Tech Stack Lookup API - Detect Website Technologies

Find out what any website runs, and get the company behind it in the same row: CMS, ecommerce platform, analytics, advertising, payments, frameworks and thousands more, with versions and last confirmed dates.

What it does

• Identifies the stack, with versions. Each technology comes back with a machine readable slug, a display name, its categories, the versions detected and the date it was last confirmed on the site.
• Carries a CPE identifier. Where the provider has one, each technology includes its Common Platform Enumeration name, which is what you join against a CVE feed to turn a technology list into a vulnerability list.
• Adds the company, on request. Company name, industry, description, locations, size, type and founding year, so a URL becomes an account rather than a hostname.
• Adds contact details, on request. Phone numbers, email addresses, verified and safe to send email addresses and WhatsApp numbers found on the site's own contact page.
• Adds social handles, on request. LinkedIn, X, Facebook, Instagram, GitHub, TikTok, YouTube and Pinterest.
• Adds signals, locale and security, on request. An estimated technology spend band and a traffic level, the site's canonical country, region and languages, and its TLS certificate details with SPF and DMARC presence.
• Waits out a crawl instead of writing a site off. A website the provider has never indexed starts a crawl and answers with nothing. Repeating the request inside the hour is free, so this actor keeps a waiting list and comes back for those sites rather than reporting them as empty.
• Chooses a scan shape that actually works. A deep scan takes ten sites per request. A shallow scan answers in the same request but takes one site at a time. A live deep scan needs a callback endpoint on your own server, so the run falls back to a live shallow scan and says so rather than returning empty rows.
• Reads history as well as the present. Age filters with monthly grouping return results month by month, which is how you see when something was added or dropped.
• Keeps the misses. A site with no detected technologies still produces a row saying so, and it is not charged for.

Input

Look up a list of websites

{
  "urls": ["https://shopify.com", "example.com", "https://notion.so"],
  "maxResults": 100
}

Enrich with company and contact details

{
  "urls": ["https://example.com"],
  "sets": ["company", "contact", "social", "signals"]
}

Get the freshest possible answer for one site

{
  "urls": ["https://example.com"],
  "live": true,
  "maxAgeMonths": 1
}

Example output

One row per website.

{
  "url": "https://example.com",
  "domain": "example.com",
  "found": true,
  "technologyCount": 24,
  "technologies": ["Craft CMS", "Cloudflare", "Google Analytics"],
  "technologyDetails": [
    {
      "slug": "craft-cms",
      "name": "Craft CMS",
      "cpe": "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
      "categories": ["CMS"],
      "categorySlugs": ["cms"],
      "versions": ["3.0.0"],
      "confirmedAt": "2021-02-08T22:40:37.000Z"
    }
  ],
  "categories": ["CMS", "CDN", "Analytics"],
  "trafficRank": 1000,
  "crawlPending": false,
  "companyName": "Example Inc.",
  "industry": "Design",
  "companySize": 240,
  "verifiedEmail": ["hello@example.com"],
  "linkedin": ["company/example"],
  "technologySpend": "medium",
  "ipCountry": "US"
}

Frequently asked questions

What technologies can it detect?

Content management systems, ecommerce platforms, analytics and tag managers, advertising and tracking pixels, payment processors, marketing automation, CDNs, hosting providers, web servers, JavaScript frameworks and libraries, widgets, live chat, and many more. Each detection carries the categories it belongs to, so results can be grouped without a lookup table of your own.

Why did a website come back with no technologies?

Usually because the provider has not indexed it yet. When that happens the response says a crawl has been started, and the answer is ready minutes later. This actor keeps those sites on a waiting list and asks again, because repeating the request inside the hour costs nothing. If a site is still crawling when the run ends, its row says so, and running the same input again will pick the result up.

What is the difference between a deep scan and a shallow scan?

A deep scan follows internal links and indexes several pages, which finds more technologies, and it accepts ten websites per request. A shallow scan looks at the homepage only, answers within the same request, and takes one website at a time. Deep is the default because it is more complete; shallow is the one to pick when you need an answer in the same call.

Can I force a live scan?

Yes, and it is worth knowing what happens. A live scan combined with a deep scan is only completed through a callback URL on a server you control, which an actor run cannot host, so this actor runs a live shallow scan instead and says so in the log. That returns fresh results for the homepage within the same request.

Can I get email addresses and phone numbers?

Yes, by adding the contact field set. It returns phone numbers, email addresses, verified and reachable email addresses, safe to send email addresses and WhatsApp numbers, all found on the website's own pages. Add the company and social sets alongside it to get the full account picture in one row.

Can I use this to find security exposure?

Partly, and honestly the useful part is the CPE identifier. Every technology carries its Common Platform Enumeration name where one exists, which is the identifier CVE databases are keyed on, so a stack becomes a list of things to check. The security field set adds TLS certificate details and whether the domain publishes SPF and DMARC records.

How do I see when a site adopted or dropped something?

Turn off merging of monthly results and set an age window with the minimum and maximum age fields. The provider then returns results grouped by month, up to twelve months per request, so a technology appearing or disappearing is visible rather than inferred.

Do I need my own API key?

Yes. This actor is bring your own key: it calls the technology lookup API using your own account key, so you keep your own credit balance, your own rate limits and your own agreement with the provider. The provider requires a business plan for this API.

How much does a run cost?

Charging is per row, and only websites that came back with technologies are charged. Websites the provider identified nothing on, websites still being crawled and refused requests are all free. Note that the provider also spends its own credits per URL, one for a normal lookup and five for a live deep scan, separately from what is charged here.

What are the rate limits?

The provider allows ten requests a second with up to ten URLs in each. This actor paces itself at 120 requests a minute by default and is capped at 300, which leaves headroom on an account that is also serving your own application.

Keyword map

tech stack lookup API, website technology detection, technographics API, what CMS does a site use, ecommerce platform detection, detect Shopify, detect WordPress, technology fingerprinting API, CPE identifier lookup, CVE exposure from tech stack, website enrichment API, company data from domain, verified email from website, social profiles from website, technology spend estimate, traffic level signal, lead qualification by technology, competitor stack monitoring, SaaS install base research, domain to technology profile