMS",
      "version": "7.2",
      "confidence": 100,
      "evidence": [
        "meta:generator",
        "html"
      ]
    },
    {
      "name": "SPF",
      "category": "Email security",
      "version": null,
      "confidence": 100,
      "evidence": [
        "dns:txt"
      ]
    },
    {
      "name": "Google Fonts",
      "category": "Font",
      "version": null,
      "confidence": 75,
      "evidence": [
        "html"
      ]
    }
  ],
  "error": null,
  "scannedAt": "2026-10-12T00:57:53.617Z",
  "change": {
    "firstScan": false,
    "previousScanAt": "2026-10-12T00:57:24.909Z",
    "added": [
      "SPF",
      "Google Search Console"
    ],
    "removed": [
      "WooCommerce"
    ]
  },
  "changed": true
}

Pricing

Pay per result, with no monthly rental or subscription:

• Domain scanned: $0.0025
• Domain stack changed (monitor): $0.01

Example: 1,000 results cost about $2.50 in fees. Apify's free plan includes $5 of monthly credit, which is enough to test this Actor.

FAQ

Do I need an account, cookies or a login for the source site? No. Bulk Website Tech Stack Detector & Change Monitor uses public data sources only, so there is nothing to connect and no account to risk.

How much will a run cost? You pay only for results delivered (see Pricing above), plus Apify platform usage, which the free plan's monthly credit easily covers for test runs. Start with a small limit to see the exact cost per run.

Can I export to CSV, Excel or Google Sheets? Yes. Every run's dataset can be downloaded as JSON, CSV, Excel, XML or HTML, or pushed to Google Sheets, Make, Zapier, n8n, Slack or a webhook through Apify integrations.

Can I run it on a schedule or from my own code? Yes. Add an Apify Schedule (hourly, daily, weekly) or call it through the Apify API / Python & JavaScript clients. It also works with AI agents through the Apify MCP server.

What happens if an input is invalid or a source is down? The run keeps going. The bad input gets a row with an error field so you can see what failed, and you are not charged for results that were not delivered.

Is this legal to use? It collects publicly available data. You are responsible for using the output in line with the source's terms and privacy laws such as GDPR/CCPA; don't use it for spam.

Something missing or broken? Open an issue on the Issues tab. Feature requests are usually added within a few days.

Related tools

• Website Contact Details Extractor: Emails, Phones & Socials
• Company Logo, Favicon, Brand Colors & Social Links Extractor
• WooCommerce Products Scraper & Price Monitor (Store API)
• Bulk HTTP Security Headers Checker & Grade (with change alerts)
• Website Traffic Rank Checker: Bulk Popularity Rank & Trend

REST API

GET https://api.mediaprotools.com/v1/tech-stack?items=... (header X-API-Key). Up to 10 items per call, separated by ,. Or POST {"items":[...],"options":{...}}.

Parameter	Type	Notes
items	token	Websites to scan, e.g. shopify.com or https://example.com/shop. Duplicates are removed; invalid entries get an error row and are not charged.
includeDns	boolean	Look up MX, NS and TXT records to detect email hosting (Google Workspace, Microsoft 365), DNS provider and verified SaaS tools.
minConfidence	integer 0-100	Drop detections below this confidence (50 = one signal, 75 = two independent signals).

Output fields: blocked, categories, domain, error, finalUrl, generator, inputUrl, scannedAt, statusCode, technologies, technologyCount, technologyNames, title.