# Tech Stack Detector: 7,600+ Technologies, Bulk Domains (`webstack-labs/tech-stack-detector`) Actor

See what any website is built with: CMS, ecommerce, analytics, payments, CDN, frameworks and 7,600+ more, with versions, plus a company profile (name, description, logo, social pages). Bulk domains. $0.005 per website analyzed; failed sites free.

- **URL**: https://apify.com/webstack-labs/tech-stack-detector.md
- **Developed by:** [Webstack Labs](https://apify.com/webstack-labs) (community)
- **Security:** Limited permissions
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $5.00 / 1,000 analyzed websites

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Tech Stack Detector: 7,600+ Technologies, Bulk Domains

Find out what any website is built with. Give it a list of domains and get back the **CMS, ecommerce platform, analytics and tag managers, payment processors, CDN and hosting, JavaScript frameworks, marketing tools, email provider and more**, with **versions** and a **confidence score** for every detection.

- **7,647 technology fingerprints in 109 categories**, built on the community-maintained open-source Wappalyzer patterns ([webappanalyzer](https://github.com/enthec/webappanalyzer)) and refreshed regularly.
- **Bulk input:** paste thousands of domains. Bare domains (`example.com`) and full URLs both work, and duplicates are removed.
- **Failed sites are free.** You pay per successfully analyzed site. Sites that time out, block us, return an error or disallow bots in robots.txt are reported and **not charged**.
- **Polite by design:** one request for the home page per site, robots.txt respected by default, and no personal data collected.
- **Company profile included, at no extra cost:** site name, description, language, logo, favicon and links to the company's own social pages (LinkedIn company page, X, Facebook, Instagram, YouTube, TikTok, GitHub), read from the same home page. Ready for lead lists and CRM enrichment. No e-mail addresses, phone numbers or personal profiles.
- **Explainable results:** every detection says *how* it was found (`headers:server`, `meta:generator`, `scriptSrc`, `dns:TXT`, ...).

### What can it detect?

| Area | Examples |
|---|---|
| CMS and site builders | WordPress (with version, theme and plugins), Drupal, Joomla, Webflow, Wix, Squarespace, Ghost, HubSpot CMS Hub |
| Ecommerce | Shopify (and Shopify apps), WooCommerce, Magento, BigCommerce, PrestaShop, Salesforce Commerce Cloud |
| Analytics and tags | Google Analytics (GA4), Google Tag Manager, Facebook Pixel, Hotjar, Plausible, Matomo Analytics, Segment |
| Marketing and sales | HubSpot, Klaviyo, Mailchimp, Marketo, Intercom, Drift, Zendesk |
| Payments | Stripe, PayPal, Adyen, Klarna Checkout, Afterpay |
| Infrastructure | Cloudflare, Fastly, Akamai, Amazon Web Services, Vercel, Netlify, Nginx, Apache HTTP Server, IIS |
| Frameworks and libraries | React, Next.js, Vue.js, Nuxt.js, Angular, Svelte, jQuery, Bootstrap, Tailwind CSS |
| Email and DNS (from public DNS records) | Google Workspace, Microsoft 365, SendGrid, Amazon SES, Cloudflare DNS |
| Security and certificates | reCAPTCHA, hCaptcha, Let's Encrypt, DigiCert, Sectigo |

All 109 categories are listed at the end of this page.

### Who uses it

- **Sales and lead generation:** find every Shopify store, WooCommerce shop or HubSpot customer in a list of prospects, or every site still using a competitor's product, and get each company's name, description, logo and LinkedIn page in the same row (a BuiltWith-style tech lookup plus a company profile).
- **Market research:** measure technology market share across thousands of sites. The run summary counts the most common technologies for you.
- **Agencies:** audit a client's or prospect's stack in seconds before a pitch.
- **Security and IT:** spot outdated software versions. CPE identifiers are included for matching against vulnerability databases.
- **Investors and analysts:** check what a company's websites run on during due diligence.
- **AI agents:** a clear input and a structured JSON output make it easy to call from Apify's MCP server, LangChain, n8n, Make or Zapier.

### How to use it

1. Paste your domains into **Websites**, one per line.
2. Optionally pick **Only these categories** (for example `Ecommerce` or `CMS`) to keep the output short.
3. Click **Start**. Results appear in the **Output** tab and can be downloaded as JSON, CSV, Excel or HTML, or read through the API.

#### Input example

```json
{
  "urls": ["apify.com", "wordpress.org", "https://www.shopify.com/"],
  "categories": [],
  "minConfidence": 50,
  "includeTechnologyDetails": true,
  "includeSiteInfo": true,
  "includeDnsRecords": true,
  "includeTlsIssuer": true,
  "respectRobotsTxt": true,
  "maxConcurrency": 20,
  "requestTimeoutSecs": 20
}
```

#### Output example (one row per website)

```json
{
  "input": "example-bakery.com",
  "domain": "example-bakery.com",
  "finalUrl": "https://example-bakery.com/",
  "statusCode": 200,
  "title": "Example Bakery – Fresh bread daily",
  "siteInfo": {
    "siteName": "Example Bakery",
    "description": "Fresh bread and cakes baked daily in Springfield. Order online for pickup.",
    "language": "en-US",
    "logoUrl": "https://example-bakery.com/wp-content/uploads/logo.png",
    "faviconUrl": "https://example-bakery.com/favicon.ico",
    "socialProfiles": {
      "linkedin": "https://linkedin.com/company/example-bakery",
      "instagram": "https://instagram.com/examplebakery",
      "facebook": "https://facebook.com/examplebakery"
    }
  },
  "technologyCount": 11,
  "technologyNames": ["WordPress", "WooCommerce", "Google Analytics", "Nginx", "PHP", "MySQL", "Google Tag Manager", "Yoast SEO", "jQuery", "Astra", "Contact Form 7"],
  "technologies": [
    {
      "name": "WordPress",
      "slug": "wordpress",
      "version": "6.6.2",
      "confidence": 100,
      "categories": [{"id": 1, "name": "CMS", "groups": ["Content"]}, {"id": 11, "name": "Blogs", "groups": ["Content"]}],
      "website": "https://wordpress.org",
      "description": "WordPress is a free and open-source content management system written in PHP ...",
      "icon": "https://raw.githubusercontent.com/enthec/webappanalyzer/main/src/images/icons/WordPress.svg",
      "cpe": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
      "saas": true,
      "oss": true,
      "pricing": ["low", "recurring", "freemium"],
      "detectedVia": ["html", "meta:generator", "scriptSrc"],
      "impliedBy": null
    }
  ],
  "categories": {"CMS": ["WordPress"], "Ecommerce": ["WooCommerce"], "WordPress plugins": ["WooCommerce", "Yoast SEO", "Contact Form 7"]},
  "error": null,
  "errorMessage": null,
  "charged": true,
  "durationMs": 840,
  "checkedAt": "2026-10-22T03:00:00+00:00"
}
```

`siteInfo` comes from the page's meta tags, Open Graph tags, schema.org Organization data and links. Social pages are kept only when they look like a profile of an organization (for example `linkedin.com/company/...`, not `linkedin.com/in/...`, share buttons or single posts). Turn off **Include company profile** if you do not need it. The **Company profile** view of the dataset shows domain, name, description, logo, social pages and technologies side by side, and exports cleanly to CSV or Excel.

Turn off **Include technology details** for a compact output (name, version, confidence and category names only).

A run summary is also saved to the key-value store under `SUMMARY`. It holds the numbers of analyzed and failed sites and the **top 100 technologies and top 50 categories** across every site in the run.

### Pricing

You pay a fixed price per **successfully analyzed website**. Rows with an `error` are free. Apify also adds its standard Actor start fee, a fraction of a cent per run. Apify's free plan includes monthly credit, so you can try the Actor at no cost. The exact price is on the **Pricing** tab, and you can cap any run with **Maximum cost per run**. The Actor stops cleanly when the cap is reached.

### Use it from AI agents (MCP)

The Actor is available to AI agents (Claude, ChatGPT, Cursor and others) through Apify's MCP server
(`mcp.apify.com`) and the API. Minimal input:

```json
{"urls": ["example-bakery.com"]}
```

Each row has the same fields (see the output example above): `{"input": "example-bakery.com", "domain":
"example-bakery.com", "statusCode": 200, "technologyCount": ..., "technologyNames": [...], "siteInfo": {...},
"error": null, "charged": true, ...}`. Cost of a one-site run: $0.005 plus the start fee. Read
`technologyNames` (or `technologies` for versions and categories); check `error` on every row: sites
that could not be analyzed come back as rows with an `error` code and are free.

### How it works

For each site the Actor:

1. Reads `robots.txt` and skips the site if bots are not allowed on that page (you can turn this off).
2. Fetches the home page once, following redirects.
3. Looks up public DNS records and the TLS certificate issuer, if enabled.
4. Matches HTTP headers, cookies, meta tags, script URLs, inline scripts, HTML, page text, CSS, DOM selectors, DNS records and the certificate issuer against the fingerprint database. It also resolves relationships between technologies (for example WordPress implies PHP).

About 6,700 of the 7,647 fingerprints can match this way. The rest need a real browser to run the site's JavaScript. The Actor approximates the most common JavaScript checks, such as `window.__NEXT_DATA__` or `Shopify.shop`, from the inline scripts and marks those detections with a lower confidence (75).

### FAQ

**How accurate is it?** Detections come from the same pattern format that powers the Wappalyzer ecosystem. Each one carries a confidence score and the evidence that triggered it, so you can filter or verify. Technologies loaded only after user interaction, or only on inner pages, may not be visible on the home page.

**Why did a site fail?** The `error` field says why: `timeout`, `connection_error`, `ssl_error`, `too_many_redirects`, `http_error` (for example a 403 bot-protection page), `blocked_by_robots_txt` or `invalid_input`. None of these are charged.

**Can I check inner pages?** Yes. Pass the full URL (for example `https://example.com/checkout`) and that page is analyzed instead of the home page.

**Is it legal?** The Actor reads one publicly available page per site, respects robots.txt by default and collects no personal data. You are responsible for how you use the results and for respecting the terms of the sites you check.

**Does it use proxies?** No. Requests come from Apify's servers with an honest user agent (`TechStackDetector`).

### Limitations

- Only the page you pass (by default the home page) is analyzed.
- Sites behind strict bot protection may return a challenge page. These rows are reported as `http_error` and not charged.
- Technologies that exist only in client-side JavaScript state can be missed without a browser.

### Credits and license

Fingerprints are from [enthec/webappanalyzer](https://github.com/enthec/webappanalyzer), the community continuation of the open-source Wappalyzer patterns, licensed under GPL-3.0. This Actor's source is also GPL-3.0.

### All 109 categories

A/B Testing, Accessibility, Accounting, Advertising, Affiliate programs, Analytics, Appointment scheduling, Artificial Intelligence, Augmented reality, Authentication, Blogs, Browser fingerprinting, Buy now pay later, CDN, CI, CMS, CRM, Caching, Cart abandonment, Comment systems, Containers, Content curation, Control systems, Cookie compliance, Cross border ecommerce, Cryptominers, Customer data platform, DMS, Database managers, Databases, Development, Digital asset management, Documentation, Domain parking, Drupal themes, Ecommerce, Ecommerce frontends, Editors, Email, Feature management, Feed readers, Font scripts, Form builders, Fulfilment, Fundraising & donations, Geolocation, Hosting, Hosting panels, IaaS, Issue trackers, JavaScript frameworks, JavaScript graphics, JavaScript libraries, LMS, Live chat, Livestreaming, Load balancers, Loyalty & rewards, Maps, Marketing automation, Media servers, Message boards, Miscellaneous, Mobile frameworks, Network devices, Network storage, Operating systems, PaaS, Page builders, Payment processors, Performance, Personalisation, Photo galleries, Programming languages, RUM, Recruitment & staffing, Referral marketing, Remote access, Reservations & delivery, Retargeting, Returns, Reverse proxies, Reviews, Rich text editors, SEO, SSL/TLS certificate authorities, Search engines, Security, Segmentation, Shipping carriers, Shopify apps, Shopify themes, Static site generator, Surveys, Tag managers, Ticket booking, Translation, UI frameworks, User onboarding, Video players, Web frameworks, Web server extensions, Web servers, Webcams, Webmail, Widgets, Wikis, WordPress plugins, WordPress themes

# Actor input Schema

## `urls` (type: `array`):

Domains or URLs, one per line. Bare domains (example.com) and full URLs (https://example.com/shop) both work. Duplicates are removed automatically.

## `categories` (type: `array`):

Return only technologies in these categories, for example CMS, Ecommerce, Analytics, Payment processors, CDN, JavaScript frameworks, Live chat, Marketing automation. Leave empty to return everything.

## `minConfidence` (type: `integer`):

Hide detections below this confidence (0-100). Most detections are 100; weaker hints are 25-75.

## `includeTechnologyDetails` (type: `boolean`):

Add website, description, icon, CPE identifier, open-source/SaaS flags and pricing tier to every technology. Turn off for a compact output.

## `includeSiteInfo` (type: `boolean`):

Add the site's name, description, language, logo, favicon and links to the company's own social pages (LinkedIn company page, X, Facebook, Instagram, YouTube, TikTok, GitHub, Pinterest), read from the same home page at no extra cost. E-mail addresses, phone numbers and personal profiles are never collected.

## `includeDnsRecords` (type: `boolean`):

Look up the domain's public TXT, MX, NS, SOA and CNAME records. This reveals email providers, DNS hosts and marketing tools that are invisible in the page itself.

## `includeTlsIssuer` (type: `boolean`):

Read the issuer of the site's TLS certificate (for example Let's Encrypt, DigiCert, Sectigo).

## `respectRobotsTxt` (type: `boolean`):

Skip sites whose robots.txt disallows automated access to the page. Skipped sites are reported and not charged.

## `maxConcurrency` (type: `integer`):

How many sites to check at the same time.

## `requestTimeoutSecs` (type: `integer`):

Give up on a site that does not respond within this time. Timed-out sites are not charged.

## Actor input object example

```json
{
  "urls": [
    "apify.com",
    "wordpress.org",
    "shopify.com"
  ],
  "categories": [],
  "minConfidence": 50,
  "includeTechnologyDetails": true,
  "includeSiteInfo": true,
  "includeDnsRecords": true,
  "includeTlsIssuer": true,
  "respectRobotsTxt": true,
  "maxConcurrency": 20,
  "requestTimeoutSecs": 20
}
```

# Actor output Schema

## `results` (type: `string`):

No description

## `summary` (type: `string`):

No description

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "urls": [
        "apify.com",
        "wordpress.org",
        "shopify.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("webstack-labs/tech-stack-detector").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "urls": [
        "apify.com",
        "wordpress.org",
        "shopify.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("webstack-labs/tech-stack-detector").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "urls": [
    "apify.com",
    "wordpress.org",
    "shopify.com"
  ]
}' |
apify call webstack-labs/tech-stack-detector --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,webstack-labs/tech-stack-detector"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/FJPnYGHPAuyh37nXf/builds/TAdozArMCXRM0grCU/openapi.json