Bulk Tech Stack Detector: BuiltWith & Wappalyzer Alternative

Tech Stack Detector: BuiltWith & Wappalyzer alternative (bulk domains)

Paste in a list of domains and get each site's technology stack back as clean JSON: CMS, ecommerce platform, analytics, tag managers, marketing automation, chat, payments, consent tools, frameworks, CDN, hosting, DNS host and email provider. It is built for lead lists, competitor research, agency prospecting and CRM enrichment, where you need thousands of domains checked cheaply rather than one site at a time in a browser extension.

Use cases

• Technographic lead generation: find every Shopify, WooCommerce, HubSpot or Salesforce user in your domain list.
• CRM enrichment: add CMS, ecommerce platform and email provider (Google Workspace vs Microsoft 365) to accounts.
• Competitor and market research: measure the share of a technology across a market segment.
• Agency prospecting: find sites on an outdated CMS or without analytics.
• Security and IT inventory: CDN, hosting, DNS host and email security gateway at a glance.

How it works

1. HTTP first. Each domain is fetched once with a normal browser user agent. We match response headers, cookie names, <meta> tags, <script src> URLs and HTML patterns against about 290 hand-written fingerprints.
2. DNS. MX, TXT (SPF and verification records), NS and the CNAME of www reveal the email provider (Google Workspace, Microsoft 365, Zoho...), email security gateways (Proofpoint, Mimecast), sending services (SendGrid, Mailchimp, SES), DNS host and CDN. This also works when the website itself blocks bots.
3. Optional browser fallback. Turn on browserFallback and domains that return 403/429/503, a bot challenge, or an empty JavaScript shell are re-tried in headless Chrome. The fallback also checks JavaScript globals.

Each technology has a confidence value. Header, cookie, script, meta and DNS matches score 100. HTML-pattern matches score 80, implied technologies score at most 90 (WooCommerce implies WordPress, which implies PHP), and weak heuristics score 50–60. Use minConfidence to filter. A version is returned when the page exposes one, for example a WordPress generator tag.

Input

{ "domains": ["shopify.com", "allbirds.com", "hubspot.com"], "browserFallback": false, "includeDns": true, "minConfidence": 50 }

Output sample (real cloud run, trimmed)

{
  "domain": "allbirds.com",
  "finalUrl": "https://www.allbirds.com/",
  "httpStatus": 200,
  "technologies": [
    {
      "name": "Cloudflare",
      "categories": [
        "CDN",
        "Security / WAF"
      ],
      "version": null,
      "confidence": 100
    },
    {
      "name": "Microsoft 365",
      "categories": [
        "Email provider"
      ],
      "version": null,
      "confidence": 100
    },
    {
      "name": "Shopify",
      "categories": [
        "Ecommerce"
      ],
      "version": null,
      "confidence": 100
    },
    {
      "name": "Shopify hosting",
      "categories": [
        "Hosting / PaaS"
      ],
      "version": null,
      "confidence": 100
    },
    {
      "...": "7 more"
    }
  ],
  "technologyCount": 11,
  "categoriesSummary": {
    "CDN": [
      "Cloudflare"
    ],
    "Security / WAF": [
      "Cloudflare"
    ],
    "Email provider": [
      "Microsoft 365"
    ],
    "Ecommerce": [
      "Shopify"
    ]
  },
  "emailProvider": "Microsoft 365",
  "emailSecurityGateway": null,
  "cdn": [
    "Cloudflare"
  ],
  "cms": null,
  "ecommerce": "Shopify",
  "analytics": [
    "Microsoft Clarity"
  ],
  "hosting": [
    "Shopify hosting"
  ],
  "method": "http",
  "analyzedAt": "2026-10-29T22:55:19.948Z",
  "error": null
}

The Overview dataset view shows one row per domain. The All technologies view shows one row per detected technology.

Pricing (pay per event)

Event	Price
domain-analyzed: domain fetched over HTTP and analyzed	$0.002
domain-analyzed-browser: domain needed the browser fallback	$0.004 (instead of, not on top of, the HTTP event)

Failures are never charged. Unreachable domains, DNS errors and sites that block us (also in the browser) are still returned with their DNS-based findings and an error message, but they cost you nothing. Cost example: 10,000 domains, of which about 5% need the browser = 9,500 × $0.002 + 500 × $0.004 = $21. In our test, 20 diverse domains took 5 seconds at 512 MB.

Accuracy & limitations

• Detection only sees what the homepage and DNS expose. Tools loaded later through Google Tag Manager (such as Google Analytics behind GTM) may only appear with the browser fallback, or not at all.
• Some large sites block datacenter IPs. In our test, nytimes.com returned 403 even in the browser. Those rows are free and still include the DNS findings.
• TXT verification records (Verified SaaS (DNS)) show that a company verified a domain with a vendor. They do not prove active use.

Fingerprint data & license

The fingerprint set is an original, clean-room dataset by Steadyline Data. It was written from vendor documentation and markup we observed on public sites. It is not copied or derived from Wappalyzer or its GPL-3.0 forks (e.g. webappanalyzer), and it does not use BuiltWith data. Product names are trademarks of their owners and are used here only to identify them.

Use it from AI agents (MCP), Zapier, Make, n8n or the API

AI agents (Claude, Cursor, VS Code, ChatGPT and other MCP clients). Add Apify's hosted MCP server with just this Actor as a tool:

{
  "mcpServers": {
    "apify": {
      "url": "https://mcp.apify.com?tools=steadyline/tech-stack-detector"
    }
  }
}

Sign in with Apify (OAuth) on first connect, or add an Authorization: Bearer <APIFY_TOKEN> header. Then ask your agent, for example:

Use steadyline/tech-stack-detector to check which of these 50 domains run Shopify and which email provider each one uses.

The agent sees this Actor's input schema and output fields, so it can call it without extra prompting. Agents that use the general Apify MCP server can also find it with search-actors.

This Actor uses pay-per-event pricing with limited permissions, so it can also be run through Apify's agentic payments (no Apify account needed for the agent). See the Apify docs.

Zapier, Make and n8n. Use the official Apify app: Zapier "Run Actor" action, Make "Run an Actor" module, or the n8n Apify node. Choose steadyline/tech-stack-detector, paste the input below, then use "Get dataset items" (or the run's dataset) to send results to Google Sheets, Slack, a CRM or a database.

API (any language). Run it and get the results in one call:

curl -X POST "https://api.apify.com/v2/acts/steadyline~tech-stack-detector/run-sync-get-dataset-items?token=$APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["shopify.com", "wordpress.org", "allbirds.com", "hubspot.com", "vercel.com"]}'

Or with the Python client (pip install apify-client):

from apify_client import ApifyClient
client = ApifyClient("<APIFY_TOKEN>")
run = client.actor("steadyline/tech-stack-detector").call(run_input={"domains": ["shopify.com", "wordpress.org", "allbirds.com", "hubspot.com", "vercel.com"]})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

Works well with other Steadyline Data tools

• Tech-targeted lead list: filter by technology here, then get contact points with Website Contact Extractor and clean them with Email Deliverability Checker.
• Domain due diligence: Domain Intel + this Actor + Website Screenshot, about $0.005 per domain.
• Related: Website Contact Scraper, Site Discovery (sitemaps, robots.txt, llms.txt), Domain Intel (WHOIS/RDAP, DNS, SSL).

FAQ

How is this different from BuiltWith or Wappalyzer? No subscription and no browser extension: you pay $0.002 per domain analyzed, run thousands of domains at once, and get JSON you can push to a sheet or CRM. The fingerprints are our own clean-room set (about 290 technologies), so coverage is narrower than BuiltWith's historical database.

Does it detect the email provider? Yes, from MX, SPF and other DNS records: Google Workspace, Microsoft 365, Zoho, Proofpoint, Mimecast, SendGrid, Mailchimp, SES and more. This works even when the website blocks bots.

Do I pay for domains that fail? No. Unreachable or blocked domains are returned with their DNS findings and an error, free of charge.

Can I run it on a schedule? Yes. Create an Apify Schedule (or a saved Task with a schedule) and connect a webhook or integration to receive results.

Need a feature or found a bug? Open an issue on the Issues tab of this page or email steadylinedata@proton.me. Built and maintained by Steadyline Data.

Acceptable use

Use this Actor only on public websites and for legitimate purposes such as market research, sales and security inventory. It makes one ordinary page request per domain plus public DNS queries. Do not use it to bypass access controls, to attack or overload sites, or in ways that break a site's terms or applicable law (including GDPR/CCPA when you combine results with personal data). You are responsible for how you use the output.

Support

Found a missed or wrong detection? Open an issue with the domain and the expected technology. Fingerprint additions ship regularly. Made by Steadyline Data.