Tech Stack Detector – BuiltWith & Wappalyzer Alternative

Find out what any website is built with — in bulk, for $5 per 1,000 websites. Paste a list of domains and get back the CMS, ecommerce platform, analytics, advertising pixels, payment providers, hosting, CDN, email provider and SaaS tools behind each one. 7,600+ technologies across 100+ categories.

• 💸 ~20× cheaper than per-lookup tech-stack APIs that charge $0.10 per domain.
• ✅ You only pay for websites we actually reach. Dead domains, DNS errors and timeouts are free.
• 📬 Sees what the page can't show: DNS records reveal the email provider (Google Workspace, Microsoft 365, Proofpoint, Mimecast…) and SaaS tools the company has verified its domain with (Atlassian, HubSpot, DocuSign, Salesforce, OpenAI, Zoom and more).
• ⚡ Fast: plain HTTP, no browser — thousands of domains per run.
• 🔓 No login, no API key, no rate limits to manage.

What can I use it for?

Use case	Example
Lead generation	Filter a list of 50,000 domains down to the Shopify stores, or the WordPress sites running WooCommerce.
Sales prospecting	Find companies using a competitor's product (e.g. Intercom, HubSpot, Klaviyo) and pitch your alternative.
Lead enrichment	Add "CMS", "ecommerce platform" and "email provider" columns to your CRM or spreadsheet.
Agencies	Audit a prospect's site before a pitch: outdated CMS versions, missing analytics, no consent banner.
Market research	Measure platform market share in a niche, country or industry list.
Home-services prospecting	Find HVAC, plumbing and roofing companies running ServiceTitan, Housecall Pro, Jobber, CallRail or an answering-service widget.
Security & IT inventory	Spot exposed server software and versions across your own portfolio of sites.
AI agents	Give your agent a cheap "what is this site built with?" tool via the Apify API or MCP.

How to use

1. Paste your domains (or full URLs) into Domains or URLs — one per line. Duplicates are removed for you.
2. Click Start.
3. Download results as CSV, Excel, JSON or pull them via API. Two ready-made views: one row per website, or one row per technology.

Input example

{
    "domains": ["shopify.com", "allbirds.com", "https://techcrunch.com/"],
    "minConfidence": 50,
    "includeDns": true
}

Output example

{
    "input": "techcrunch.com",
    "domain": "techcrunch.com",
    "ok": true,
    "statusCode": 200,
    "url": "https://techcrunch.com/",
    "title": "TechCrunch | Startup and Technology News",
    "technologyCount": 31,
    "technologyNames": ["WordPress", "WordPress Block Editor", "WordPress Site Editor", "Google Tag Manager", "HubSpot", "Sailthru", "Zendesk", "Microsoft 365", "WordPress VIP", "Cloudflare DNS", "Cloudflare", "…"],
    "technologies": [
        {
            "name": "WordPress",
            "version": "6.9.9",
            "confidence": 100,
            "categories": ["CMS", "Blogs"],
            "website": "https://wordpress.org",
            "saas": true,
            "openSource": true,
            "pricing": ["low", "recurring", "freemium"]
        }
    ],
    "byCategory": {
        "CMS": ["WordPress"],
        "Marketing automation": ["HubSpot", "Sailthru"],
        "Tag managers": ["Google Tag Manager"],
        "Artificial Intelligence": ["Anthropic", "OpenAI"],
        "SEO": ["Yoast SEO", "Yoast SEO Premium"],
        "Web servers": ["Nginx"]
    },
    "socialLinks": {
        "linkedin": "https://linkedin.com/company/techcrunch",
        "x": "https://x.com/TechCrunch",
        "youtube": "https://youtube.com/user/techcrunch"
    },
    "dns": {
        "mx": ["usb-smtp-inbound-1.mimecast.com", "usb-smtp-inbound-2.mimecast.com"],
        "ns": ["elly.ns.cloudflare.com", "gordon.ns.cloudflare.com"],
        "spf": "v=spf1 a mx include:usb._netblocks.mimecast.com include:spf.protection.outlook.com include:aspmx.sailthru.com include:mail.zendesk.com …"
    },
    "scannedAt": "2026-09-25T23:05:21.655Z"
}

Unreachable domains are still listed (with ok: false and an error such as ENOTFOUND or HTTP 403) so you can see what happened — but they are not charged.

Pricing

$0.005 per website analyzed ($5 per 1,000). Pay-per-event: no monthly rental, no charge for failed domains. Platform usage is included. Set a maximum charge per run in the run options and the Actor stops cleanly when it's reached.

What gets detected?

CMS (WordPress, Drupal, Joomla, Webflow, Wix, Squarespace, Ghost, HubSpot CMS…), ecommerce (Shopify, WooCommerce, Magento, BigCommerce, PrestaShop…), analytics (Google Analytics, Mixpanel, Hotjar, Plausible…), advertising pixels (Meta, TikTok, LinkedIn Insight…), marketing automation (HubSpot, Klaviyo, Mailchimp, Marketo…), live chat (Intercom, Zendesk, Drift…), payment (Stripe, PayPal, Apple Pay, Klarna…), JavaScript frameworks and libraries (React, Next.js, Vue, jQuery…), CDN and hosting (Cloudflare, Fastly, AWS, Vercel, Netlify…), web servers, cookie-consent tools, A/B testing, reviews widgets, home-service software (ServiceTitan, Housecall Pro, Jobber, CallRail, HighLevel, Podium, Broadly, Ruby), email providers, DNS providers, and thousands more. Versions are reported when the site exposes them.

How it works (and its limits)

Each website's homepage is fetched once over HTTP. Its HTML, headers, cookies, meta tags, script URLs, inline scripts and DNS records are matched against the open-source webappanalyzer fingerprint database (7,600+ technologies, updated regularly).

The page is not rendered in a browser, which is what keeps it fast and cheap. The trade-off: technologies that only appear after JavaScript runs (some single-page apps, tags injected by a tag manager) can be missed. Sites behind aggressive bot protection may return HTTP 403; try enabling Apify datacenter proxies in Advanced for those. Residential proxies aren't supported.

Integrations and API

Run it from the Apify API, the JavaScript or Python client, or connect it to Make, Zapier, n8n, Google Sheets, Slack and more.

from apify_client import ApifyClient

client = ApifyClient("<YOUR_APIFY_TOKEN>")
run = client.actor("proffera/tech-stack-detector").call(run_input={"domains": ["shopify.com", "allbirds.com"]})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item["domain"], item["technologyNames"])

FAQ

Is this legal? It reads the same public homepage and DNS records any browser or mail server sees. It does not log in, bypass paywalls, or collect personal data.

How accurate is it? Detection uses the same community fingerprints as the Wappalyzer family of tools. Each technology comes with a confidence score; raise Minimum confidence for fewer false positives.

Can I scan internal pages, not just the homepage? Pass the full URL (e.g. https://example.com/checkout) and that page is analyzed instead.

Found a wrong or missing detection? Open an issue on the Actor's Issues tab with the domain and what you expected — fixes usually ship within a day.

Open source

This Actor is licensed under GPL-3.0. Technology fingerprints © the webappanalyzer contributors, GPL-3.0.