Tech Stack Detector: Wappalyzer & BuiltWith Alternative

Find out what any website is built with. This website technology detector takes a list of domains and returns each site's CMS, ecommerce platform, analytics, payment providers, JavaScript frameworks, CDN, hosting, email provider and SaaS tools. It knows 7,600+ technologies, with versions and the evidence behind every detection.

$3 per 1,000 websites. No subscription. You pay only for websites that served their page and were analyzed. Unreachable, refusing, rate-limiting and bot-protected sites are free.

What you get for every website

• Technologies with name, version (when exposed), confidence (0–100) and category
• Grouped by category: {"Ecommerce": ["Shopify"], "Analytics": ["Google Analytics", "Hotjar"], ...}
• Evidence: the header, script, meta tag, HTML element or DNS record that triggered each detection
• Email provider and SaaS tools from DNS records (see below)
• Status, redirects and page title, plus a clear error for sites that failed

A Wappalyzer and BuiltWith alternative

Like Wappalyzer, this Actor recognizes technologies by their fingerprints. It uses the open-source fingerprint databases in the Wappalyzer format maintained by HTTP Archive and the community. Unlike a database lookup tool, it scans every website live when you run it, so new and small sites work too.

	This Actor
Technologies recognized	7,600+
How	Live scan of each website, plus DNS records
Price	$3 per 1,000 websites, pay per website, no subscription or API plan
Failed or blocked websites	Free
Output	JSON, CSV, Excel, API, integrations, AI agents (MCP)

Not affiliated with Wappalyzer or BuiltWith. Their names are used only to describe what this Actor does.

Shopify store detector: find Shopify stores and the apps they use

Paste a list of shops and keep only the ones on Shopify, or only Shopify stores that also use a specific app:

{
  "urls": ["allbirds.com", "skims.com", "example.com"],
  "technologyFilter": ["Shopify", "Klaviyo"],
  "filterMode": "all"
}

Large Shopify stores often refuse cloud servers. This Actor retries refused sites once through a residential proxy, at no extra charge. In our test, 9 of 10 refused Shopify stores were analyzed this way.

What CMS does a website use?

The same scan answers the most common lookups in one go. Is a site built with WordPress, Shopify, WooCommerce, Wix, Squarespace, Webflow, Drupal or Joomla? Does it use Google Analytics, Google Tag Manager, HubSpot, Klaviyo, Hotjar or Stripe? Is it hosted on Cloudflare, Vercel, Netlify or AWS, and built with React, Next.js, Vue or Angular?

Email provider and SaaS tools from DNS

Domain-verification and mail records reveal tools a company uses even when they aren't visible on its homepage: Google Workspace, Microsoft 365, HubSpot, DocuSign, Atlassian, SendGrid, Mailchimp and many more. That's useful for sales prospecting and account research.

How to use it

1. Add websites to Websites, one per line: shopify.com, https://www.example.com, …
2. Optional: set Only websites using these technologies (e.g. Shopify, Klaviyo) and Filter mode.
3. Click Start. Results appear in the Overview table and can be exported as JSON, CSV or Excel.

Tech stack lookup API

curl -X POST "https://api.apify.com/v2/acts/secula~tech-stack-detector/run-sync-get-dataset-items?token=<YOUR_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"urls": ["allbirds.com", "nextjs.org"]}'

AI agents can also call it through Apify's MCP server and pay per run.

Input

Field	Default	What it does
urls	–	Domains or URLs to scan (duplicates and invalid entries are skipped)
technologyFilter	[]	Keep only websites using these technologies (exact names, case-insensitive)
filterMode	any	any = at least one of them, all = every one of them
categoryFilter	[]	Report only technologies in these categories (e.g. Ecommerce, Analytics)
minConfidence	50	Hide detections below this confidence
includeEvidence	true	Add what triggered each detection
detectDns	true	Check MX/TXT/NS/SOA/CNAME records (email providers, DNS hosts, verified SaaS)
fetchRobotsTxt	false	Also fetch /robots.txt
includeFailed	true	Add rows for websites that failed (never charged)
residentialFallback	true	Retry websites that refuse cloud servers once via residential proxy (no extra charge)
maxConcurrency	20	Websites scanned in parallel
requestTimeoutSecs	20	Time limit per website
proxyConfiguration	off	Optional Apify Proxy for all requests (billed by Apify)

Output example

{
  "input": "gymshark.com",
  "url": "https://gymshark.com/",
  "finalUrl": "https://us.checkout.gymshark.com/",
  "domain": "gymshark.com",
  "statusCode": 200,
  "technologyCount": 7,
  "technologyNames": ["Apple Pay", "Cloudflare", "HSTS", "HTTP/3", "Open Graph", "PayPal", "Shopify"],
  "categories": {
    "Ecommerce": ["Shopify"],
    "Payment processors": ["Apple Pay", "PayPal"],
    "CDN": ["Cloudflare"]
  },
  "technologies": [
    {
      "name": "Cloudflare",
      "version": null,
      "confidence": 100,
      "categories": ["CDN"],
      "website": "https://www.cloudflare.com",
      "evidence": [{"type": "header", "key": "server", "match": "cloudflare"}]
    }
  ],
  "viaProxy": false,
  "blocked": null,
  "error": null,
  "scanTimeMs": 530,
  "scannedAt": "2026-10-04T18:23:34+00:00"
}

Pricing

$0.003 per analyzed website ($3 per 1,000), charged as the event website-analyzed.

• You pay for: websites that served their page (HTTP 2xx/3xx) and were analyzed.
• You don't pay for: unreachable websites, timeouts, invalid entries, error answers (HTTP 4xx/5xx, including rate limits and "forbidden"), and websites that showed a bot-protection page instead of their content. Those rows still show whatever headers and DNS revealed, for free.
• Filter mode: websites that are analyzed but filtered out are still charged, because the scan was done.
• Spending cap: set a maximum cost per run in Apify, and the Actor stops exactly there.

Use cases

• Sales prospecting and lead generation: find shops on Shopify or WooCommerce that use, or don't use, a given tool
• Lead enrichment: add tech stack columns to a CRM or spreadsheet of domains
• Competitor analysis: see which CMS, analytics and marketing tools your competitors run
• Market research: measure how widely a technology is used across a list of websites
• Security and IT audits: inventory frameworks, servers and versions across your own domains
• AI agents: a single API call answers "what is this website built with?"

Limitations (honest)

• No JavaScript is executed. Technologies that reveal themselves only when scripts run (some React apps, single-page apps, tag-manager-loaded tools) can be missed. In a benchmark of well-known sites, 13 of 15 expected technologies were found on pages that weren't bot-blocked.
• Bot protection and rate limits: some websites answer cloud servers with a challenge page or "too many requests". The Actor first retries a rate limit once, waiting as long as the site asks (up to 5 s), then retries once more through a residential proxy (viaProxy: true in the output). If the site still refuses, the row is marked blocked and not charged. A few sites (e.g. behind strict bot checks) still can't be analyzed.
• DNS detections are domain-level. A Google Workspace MX record means the company's email runs on Google, not that the website uses it.

FAQ

Is this a Wappalyzer API alternative? Yes, for the main job: give it websites and get their technologies as JSON, priced per website instead of a monthly plan. It uses fingerprints in the open-source Wappalyzer format. Detections that need a real browser (JavaScript variables) aren't included.

How is it different from BuiltWith? It scans each website live when you run it, instead of looking it up in a historical database. It doesn't provide historical data or spend estimates.

Can I check thousands of websites? Yes. Paste or send the full list; up to 100 websites are scanned in parallel. Set a maximum cost per run if you want a hard budget.

Is this legal? The Actor requests each website's public homepage once (plus optional robots.txt) and reads public DNS records, like a browser visit. It doesn't log in, bypass protections or collect personal data. Use the results in line with the laws that apply to you.

Where do the fingerprints come from? From HTTPArchive/wappalyzer and enthec/webappanalyzer. The exact source versions used are recorded in each run's SUMMARY record.

Can I request a technology? Open an issue on the Actor's Issues tab with the technology and an example website.

Open source

This Actor is free software under the GNU GPL-3.0, the same license as the fingerprint data it uses. You pay for the hosted, maintained service, not for a license.