E-commerce Tech Stack Detector (Italy-focused)

Find out which e-commerce platform a website runs on – PrestaShop, WooCommerce, Shopify, Magento or other CMS – together with its version, theme, installed modules/plugins, server and CDN, SSL expiry, response time (TTFB), sitemap/robots.txt and the marketing and payment tools visible in the page (analytics, ad pixels, cookie banners, Italian payment methods like Scalapay, Satispay, Nexi XPay, PagoLight).

Built for agencies, freelancers and SaaS teams working on the Italian e-commerce market, but it works on any domain.

Outputs only technical, non-personal website data. Users are responsible for lawful use. No e-mails, phone numbers, names, company names, VAT numbers, addresses or social profiles are ever extracted.

What it detects

Group	Fields
Platform	platform (PrestaShop / WooCommerce / Shopify / Magento / other / unknown), platformName, platformVersion, platformConfidence, platformSignals
Theme & extensions	theme, extensions (from /modules/<name>/, /wp-content/plugins/<name>/, Magento module paths), extensionsCount
Infrastructure	server, poweredBy, cdn (Cloudflare, Fastly, CloudFront, Akamai, Sucuri, Bunny, Varnish…), hsts, compression
Security & speed	httpsAvailable, sslValid, sslDaysLeft, ttfbMs, httpStatus, redirectCount, pageSizeKb
SEO basics	sitemapPresent, robotsTxtPresent
Tools	tools.analytics, tools.adPixels, tools.cookieConsent, tools.payments, tools.liveChat, tools.reviews, tools.emailMarketing

Detection is signature-based on the public homepage HTML and response headers. Tools injected only through Google Tag Manager are not visible in the HTML and may not be listed.

Input example

{
  "domains": ["example-shop.it", "https://www.another-store.it/"],
  "maxConcurrency": 5,
  "requestTimeoutSecs": 10
}

Output example

{
  "input": "example-shop.it",
  "domain": "example-shop.it",
  "status": "ok",
  "httpStatus": 200,
  "finalUrlHost": "www.example-shop.it",
  "ttfbMs": 148,
  "platform": "WooCommerce",
  "platformName": "WooCommerce (WordPress)",
  "platformVersion": "10.9.4",
  "theme": "betheme",
  "extensions": ["woocommerce", "contact-form-7", "revslider"],
  "extensionsCount": 7,
  "server": "nginx",
  "cdn": [],
  "httpsAvailable": true,
  "sslValid": true,
  "sslDaysLeft": 44,
  "robotsTxtPresent": true,
  "sitemapPresent": true,
  "tools": {
    "analytics": ["Google Tag Manager"],
    "adPixels": [],
    "cookieConsent": ["iubenda"],
    "payments": ["PayPal"],
    "liveChat": [],
    "reviews": [],
    "emailMarketing": ["Mailchimp"]
  }
}

status can be ok, bot_protection (a WAF challenge was served: only headers analyzed), unreachable, invalid_domain, disallowed_by_robots_txt or error.

Use cases

• Lead qualification for agencies: filter a list of stores by platform (e.g. only PrestaShop 1.6/1.7 or WooCommerce) before any outreach.
• Migration targeting: find stores on old or end-of-life platforms.
• Competitive research: which payment methods, review widgets or cookie banners do Italian stores in a niche use?
• SaaS / plugin vendors: measure adoption of a module, app or payment method across a list of domains.
• Portfolio monitoring: SSL expiry and TTFB on your own clients' stores.

Responsible crawling

• Identifies itself as ShopTechAuditBot/1.0 with a link to this page.
• Reads and obeys robots.txt; disallowed sites are reported as disallowed_by_robots_txt.
• Maximum 1 request per second per domain, short timeouts, 3–5 requests per domain (homepage, robots.txt, sitemap check).
• Only public pages, no login, no forms, no JavaScript execution.

Pricing

Pay per event: $0.004 per analyzed domain (= $4 per 1,000 domains). Invalid, unreachable and robots-disallowed domains are not charged; duplicates in the input are removed.

FAQ

Can it find e-mails or phone numbers? No, by design. It returns technical data only. Why is the version empty? Many stores hide it. The Actor only reports what is publicly exposed (e.g. meta generator, asset versions, theme markers). Is it legal to use? The Actor reads public technical information at a polite rate and obeys robots.txt. You are responsible for how you use the results (e.g. GDPR/ePrivacy rules for any marketing you do).