Tech Stack & SaaS Detector (Wappalyzer / BuiltWith alternative)

Find out what any website is built with, and which SaaS tools the company behind it pays for. Paste a list of domains and get one clean row per site: CMS, ecommerce platform, analytics, tag managers, frameworks, CDN, payment and chat widgets, plus the email provider and back-office SaaS revealed by public DNS records (Google Workspace, Microsoft 365, HubSpot, Salesforce, Atlassian, Zoom, Stripe, DocuSign…).

A pay-per-domain Wappalyzer and BuiltWith alternative for lead lists, Clay tables and competitive research. No subscription, no browser, no API key.

What does Tech Stack & SaaS Detector do?

For every domain you give it, the Actor:

1. Loads the homepage over plain HTTP (following redirects, respecting robots.txt) and matches 7,600+ technology fingerprints against the HTML, scripts, headers, cookies and meta tags.
2. Reads the domain's public DNS records (MX, SPF/TXT, domain-verification tokens, NS, CNAME) to detect tools that never appear on the website: email hosting, email-sending services, CRM, collaboration and security SaaS.
3. Returns technologies with category, version (when exposed), confidence score and how each one was detected, plus the page title, description, language and company social profiles.

Everything runs on the Apify platform, so you get an API, scheduling, integrations (Make, Zapier, n8n, Clay via HTTP, Google Sheets) and datasets you can export as JSON, CSV or Excel.

Why use it?

• Build prospect lists by technology: "Shopify stores that use Klaviyo", "companies on HubSpot but not Salesforce", "WordPress sites without a cookie banner".
• Enrich CRM or Clay rows with tech stack and email provider (Google Workspace vs Microsoft 365 is a strong ICP signal).
• Competitive and market research: see which analytics, A/B-testing or payment tools your competitors adopt.
• Agencies and consultants: qualify leads before a call, audit client portfolios.
• Detect what front-end tools miss: DNS reveals Salesforce, Zendesk, Atlassian, Zoom, DocuSign, OpenAI and more, even when nothing is visible on the homepage.

How to use it

1. Click Try for free and paste your domains (one per line) into Domains or URLs. shopify.com, https://www.shopify.com/ and www.shopify.com/pricing all work.
2. Optionally list Technologies to match (e.g. Shopify, Klaviyo, Google Workspace) to get ready-made true/false columns.
3. Click Start. Expect roughly 20 domains per minute with the default 2 GB of memory (more memory means more CPU and faster runs).
4. Download the results or connect them to your tools via the API.

Input example

{
  "domains": ["allbirds.com", "apify.com", "wordpress.org"],
  "matchTechnologies": ["Shopify", "Google Workspace", "WordPress"],
  "detectDns": true,
  "includeCompanyProfile": true
}

Output example

One row per domain (simplified):

{
  "domain": "www.allbirds.com",
  "url": "https://www.allbirds.com/",
  "ok": true,
  "technologyCount": 17,
  "technologyNames": ["Shopify", "Cloudflare", "Google Tag Manager", "Apple Pay", "PayPal", "Microsoft 365", "DocuSign", "Miro"],
  "emailProviders": ["Microsoft 365"],
  "matches": {"Shopify": true, "Google Workspace": false, "WordPress": false},
  "matchesAny": true,
  "technologies": [
    {"name": "Shopify", "version": null, "confidence": 100, "categories": ["Ecommerce"],
     "website": "https://shopify.com", "saas": true, "detectedVia": ["cookies", "scriptSrc"], "impliedBy": null},
    {"name": "Microsoft 365", "version": null, "confidence": 100, "categories": ["Webmail", "Email"],
     "website": "https://www.microsoft.com/microsoft-365", "saas": true, "detectedVia": ["dns"], "impliedBy": null}
  ],
  "title": "Allbirds: Comfortable, Sustainable Shoes & Apparel",
  "language": "en-US",
  "socialProfiles": {"instagram": "https://www.instagram.com/allbirds", "x": "https://twitter.com/allbirds"},
  "scannedAt": "2026-09-27T21:40:02+00:00"
}

The Output tab has three views: Overview (one row per domain), Technologies (one row per technology, handy for pivot tables) and Matches. You can download the dataset in various formats such as JSON, CSV, Excel, XML or HTML.

Data fields

Field	Description
domain, url, statusCode	Analyzed host, final URL after redirects, HTTP status
ok, error	Whether results were produced; reason if not
technologyNames, technologyCount	Flat list of detected technologies
technologies[]	name, version, confidence (0–100), categories, website, saas, detectedVia (html, scriptSrc, headers, cookies, meta, dom, dns, implied), impliedBy
categories	Category → technologies (CMS, Ecommerce, Analytics, CRM, Email…)
emailProviders	Email host from MX records (Google Workspace, Microsoft 365, Zoho, Proton, Mimecast…)
matches, matchesAny, matchesAll	Only when Technologies to match is set
title, description, language, socialProfiles	Company profile from the homepage (company pages only, no personal profiles)
dnsRecords	Raw DNS records (optional)

How much does it cost?

You pay per successfully analyzed domain. Domains that are unreachable or return nothing are not charged. Check the price on the Pricing tab. There's no subscription and no minimum. The Apify Free plan's monthly credits are enough to test it on hundreds of domains.

Tips

• Speed: raise Max concurrency (default 10) for large lists. Each domain is visited with a polite delay, so large lists stay safe.
• Precision vs recall: Minimum confidence 50 (default) hides weak hints; set 0 to see everything, or 100 for certainty only.
• Only interested in a few tools? Set Technologies to match and Only output domains that match.
• Debugging a detection: enable Include evidence to see which script, header or DNS record matched.

FAQ

How is this different from Wappalyzer or BuiltWith? It uses the open-source Wappalyzer-format rule set maintained by the community (7,600+ technologies) and adds a DNS layer those tools don't expose per domain. You pay per domain instead of a monthly plan.

What can't it detect? It doesn't run a browser, so technologies that only appear after JavaScript executes (some single-page-app libraries, tags injected by tag managers) can be missed. Back-end tools with no public footprint (no DNS record, nothing in HTML) are invisible to any detector.

Is it legal? It reads only what any visitor's browser receives from a site's public homepage, plus public DNS. It respects robots.txt by default and collects no personal data: no emails, no phone numbers, no personal social profiles. You're responsible for how you use the results (e.g. anti-spam laws when prospecting).

Can I use it from Clay, Make, Zapier or n8n? Yes. Call the Actor via the Apify API ("Run Actor synchronously and get dataset items") with one or more domains.

Something wrong or missing? Open an issue on the Issues tab with the domain and the expected technology. New fingerprints are usually added within days.

Credits

Technology fingerprints come from webappanalyzer (GPL-3.0), a community fork of the original Wappalyzer rules. DNS resolution uses public DNS-over-HTTPS resolvers (Cloudflare, Google).