What tech stack does this website use?

Enter a domain and see what the site is built with: CMS or shop platform, framework, CDN, analytics and tag managers, web server, plus the company's email provider, SPF and DMARC records and a security-headers grade. Free, no sign-up, one site at a time.

Reads the homepage once with an honest user agent, after checking robots.txt. Up to 10 lookups per minute.

How the checker works

  1. It resolves the domain over DNS-over-HTTPS and refuses private or internal addresses.
  2. It reads robots.txt. If the site disallows our bot (AdamHaleTools) for the homepage, it stops there and shows DNS data only.
  3. It fetches the homepage once, following up to five redirects, and matches the HTML, script URLs, meta tags, response headers and cookie names against about 60 fingerprints taken from our Bulk Tech Stack Lookup actor.
  4. In parallel it reads the public MX, NS, TXT and _dmarc records to name the email and DNS providers, the services allowed to send mail (SPF) and the DMARC policy.
  5. It grades the security headers (HSTS, CSP, X-Frame-Options and four more) from A to F with the same scoring as the actor.

What it can detect

AreaExamples
CMS and shopsWordPress, WooCommerce, Shopify, Wix, Squarespace, Webflow, Drupal, Joomla, Magento, PrestaShop, BigCommerce, Ghost, HubSpot CMS
FrameworksNext.js, Nuxt, Gatsby, Astro, React, Vue.js, Angular, Svelte, jQuery, Bootstrap, Tailwind CSS
Hosting and CDNCloudflare, Fastly, Akamai, Amazon CloudFront, Vercel, Netlify, GitHub Pages
Servers and languagesNginx, Apache, IIS, LiteSpeed, PHP, ASP.NET, Express
Marketing and analyticsGoogle Analytics, Google Tag Manager, Meta Pixel, Hotjar, Clarity, Plausible, Matomo, Segment, HubSpot, Klaviyo, Mailchimp
Payments, chat, consentStripe, PayPal, Intercom, Zendesk, Cookiebot, OneTrust, reCAPTCHA, hCaptcha, Turnstile
Email and DNSGoogle Workspace, Microsoft 365, Zoho, Proton and 35 more mail hosts; Cloudflare, Route 53 and 40 more DNS hosts

Limits of the free checker

  • Homepage only, no JavaScript. Tools that load after client-side rendering or only on inner pages are not seen. The browser extensions Wappalyzer and BuiltWith see more on a single site.
  • A smaller rule set. About 60 common technologies here, against 7,000+ open fingerprints in the actor.
  • No bot-protection bypass. If a site answers with a challenge page, 403 or 429, you get DNS and email data only.
  • One domain per lookup, 10 lookups a minute per visitor. Nothing you enter is stored.

Need bulk or scheduled runs? Run it on Apify

Bulk Tech Stack Lookup on Apify checks thousands of domains per run with the full 7,000+ fingerprint set, adds TLS expiry, SPF lookup counts, DMARC grading, AI-crawler rules and llms.txt, and exports CSV or Excel. Paste a list, or schedule it weekly to catch changes.

Run it on Apify Read the guide: Bulk tech stack lookup

Use it from code

The same lookup is available as JSON for light use (10 requests per minute per IP, no key):

curl "https://tools.adamhaleworks.workers.dev/api/tech-stack?domain=wordpress.org"

For regular or high-volume use, call the actor through the Apify API instead; the guide shows how. AI agents can use the pay-per-call API instead: several items per call, no rate limit, paid in USDC, no account.

FAQ

How can I tell what CMS a website uses?

Enter the domain above. The checker looks for CMS traces in the homepage HTML, meta generator tag, headers and cookies, for example /wp-content/ paths for WordPress or cdn.shopify.com for Shopify. If nothing is found, the site is likely custom-built or headless.

Is this a free alternative to Wappalyzer or BuiltWith?

For a quick look at one site, yes, and it adds email and DNS providers. The browser extensions run JavaScript and see more technologies. For lists of domains, the Bulk Tech Stack Lookup actor is the batch option. This site is not affiliated with Wappalyzer or BuiltWith.

Why does it say no technologies were found?

Sites that render everything with JavaScript, or serve a bot challenge, show little in the raw HTML. The DNS part (email provider, SPF, DMARC) still works for those.

Does the checker store the domains I enter?

No. The lookup runs when you submit and the result is not saved. Cloudflare, which hosts the site, keeps standard request logs.

How do I stop this tool from reading my site?

Add a robots.txt group for AdamHaleTools with Disallow: / and the checker will not fetch your pages. It identifies itself as AdamHaleTools/1.0 in the User-Agent header.