# Website Tech Stack Detector (Wappalyzer alternative) (`oqen/tech-stack-detector`) Actor

Find the CMS, ecommerce platform, frameworks, analytics, hosting, CDN and 7,600+ other technologies behind any list of websites, with versions and evidence. Also reveals SaaS tools a company verified in DNS (Google Workspace, HubSpot, Stripe...). Fast HTTP or full browser mode.

- **URL**: https://apify.com/oqen/tech-stack-detector.md
- **Developed by:** [oqen](https://apify.com/oqen) (community)
- **Categories:** Lead generation, Developer tools, SEO tools
- **Security:** Limited permissions
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $3.00 / 1,000 site analyzeds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Website Tech Stack Detector (Wappalyzer alternative)

Paste a list of websites and get the **technologies each one runs**: CMS, ecommerce platform, JavaScript frameworks, analytics and marketing tags, payment providers, hosting, CDN, web server and more. You also get **versions** where they are exposed and the **evidence** behind every detection.

It uses the open Wappalyzer-format fingerprint database ([webappanalyzer](https://github.com/enthec/webappanalyzer), 7,600+ technologies, updated continuously).

Typical uses:

- **Lead generation**: find every Shopify or WooCommerce store in a list, or every site still on Universal Analytics
- **Sales intelligence**: see which email, CRM and SaaS tools a prospect uses before you call
- **Competitor research and agency audits**: see what a site is built with and which tags it loads
- **Security inventory**: flag outdated WordPress, jQuery or PHP versions across many sites

### What makes it different

- **Two modes.** **Fast** mode needs one HTTP request per site (about 1 s) and also reads the site's own JS bundles for version banners. **Browser** mode renders the page in Chrome and checks JavaScript globals, cookies and every request the page makes. That catches tag-manager-loaded pixels (Facebook Pixel, Clarity, Hotjar...) and SPA frameworks that plain HTTP can't see.
- **DNS intelligence.** Public MX/TXT/NS records show the company's email provider (Google Workspace, Microsoft 365), DNS host and SaaS tools whose domain verification they added: HubSpot, Stripe, Atlassian, Zoom, DocuSign, OpenAI... These come back separately as `dnsServices`, so they never pollute the website stack.
- **Evidence for every hit**, e.g. `header x-powered-by: Next.js` or `script: https://cdn.shopify.com/...`, so you can trust or dismiss it.
- **Spreadsheet-friendly**: `technologyNames` and `dnsServiceNames` are flat text columns, and `byCategory` groups names by category.

### Input

```json
{ "urls": ["allbirds.com", "https://vercel.com"], "mode": "fast", "checkDns": true }
```

### Output (trimmed, real result)

```json
{
  "domain": "allbirds.com", "status": "ok", "statusCode": 200, "title": "Allbirds | Sustainable Shoes...",
  "technologyCount": 26,
  "technologyNames": "Shopify, Apple Pay, GSAP, PayPal, Shop Pay, Vue.js, Attentive, Cloudflare, Facebook Pixel 2.9.429, Google Analytics GA4, Microsoft Clarity, OneTrust, ...",
  "technologies": [
    { "name": "Shopify", "version": null, "confidence": 100, "categories": ["Ecommerce"], "website": "https://shopify.com",
      "evidence": ["script: https://www.allbirds.com/cdn/shop/t/..."], "source": "website" }
  ],
  "byCategory": { "Ecommerce": ["Shopify"], "Payment processors": ["Apple Pay", "PayPal", "Shop Pay"] },
  "dnsServices": [{ "name": "Microsoft 365", "categories": ["Email"], "evidence": ["DNS MX: ...mail.protection.outlook.com"] }],
  "dnsServiceNames": "Apple iCloud Mail, Microsoft 365, DocuSign, Miro"
}
```

### Reliability

- Sites that answer 4xx/5xx (bot walls, error pages) are returned with `status: "blocked"` and are **not charged**. Browser mode gets through more of them.
- Unreachable sites, DNS failures, timeouts and invalid URLs are returned with a clear `error` and are **not charged**.
- Detection is passive. The Actor loads the public page like a normal visitor, plus at most 6 same-site scripts in fast mode. It never probes admin paths.

### Pricing

Pay per event: `site-analyzed`, charged once per website that loaded successfully. Failed, blocked and invalid sites are free.

### Limitations

Technologies used only behind a login, or only on pages you didn't submit, can't be seen. Submit specific URLs (e.g. `/checkout` or `/blog`) for deeper coverage. Fingerprints are community-maintained and GPL-3.0 licensed (see `src/data/LICENSE-webappanalyzer.txt`).

# Actor input Schema

## `urls` (type: `array`):

Domains or URLs, e.g. allbirds.com or https://www.example.com/shop. Duplicates are removed.

## `urlsText` (type: `string`):

Domains/URLs separated by new lines, spaces or commas.

## `mode` (type: `string`):

Browser mode finds roughly twice as many analytics/marketing tags and JS libraries, but is slower and uses more memory.

## `checkDns` (type: `boolean`):

Reads public MX/TXT/NS/CNAME records to detect email provider, DNS host and SaaS tools verified on the domain (returned separately as dnsServices).

## `minConfidence` (type: `integer`):

Hide weak matches below this confidence.

## `timeoutSecs` (type: `integer`):

Per-site load timeout.

## `maxSites` (type: `integer`):

Safety cap.

## Actor input object example

```json
{
  "urls": [
    "https://www.allbirds.com",
    "https://vercel.com"
  ],
  "mode": "fast",
  "checkDns": true,
  "minConfidence": 50,
  "timeoutSecs": 30,
  "maxSites": 1000
}
```

# Actor output Schema

## `results` (type: `string`):

One item per website: technologies (name, version, confidence, categories, evidence), byCategory, dnsServices.

## `summary` (type: `string`):

Counts of analyzed, failed and charged sites.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "urls": [
        "https://www.allbirds.com",
        "https://vercel.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("oqen/tech-stack-detector").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "urls": [
        "https://www.allbirds.com",
        "https://vercel.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("oqen/tech-stack-detector").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "urls": [
    "https://www.allbirds.com",
    "https://vercel.com"
  ]
}' |
apify call oqen/tech-stack-detector --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,oqen/tech-stack-detector"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/g8SEUYLiJa4jTfxwc/builds/uqzPQiaGr80MsMQaK/openapi.json