Tech Stack Detector

Find out what any website is built with. Give it a list of domains and you get the CMS, ecommerce platform, analytics, CDN, frameworks and the rest of the stack for each one. The fingerprint database covers more than 7,600 technologies, with versions where a site exposes them.

It also reads public DNS records, which shows things a homepage never does: whether the company runs on Google Workspace or Microsoft 365, which email security gateway sits in front of their inbox, and which SaaS tools they verified their domain with. That last part covers DocuSign, Atlassian, Zoom, Slack, HubSpot, Salesforce, Stripe, OpenAI, Miro, Jamf, OneTrust, Notion, Figma and about 80 others.

Price is $4 per 1,000 domains. Sites that can't be reached are free.

What you can do with it

• Build lead lists: Shopify stores using Klaviyo, companies on Microsoft 365 behind Proofpoint, HubSpot users without Salesforce.
• Add a tech stack column to a CRM export or spreadsheet.
• Measure how common a technology is across a list of sites.
• Qualify agency prospects before outreach (which CMS, is analytics set up, which site builder).
• Check a domain's email security setup: gateway, DMARC policy, DNS and CDN providers.
• Give an AI agent a clean JSON profile of a company's website in one call.

Input

Field	What it does
domains	Domains or URLs, for example stripe.com or https://www.notion.so. Duplicates are removed.
includeDns	SaaS, email provider, security gateway and DMARC from DNS. On by default.
includeMetadata	Title, description, language, social profiles and tracking IDs. On by default.
minConfidence	Hide weak detections. Default 50.
maxConcurrency	How many sites are checked in parallel. Default 20.

{ "domains": ["stripe.com", "allbirds.com", "techcrunch.com"] }

Output

One result per domain. This is a real result, shortened:

{
  "domain": "techcrunch.com",
  "httpStatus": 200,
  "technologyCount": 39,
  "technologyNames": ["Anthropic", "OpenAI", "Cloudflare", "WordPress", "MySQL", "Atlassian Cloud", "Box", "Dropbox", "Zendesk", "Cloudflare DNS", "HubSpot", "Sailthru"],
  "technologiesByCategory": { "CDN": ["Cloudflare"], "CMS": ["WordPress"], "SEO": ["Yoast SEO", "Yoast SEO Premium", "Google Search Console"], "Tag managers": ["Google Tag Manager"] },
  "technologies": [{ "name": "WordPress", "categories": ["CMS", "Blogs"], "version": "6.9.9", "confidence": 100, "website": "https://wordpress.org", "implied": false, "source": "http" }],
  "emailProvider": "Microsoft 365",
  "emailSecurity": ["Mimecast"],
  "emailSendingServices": ["Zendesk", "HubSpot"],
  "saasVerifications": ["Airtable", "Anthropic (Claude)", "Apple Business", "Atlassian", "DocuSign", "Dropbox", "Figma", "Google Search Console", "KnowBe4", "OpenAI (ChatGPT Enterprise)", "Slido"],
  "dnsProvider": "Cloudflare DNS",
  "dmarcPolicy": "reject",
  "dmarcVendors": ["Mimecast DMARC Analyzer"],
  "sslIssuer": "Let's Encrypt",
  "title": "TechCrunch | Startup and Technology News",
  "language": "en-US",
  "socialProfiles": { "x": "https://twitter.com/techcrunch", "linkedin": "https://www.linkedin.com/company/techcrunch", "youtube": "https://www.youtube.com/user/techcrunch" },
  "trackingIds": { "googleTagManager": ["GTM-M24PKK8"] },
  "scannedAt": "2026-09-28T18:02:32+00:00"
}

The Overview tab of the dataset puts domain, technologies, email provider, SaaS and DNS provider in one table. Export to CSV, Excel, JSON or Google Sheets from there.

Pricing

$0.004 per domain that returns data, so $4 per 1,000. Unreachable or empty sites cost nothing. Platform usage is included in the price.

How it works

Each homepage is fetched the way a browser would request it, without running JavaScript. Headers, cookies, HTML, script URLs, meta tags and page elements are then matched against the open-source webappanalyzer fingerprints (GPL-3.0). DNS records are read over DNS-over-HTTPS and the TLS certificate issuer is recorded.

Some limits to be aware of:

• Tools that only load through JavaScript (some single-page apps, pixels added by a tag manager) can be missed. DNS results still work for those sites.
• Sites with aggressive bot protection may answer with a 403. You still get the DNS results, and the protection vendor itself (Akamai Bot Manager, DataDome, etc) usually shows up.
• Only public information is read. No logins and no personal data.

API and integrations

Run it through the Apify API, on an Apify schedule, or from Make, Zapier, n8n and Google Sheets. AI agents can call it through the Apify MCP server. A monthly scheduled run on your target list is an easy way to spot stack changes.

Feedback

Seeing a wrong or missing detection? Open an issue with the domain and we'll fix the fingerprint.