# Website Tech Stack Detector - CMS, Analytics & Email (`rjmacarthy/tech-stack-detector`) Actor

Detect the tech stack of any website: CMS, ecommerce platform, frameworks, analytics, ad pixels, CDN, hosting, plus DNS-based email provider (Google Workspace, Microsoft 365), email senders and verified SaaS tools. 490+ technologies, flat price per site, change monitoring.

- **URL**: https://apify.com/rjmacarthy/tech-stack-detector.md
- **Developed by:** [rj](https://apify.com/rjmacarthy) (community)
- **Categories:** Lead generation, Developer tools
- **Features:** Limited permissions
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $3.00 / 1,000 website analyseds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Website Tech Stack Detector - CMS, Analytics, Ecommerce & Email Provider

Find out what any website is built with: **CMS, ecommerce platform, JavaScript framework, analytics, ad pixels, tag manager, CDN, hosting, payment, chat widget, consent banner** and more, from one page fetch per site. It also reads the domain's **DNS**: MX, SPF, TXT, NS and CNAME records reveal the **email provider (Google Workspace, Microsoft 365, Zoho...)**, **email senders (SendGrid, Mailchimp, HubSpot, Salesforce, Amazon SES...)**, the **DNS host** and the **SaaS tools the company verified its domain with** (Atlassian, DocuSign, Zoom, Slack...). HTML-only detectors miss all of that, and it's what B2B sales teams filter on ("companies on Microsoft 365 using HubSpot"). Every detection comes with a **version (when visible), a confidence score and the evidence** behind it. **One flat price per website**, no start fee, and websites that fail or block us are free. Other tech-stack Actors charge per technology row ($0.10-$0.30 per site) or add a start fee. A **monitoring mode** outputs only the sites whose stack changed since the last run, with `added` / `removed` lists.

### What data can you get?

| Field | Example |
|---|---|
| `domain`, `url`, `title`, `language`, `statusCode` | `stripe.com`, `https://stripe.com/en-de`, `Stripe \| Financial Infrastructure...`, `en-DE`, `200` |
| `cms`, `ecommerce`, `framework` | `WordPress`, `Shopify`, `Next.js` |
| `analytics[]` | `["Google Analytics", "Hotjar"]` |
| `emailProvider`, `mxHosts[]` | `Google Workspace`, `["aspmx.l.google.com", ...]` |
| `cdn`, `hosting`, `nameservers[]` | `Cloudflare`, `Vercel`, `["ns1.vercel-dns.com", ...]` |
| `categories{}` | `{ "emailDelivery": ["SendGrid", "Postmark"], "marketingAutomation": ["HubSpot"], ... }` |
| `technologies[]` | `{ "name": "WordPress", "category": "cms", "version": "6.9.11", "confidence": 100, "evidence": "meta generator" }` |
| `technologyCount` | `28` |
| `status`, `error` | `ok` / `blocked` / `failed`, and why |
| `added[]`, `removed[]`, `previousCheckAt` | monitoring mode only |

**490+ technologies in 36 categories**: CMS and site builders, ecommerce, JS frameworks and libraries, UI frameworks, static site generators, backend frameworks and languages, web servers, CDN, hosting/PaaS, analytics and session replay, tag managers, advertising pixels, marketing automation and CRM, chat and helpdesk, A/B testing, consent banners, payments and BNPL, reviews, search, fonts, video, maps, forms, scheduling, accessibility, bot protection, monitoring, email provider, email security gateway, email delivery (ESP), DNS provider, plus 120+ named SaaS vendors (and any other "vendor-domain-verification" record) from DNS TXT records. The signature set is our own, written from vendor documentation and real pages.

### Use cases

- **Sales prospecting**: build lead lists by technology ("SaaS companies on Microsoft 365 with HubSpot", "WordPress sites without a consent banner"). Platforms that sit behind bot walls, like many Shopify stores, are still identified from the challenge page, CNAME and SPF records, and those rows are free.
- **Agencies**: qualify prospects before a pitch (outdated WordPress, no analytics, no consent banner).
- **Competitive intelligence**: see which analytics, A/B testing, chat and payment tools competitors run.
- **Market research**: measure CMS or framework share across a list of domains.
- **Monitoring**: schedule it weekly with "Only changes" and get alerted when a customer or competitor adds or drops a tool.
- **Data enrichment**: add email provider, CDN and hosting to a CRM's company records.

### How to use

1. Paste websites or domains into **Websites / domains** (`stripe.com` or `https://www.stripe.com/pricing` both work).
2. Keep **Check DNS** on (it's free and gives the email/SaaS data).
3. Run it and download the dataset as JSON, CSV or Excel. The **Overview** view shows one row per site, **Email & DNS** is built for B2B targeting.

Basic:

```json
{
    "urls": ["https://wordpress.org", "https://www.python.org", "https://stripe.com", "https://github.com", "https://apify.com"],
    "checkDns": true
}
```

Weekly monitoring of competitors (only changed stacks are output and charged):

```json
{
    "urls": ["notion.so", "linear.app", "www.figma.com", "airtable.com", "asana.com"],
    "onlyChanges": true,
    "stateKey": "competitors"
}
```

### Output example

Real item (technologies list shortened):

```json
{
  "id": "python.org",
  "domain": "python.org",
  "inputUrl": "https://www.python.org",
  "url": "https://www.python.org/",
  "status": "ok",
  "statusCode": 200,
  "title": "Welcome to Python.org",
  "language": "en",
  "technologyCount": 18,
  "cms": null,
  "ecommerce": null,
  "framework": null,
  "emailProvider": "Google Workspace",
  "cdn": "Fastly",
  "hosting": null,
  "analytics": [],
  "categories": {
    "jsLibrary": ["jQuery", "jQuery UI", "Modernizr"],
    "cdn": ["Fastly"],
    "libraryCdn": ["Google Hosted Libraries"],
    "webServer": ["Nginx", "Varnish"],
    "emailProvider": ["Google Workspace"],
    "emailDelivery": ["Mailgun"],
    "dnsProvider": ["Amazon Route 53"],
    "security": ["HSTS"],
    "siteVerification": ["Anthropic", "Atlassian Statuspage", "GlobalSign", "Google Search Console", "Microsoft 365", "OpenAI", "Twilio"]
  },
  "technologies": [
    { "name": "jQuery", "category": "jsLibrary", "version": "1.8.2", "confidence": 100, "evidence": "script src" },
    { "name": "jQuery UI", "category": "jsLibrary", "version": "1.12.1", "confidence": 100, "evidence": "script src" },
    { "name": "Fastly", "category": "cdn", "version": null, "confidence": 100, "evidence": "header x-served-by; CNAME www" },
    { "name": "Mailgun", "category": "emailDelivery", "version": null, "confidence": 80, "evidence": "SPF include" }
  ],
  "mxHosts": ["mail.python.org"],
  "nameservers": ["ns-1134.awsdns-13.org", "ns-2046.awsdns-63.co.uk", "ns-484.awsdns-60.com", "ns-981.awsdns-58.net"],
  "dnsStatus": "ok",
  "added": null,
  "removed": null,
  "previousCheckAt": null,
  "error": null,
  "scrapedAt": "2026-11-08T12:38:57.632Z"
}
```

**Confidence**: 100 = direct evidence (header, cookie, meta tag, script URL, MX/NS/CNAME record), 80 = SPF include or TXT record, 75 = pattern in the HTML, 60 = domain-verification record, 50 = implied by another technology (WooCommerce implies WordPress, Next.js implies React).

### Pricing

Pay per event, no start fee:

| Event | Price | When |
|---|---|---|
| `website` | **$0.003** | per website successfully analysed |

- **1,000 websites ≈ $3.00**, 100 websites ≈ $0.30.
- Websites that fail (DNS error, timeout, HTTP error) or block us with a bot wall are output with `status` and `error` set and are **not charged**.
- In "Only changes" mode, unchanged websites are not output and **not charged**.
- Set "Maximum cost per run" and the Actor stops cleanly when it's reached.

### Tips and limits

- **One page per site** (the URL you give, after up to 5 redirects; 20 s timeout, first 2 MB of HTML). Tools that are loaded later by Google Tag Manager or only on other pages (checkout, blog) are not visible. Give the exact page if it matters (e.g. `shop.example.com`).
- **Bot walls**: many Shopify stores and Cloudflare/DataDome/Vercel-protected sites answer automated requests with a challenge page. Those items get `status: "blocked"`, are free, and still list what the response headers and DNS reveal (often the platform itself, e.g. Shopify, plus the email provider). A datacenter proxy rarely gets past these walls.
- **DNS** is queried for the domain without `www.`. If you give a subdomain (`blog.example.com`), MX/SPF/NS come from that subdomain, so the email provider may be missing; give the main domain for email data.
- SPF includes are read at the top level only (nested includes are not followed).
- Domain-verification records (`siteVerification` category) show tools the company signed up for at some point; they may be stale.
- Default limit: 1,000 websites per run (`maxItems`, 0 = no limit). Five sites are fetched in parallel; ~1,000 sites take a few minutes.

### FAQ

**Is it legal?** It reads public web pages and public DNS records, the same data any browser or `dig` shows. It doesn't log in, solve captchas or collect personal data. You are responsible for using the results in line with the laws and terms that apply to you.

**How is this different from BuiltWith or Wappalyzer?** BuiltWith sells a historical database; this Actor checks the live site now. Compared with Wappalyzer-style detectors, it adds DNS: email provider, email security gateway, email senders, DNS host and verified SaaS vendors, which a page fetch can't see.

**Why does a site show `blocked`?** The site returned a bot challenge or HTTP 401/403/429 to our server. You aren't charged; DNS and header-based detections are still included.

**Do I need a proxy?** Usually not. If many of your sites return 403/429, enable Apify Proxy (datacenter). Residential proxies are not supported: if you pick the RESIDENTIAL group, the Actor logs a warning and uses Apify datacenter proxy instead.

**How does "Only changes" work?** The Actor stores each domain's technology names in a named key-value store (`stateStoreName` / `stateKey`). On the next run it outputs only websites whose set changed, with `added` and `removed`. The first run outputs every website. Failed or blocked runs don't overwrite the stored stack.

**Can I check thousands of sites?** Yes. Set `maxItems` to 0 or a higher number. A run of 10,000 sites costs about $30.

### Integrations

- **API**: run it and get the items in one call:

  ```bash
  curl -X POST "https://api.apify.com/v2/acts/rjmacarthy~tech-stack-detector/run-sync-get-dataset-items?token=YOUR_TOKEN" \
    -H "Content-Type: application/json" \
    -d '{"urls":["stripe.com","github.com"],"checkDns":true}'
  ```

- **Schedules and webhooks**: run weekly with `onlyChanges` and send changed stacks to your pipeline when the run finishes.

- **Make, Zapier, n8n**: enrich leads in Google Sheets, HubSpot, Airtable or Slack without code.

- **AI agents (MCP)**: use the Actor as a tool through the Apify MCP server.

- Python and JavaScript clients (`apify-client`) for programmatic runs.

### Changelog

- **0.1** (Nov 2026): first release. 490+ technologies, DNS-based email provider / ESP / DNS host / verified SaaS detection, CNAME-based platform detection, versions, confidence and evidence per detection, bot-wall detection (free), only-changes monitoring.

### More scrapers by the same developer

- [AI Visibility Tracker: ChatGPT, Perplexity, Gemini, Claude](https://apify.com/rjmacarthy/ai-search-visibility-tracker)
- [AliExpress Scraper - Product Search, Prices, Ratings & Details](https://apify.com/rjmacarthy/aliexpress-scraper)
- [Apple App Store Scraper: Apps, Search & Reviews](https://apify.com/rjmacarthy/app-store-scraper)
- [AutoScout24 Scraper - Used Car Listings & Prices (Europe)](https://apify.com/rjmacarthy/autoscout24-scraper)
- [Bilibili Scraper - Videos, Search, Popular & Uploader Stats](https://apify.com/rjmacarthy/bilibili-scraper)
- [Bing Search Scraper: Organic Results, Ads & Related Searches](https://apify.com/rjmacarthy/bing-search-scraper)

Browse all my Actors on [my Apify Store profile](https://apify.com/rjmacarthy).

### Support

Found a wrong or missing detection? Open an issue on the Actor's **Issues** tab with the website and the technology. New signatures are added regularly.

# Actor input Schema

## `urls` (type: `array`):

Websites to analyse: bare domains (stripe.com) or full URLs (https://www.stripe.com/pricing). Bare domains get https://. Duplicates (http/https/www variants) are analysed once.

## `checkDns` (type: `boolean`):

Look up MX, TXT (SPF + domain-verification records), NS and the www CNAME of each domain. Reveals the email provider (Google Workspace, Microsoft 365...), email senders (SendGrid, Mailchimp, HubSpot...), the DNS provider and SaaS tools the company verified its domain with. Free, adds about a second per site.

## `maxItems` (type: `integer`):

Analyse at most this many websites from the list (the rest are skipped). 0 = no limit.

## `onlyChanges` (type: `boolean`):

For scheduled runs: remember each domain's technologies and output (and charge) only websites whose tech stack changed since the last run, with "added" and "removed" lists. The first run outputs every website. Failed or blocked websites are still output for free.

## `stateKey` (type: `string`):

Name of the remembered state for "Only changes" mode. Use a different name per list you monitor.

## `stateStoreName` (type: `string`):

Named key-value store that keeps the "Only changes" state between runs.

## `proxyConfiguration` (type: `object`):

Not needed normally. Enable Apify Proxy (datacenter) if many sites answer HTTP 403/429. Sites behind Cloudflare/Shopify/DataDome bot walls block datacenter IPs anyway. Residential proxies are not supported: if you pick the RESIDENTIAL group, the Actor logs a warning and uses Apify datacenter proxy instead.

## Actor input object example

```json
{
  "urls": [
    "https://wordpress.org",
    "https://www.python.org",
    "https://stripe.com",
    "https://github.com",
    "https://apify.com"
  ],
  "checkDns": true,
  "maxItems": 1000,
  "onlyChanges": false,
  "stateKey": "default",
  "stateStoreName": "tech-stack-detector-state",
  "proxyConfiguration": {
    "useApifyProxy": false
  }
}
```

# Actor output Schema

## `overview` (type: `string`):

One row per website: CMS, ecommerce platform, framework, analytics, email provider, CDN, hosting and technology count.

## `websites` (type: `string`):

Every field, including the full technologies list with category, version, confidence and evidence.

## `summary` (type: `string`):

Counts of analysed, blocked and failed websites, request count and warnings.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "urls": [
        "https://wordpress.org",
        "https://www.python.org",
        "https://stripe.com",
        "https://github.com",
        "https://apify.com"
    ],
    "checkDns": true,
    "proxyConfiguration": {
        "useApifyProxy": false
    }
};

// Run the Actor and wait for it to finish
const run = await client.actor("rjmacarthy/tech-stack-detector").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = {
    "urls": [
        "https://wordpress.org",
        "https://www.python.org",
        "https://stripe.com",
        "https://github.com",
        "https://apify.com",
    ],
    "checkDns": True,
    "proxyConfiguration": { "useApifyProxy": False },
}

# Run the Actor and wait for it to finish
run = client.actor("rjmacarthy/tech-stack-detector").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "urls": [
    "https://wordpress.org",
    "https://www.python.org",
    "https://stripe.com",
    "https://github.com",
    "https://apify.com"
  ],
  "checkDns": true,
  "proxyConfiguration": {
    "useApifyProxy": false
  }
}' |
apify call rjmacarthy/tech-stack-detector --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,rjmacarthy/tech-stack-detector"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/438VM0xeMg2Ut7d2c/builds/EnbXZTfO4Rz9hUIZR/openapi.json