Website Tech Stack Detector: CMS, SaaS Tools & Email Provider
Pricing
from $3.00 / 1,000 website reports
Website Tech Stack Detector: CMS, SaaS Tools & Email Provider
See what any website runs on: CMS, shop platform, frameworks, analytics, ad pixels, CRM and chat tools, CDN and hosting, plus email provider, SaaS tools verified in DNS, TLS expiry, AI crawler rules and stack changes between runs. Evidence for every match.
Pricing
from $3.00 / 1,000 website reports
Rating
0.0
(0)
Developer
Simon Liarsgård
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
5 days ago
Last modified
Categories
Share
Website Tech Stack Detector
Give it a list of domains and get back what each site is built with: the CMS or shop platform, frameworks, analytics and ad pixels, marketing, CRM and chat tools, consent banner, CDN and hosting. It also reads the domain's public DNS, which a page scan can't see: who handles the company's email, which services send mail on its behalf, and which SaaS tools the company has verified ownership with (Atlassian, DocuSign, Slack, Zoom and so on).
Every detected technology comes with the evidence it was found by, such as the script URL, the response header or the DNS record. You can check any result by hand.
What you can use it for
- Lead lists. Find the shops on Shopify or WooCommerce, the companies on Microsoft 365 rather than Google Workspace, or the sites that run HubSpot. Put the names you care about in Technologies to flag and filter on
watchedTechnologiesFound. - Switch signals. Run it on a schedule. With change tracking on, each report lists the technologies added or removed since the previous run, so you hear when a prospect drops a competitor or adds a new chat tool.
- Agency and sales research. See a site's stack before a call: framework, hosting, consent tool, analytics and tag setup.
- Email deliverability checks. See each domain's MX provider, SPF senders and DMARC policy side by side.
- AI crawler policy. See which AI crawlers (GPTBot, ClaudeBot, Google-Extended, CCBot and others) a site's robots.txt keeps out.
Input
| Field | What it does |
|---|---|
| Websites | Domains or URLs, one per line. An email address works too; its domain is used. |
| Technologies to flag | Optional names to look for, for example Shopify, HubSpot, Microsoft 365. |
| Check DNS and TLS | On by default. Adds the email provider, email senders, SaaS tools verified in DNS, DNS provider and the TLS certificate. |
| Track changes between runs | On by default. Remembers each domain's stack and reports what changed. |
| Change tracking key | Keeps a separate history for each list you watch. |
| Max websites / Websites in parallel | Limits for big lists. |
{"websites": ["allbirds.com", "oatly.com", "klarna.com"],"watchTechnologies": ["Shopify", "HubSpot"]}
Output
One row per website. The Overview view has the main platform in each category. The Technologies view has one row per technology with its version and evidence. Email, DNS and social covers the mail setup, TLS certificate, AI crawler rules and the site's own social profiles. Detail has everything.
{"website": "allbirds.com","status": "ok","technologyCount": 11,"ecommerce": "Shopify","analytics": ["Microsoft Clarity"],"consent": "OneTrust","cdn": ["Cloudflare"],"emailProvider": "Microsoft 365","saasVerified": ["Google Search Console", "DocuSign", "Apple Business", "Miro"],"watchedTechnologiesFound": ["Shopify", "Microsoft 365"],"technologies": [{ "name": "Shopify", "category": "ecommerce", "version": null, "source": "header:powered-by", "evidence": "Shopify" },{ "name": "Microsoft 365", "category": "email-provider", "version": null, "source": "mx", "evidence": "allbirds-com.mail.protection.outlook.com" }],"tls": { "issuer": "Let's Encrypt", "daysUntilExpiry": 68, "trusted": true },"aiCrawlers": { "robotsTxt": true, "blocked": [] },"changes": { "previousCheckAt": "2026-10-30T03:28:03.890Z", "added": [], "removed": [] }}
This is a shortened row from a real run in October 2026. Your results reflect each site at the time of your run.
What it detects
About 266 technologies in 36 categories, written and tested by hand rather than copied from a public list. Matches are kept strict on purpose, because a false positive in a lead list costs more than a miss.
- Site: WordPress, Drupal, TYPO3, Contentful, Sanity, Storyblok, Webflow, Wix, Squarespace, Framer, Shopify, WooCommerce, Magento, Salesforce Commerce Cloud, Shopware, Next.js, Nuxt, Astro, React, Vue.js, Angular and more.
- Marketing and sales: Google Analytics and Tag Manager, Meta, LinkedIn, TikTok and Google Ads pixels, HubSpot, Marketo, Pardot, Klaviyo, Intercom, Drift, Zendesk, 6sense, Leadfeeder and more.
- Infrastructure: Cloudflare, Fastly, Akamai, CloudFront, Vercel, Netlify, WP Engine, Nginx, Apache, PHP, ASP.NET.
- From DNS: Google Workspace, Microsoft 365 and other mail providers, Mimecast and Proofpoint gateways, SendGrid, Mailgun, Amazon SES and other senders, about 30 SaaS verification records and the DNS provider.
Pricing
You pay per website report, at $0.003 per analysed website ($3 per 1,000), plus a tiny start fee. You don't pay for:
- invalid input or domains that don't exist;
- websites whose homepage is blocked, unreachable or not HTML (you still get the DNS part of the report for free);
- errors.
Set a maximum charge on the run if you want a hard ceiling. The Actor stops cleanly when it's reached.
How it works and what it respects
For each domain the Actor reads robots.txt, fetches the homepage once, runs DNS lookups and opens one TLS connection. That's about the same as a single visit in a browser. It identifies itself as TechStackDetector in the user agent. If a site's robots.txt disallows that agent (or all agents) from the page, the homepage is not fetched and only the DNS part is reported, at no charge. It never logs in, submits forms or follows links deeper into a site. Cookie values are never stored; only cookie names are used for matching.
Limits
- Only the page you give (usually the homepage) is read. Tools that load only on checkout or after login won't show up.
- Tools injected later by a tag manager may not appear in the HTML. The tag manager itself is still reported.
- Sites behind strict bot protection sometimes answer with a challenge page. Those come back as
partialand are free.
Support
Missing a technology you need, or found a wrong match? Open an issue on the Actor page with the domain and what you expected, and it will usually be added in the next version.