Blog

Tech stack detection, web security, and API development.

How to Detect LinkedIn Ads on Any Website (API Guide)
A company running LinkedIn Ads has a B2B acquisition budget and someone accountable for pipeline, and the proof is sitting in its own HTML. How the LinkedIn Insight Tag is fingerprinted from _linkedin_partner_id, snap.licdn.com, and the px.ads.linkedin.com pixel, how to spot it manually in DevTools, why Google Tag Manager hides it from view-source, and how to automate detection across a whole prospect list. Includes a live worked example, curl examples for /demo, /analyze, /check, and /analyze/batch, and the canonical-name gotcha that breaks naive jq filters.
Find Companies Using imagesLoaded: API Guide (2026)
imagesLoaded is a narrow JavaScript library with a broad implication: a site loading it has an image-heavy layout still computed in jQuery-era JavaScript, usually enqueued by a WordPress theme or page builder that names itself in the same scan. How the imagesloaded.min.js script signature is detected, why the ?ver= query string hands you the library version for free, and why bundled copies are invisible to every external scanner. Includes a live worked example against a real WordPress site, curl examples for /demo, /check, /lookup, and /analyze/batch, and a copy-pasteable Python pipeline that exports a CRM-ready CSV of modernization prospects.
How to Detect Typekit (Adobe Fonts) on Any Website (2026)
Typekit was rebranded to Adobe Fonts in 2018, but the serving infrastructure kept the old hostnames, and those hostnames are the detection signature. Three manual checks that settle the question in under a minute: the use.typekit.net stylesheet and use.typekit.com script embeds in the page source, the kit ID and wf-loading body classes, and network requests to p.typekit.net. Then the programmatic version: real curl examples against /demo, /analyze, and /analyze/batch, why the API returns both Typekit and Adobe Fonts for one integration, why a non-200 status code means inconclusive rather than absent, and a comparison table for telling Typekit, Google Fonts, and self-hosted fonts apart.
How to Find Companies Using Adobe Fonts (API Guide 2026)
Adobe Fonts is one of the few front-end signals that maps to a budget rather than a technology preference: it rides on a paid Creative Cloud subscription, so every site serving fonts from use.typekit.net pays Adobe for typography. How the use.typekit.net stylesheet and use.typekit.com script embeds are detected, why scans return both Adobe Fonts and Typekit for the same integration, and why the signal leaves no DNS trace. Includes real curl examples for /demo, /analyze, /check, and /analyze/batch against a live site, a copy-pasteable Python pipeline that exports a CRM-ready CSV, and an Adobe Fonts vs Google Fonts comparison for reading design budgets from the outside.
How to Find Companies Using Klaviyo (API Guide 2026)
Klaviyo is a rare technographic signal that maps almost directly onto budget: a store running it has revenue worth retaining and already pays for retention marketing. How Klaviyo is detected from the klaviyo.js script source, why the _learnq global is visible in a browser but not to a server-side scanner, and what Klaviyo Forms, Klaviyo Reviews, and Klaviyo Customer Hub each tell you about how deeply a merchant has committed. Includes real curl examples for /demo, /analyze, /check, /analyze/batch, and /lookup, a copy-pasteable Python pipeline that exports a CRM-ready CSV, and the status_code caveat that silently drops real Klaviyo users from most prospect lists.
How to Detect a Wix Website: Signatures + API Guide
Wix hosts and serves every site it publishes, so it leaves a consistent fingerprint on every page. How the x-wix-request-id, x-wix-renderer-server, and x-wix-server-artifact-id response headers, the static.parastorage.com script host, the "Wix.com Website Builder" generator meta tag, and the .wixdns.net DNS CNAME all give it away—and how a single DetectZeStack /analyze call rolls all three layers into one filterable result. Includes real curl examples, a copy-pasteable batch-scanning bash pipeline that records detection source per row, and a comparison table of Wix vs WordPress, Shopify, Squarespace, and Webflow.
How to Find Companies Using WP Engine (API Guide 2026)
WP Engine is the managed WordPress host companies pay a premium for, which makes "uses WP Engine" a technographic filter with budget built in. How the .wpengine.com, .wpenginepowered.com, and .wpeproxy.com DNS CNAMEs and the X-Powered-By: WP Engine and WPE-Backend cache headers give it away, why header-only checks miss CDN-fronted sites, and how to turn a raw prospect list into a WP Engine-confirmed lead list with /analyze and /analyze/batch. Includes a copy-pasteable bash pipeline that records detection source per row.
How to Detect OneTrust on Any Website (2026)
OneTrust is one of the most widely deployed cookie consent and privacy management platforms on the web. How the otSDKStub.js script from cdn.cookielaw.org, the OptanonConsent cookie, and the #onetrust-banner-sdk DOM container give it away, why source-level detection beats DNS for a CMP, and how a single DetectZeStack /analyze call returns OneTrust under Cookie compliance alongside the rest of the stack. Includes manual curl checks, a batch-scanning bash pipeline, and a comparison table of Cookiebot, Usercentrics, TrustArc, and other consent platforms you can detect the same way.
How to Find Companies Using Amazon S3 (API Guide 2026)
Amazon S3 is the default object store of the internet, which makes "uses S3" one of the broadest and most reliable technographic filters you can apply to a domain list. How the Server: AmazonS3 response header, s3.amazonaws.com asset URLs, and the .s3.amazonaws.com and .s3-website DNS CNAMEs give it away, why a CloudFront edge can hide the origin, and how to turn a raw prospect list into an S3-confirmed lead list with /analyze and /analyze/batch. Includes a copy-pasteable bash pipeline that records detection source per row.
How to Detect Vercel on Any Website (API Guide)
Vercel is one of the most reliable hosting fingerprints on the modern web. How the server, x-vercel-id, and x-vercel-cache response headers give it away, why the cname.vercel-dns.com DNS record catches it even when the headers are stripped, and how a single DetectZeStack /analyze call returns Vercel under PaaS alongside the Next.js and React stack it usually hosts. Includes manual curl and dig checks plus a live demo-endpoint example.
Find Companies Using Next.js: Technographic API Guide
Next.js is one of the most information-dense technographic signals you can collect: one detection implies React, Node.js, and Webpack, and often reveals the hosting platform in the same scan. How the __NEXT_DATA__ script tag, /_next/static/ asset paths, and the x-powered-by header give the framework away, plus three ways to build a lead list — querying already-confirmed domains with /lookup, verifying a single site with /analyze, and batch-scanning a prospect list with /analyze/batch.
How to Detect Slick on Any Website (Carousel Detection API)
Slick is the jQuery carousel plugin that WordPress themes bundled for a decade, and its last release (1.8.1) dates to 2017 — which makes "does this site still run Slick?" a real dependency-audit question. How to spot slick.min.js and slick-theme.css in the page source, probe $.fn.slick and .slick-initialized in DevTools, and read the /analyze JSON response, where a Slick hit always brings an implied jQuery entry with it. Includes curl examples against /demo, /analyze, and /analyze/batch.
Find Companies Using Akamai (Technographic API Guide)
Akamai is an enterprise-weighted infrastructure CDN, and it gives itself away in DNS: a domain routed through Akamai CNAMEs into edge suffixes like akamaiedge.net, edgekey.net, and edgesuite.net. Why that makes "uses Akamai" a strong enterprise-scale signal, how to confirm it with a single dig, and how DetectZeStack matches the CNAME chain to report Akamai under the CDN category at confidence 80. Includes curl examples against /demo, /analyze, and /check, plus a batch list-builder with /analyze/batch.
How to Detect cdnjs on Any Website (API Guide)
cdnjs is a free, open-source library-delivery CDN hosted on Cloudflare, so it shows up as a cdnjs.cloudflare.com script reference in a page's HTML rather than in DNS, headers, or TLS like an infrastructure CDN does. Why that changes how it's detected, how the cdnjs URL path reveals the delivered library and version (jQuery 3.6.0, Font Awesome 6.5.1), why a cdnjs detection implies Cloudflare, plus curl examples against /demo and /analyze and a batch list-builder with /analyze/batch.
How to Detect dc.js on Any Website (API Guide)
dc.js is a dimensional charting library built on top of D3.js and crossfilter, so a page that loads it almost always loads D3 too. How to spot the dc global and dc.version in the console, grep the script tags from the command line, and read the /analyze JSON response — where dc.js and D3 show up as separate entries. Includes a /demo curl example, version parsing, and a batch list-builder that flags sites running the full charting stack.
Find Companies Using Google Hosted Libraries (API)
Google Hosted Libraries serves popular open-source JavaScript libraries from ajax.googleapis.com, so it shows up as a script reference in a page's HTML rather than in DNS, headers, or TLS like Cloudflare does. Why that changes how it's detected, how the URL path reveals the delivered library and exact version (jQuery 3.6.0, AngularJS 1.8.2), plus curl examples against /demo and /analyze and a batch list-builder with /analyze/batch.
Find Companies Using Elementor: Technographic API Guide
Elementor is a WordPress plugin, so it cannot hide — to render a page it ships its own CSS and JavaScript, leaving elementor-* classes and /wp-content/plugins/elementor/ asset paths right in the HTML, almost always alongside WordPress, PHP, and MySQL. How those signals are read, how to scan a single domain with curl against /demo and /analyze, and how to batch-build an Elementor lead list with /analyze/batch — plus how to split it by host, CDN, Yoast, and WooCommerce.
Find Companies Using Amazon CloudFront (API Guide)
Amazon CloudFront is an infrastructure CDN, so it leaves marks across the request path: X-Amz-Cf-Id and X-Amz-Cf-Pop response headers, a *.cloudfront.net DNS CNAME, and an Amazon-issued edge certificate. How to read all three layers, why CloudFront is distinct from AWS hosting, and curl examples against /demo and /analyze plus a batch list-builder with /analyze/batch.
How to Detect reCAPTCHA on Any Website (API + Curl)
reCAPTCHA cannot hide — to work it has to load Google's script into the page, and that tag (api.js for v2/v3, enterprise.js for Enterprise) sits right in the HTML. How to spot v2, v3, and Enterprise markers, check a single page with curl and grep, and detect reCAPTCHA at scale via /demo, /analyze, and /analyze/batch — with hCaptcha, FunCaptcha, and other providers surfaced under the same Security category.
Find Companies Using jsDelivr: Technographic API Guide
jsDelivr is a library-delivery CDN — it serves open-source files from npm and GitHub, so it shows up as a cdn.jsdelivr.net reference in a page's HTML rather than in DNS, headers, or TLS like Cloudflare does. Why that changes how it's detected, how the delivered library (Bootstrap, Chart.js, jQuery) comes back alongside it, plus curl examples against /demo and /analyze and a batch list-builder with /analyze/batch.
Find Companies Using Node.js: Technographic API Guide
Node.js is a runtime, not a page generator, so it leaves no default HTML fingerprint — detection leans on the X-Powered-By Express header and on framework markers (Next.js, Nuxt.js, Koa) that imply a Node.js backend. How the implication chain works, plus curl examples against /demo and /analyze and a batch list-builder with /analyze/batch.
How to Detect Yoast SEO on Any Website (API + Curl)
Yoast SEO stamps its presence into the page HTML — an unmistakable "optimized with the Yoast SEO plugin" comment plus a yoast-schema-graph JSON-LD block — so it detects at full confidence under the SEO and WordPress plugins categories, with WordPress implied. Curl checks plus real examples against /demo, /analyze, and /analyze/batch for finding every Yoast site in a list.
Find Companies Using Magento: Technographic List
Magento leaves direct fingerprints (the Mage-Run-Code cookie, /static/version asset paths, the RequireJS mage loader), so it is detected at full confidence under the Ecommerce category, with PHP and MySQL implied. How Adobe Commerce fits in, plus curl examples for /demo, /analyze, /analyze/batch list-building, and ranking prospects with /compare.
How to Detect if a Website Uses Laravel (2026 Guide)
Laravel runs server-side, so you cannot spot it in the rendered HTML. The reliable signal is the laravel_session cookie (usually next to XSRF-TOKEN) in the HTTP response. Manual curl checks plus real examples against /demo, /analyze, and /check that return Laravel in the Web frameworks category as structured JSON, with notes on renamed cookies and PHP being implied.
How to Detect Cloudflare Bot Management on Any Site
Confirm a site is behind Cloudflare and tell whether the bot-management product is switched on. Manual signals (Server: cloudflare and CF-Ray headers, *.ns.cloudflare.com nameservers, the Cloudflare-issued TLS certificate) plus real curl examples against /demo and /analyze that return Cloudflare in the CDN category and Cloudflare Bot Management in the Security category as structured JSON.
How to Detect if a Website Uses Bootstrap (2026 Guide)
Check whether a site runs Bootstrap, find its version, and tell it apart from Tailwind. Manual DevTools checks (grid and component classes, bootstrap.min.css, version banner comments) plus real curl examples against /demo, /analyze, and /check, with notes on purged bundles and Bootstrap-based themes.
How to Find Companies Using MySQL: API Guide for 2026
Databases never speak HTTP, so MySQL is detected by inference: platforms like WordPress, Magento, and PrestaShop that require it. How the implication chain works, why positives are strong and negatives are unknowns, plus curl examples for /demo, /check, /analyze/batch list-building, and ranking prospects with /compare.
How to Find Companies Using Nginx: API Guide for 2026
Build an Nginx-confirmed prospect list with a tech detection API. How Server-header detection works (and where CDNs mask the origin), single-domain verification with /check, batch scanning with /analyze/batch, a copy-pasteable bash + jq pipeline, and reading confidence, version, and scan_depth in the JSON.
How to Detect if a Website Uses Google Cloud (API Guide 2026)
Detect Google Cloud hosting on any site using DNS CNAME patterns (*.run.app, *.appspot.com, *.cloudfunctions.net, *.storage.googleapis.com), TLS certificates from Google Trust Services, and HTTP headers. Real curl examples against /demo and /analyze, a batch-scanning Python script, and pitfalls around Cloudflare-fronted origins and multi-CDN routing.
How to Detect Google Tag Manager on Any Website (2026)
Detect Google Tag Manager on any site, manually or at scale. Container ID patterns (GTM-XXXXXXX), the gtm.js loader, noscript iframe fallback, and window.google_tag_manager console checks. Real curl examples against the /demo and /analyze endpoints, sGTM and consent-gating pitfalls, and a Python prospect-list script.
How to Detect jQuery on Any Website (API Guide 2026)
Detect jQuery on any page manually or at scale. Browser console one-liners, script-tag and source-map fingerprints, a curl example against the /analyze endpoint with version parsing, and pitfalls around jQuery Migrate, bundled builds, and async loaders.
DNS Lookup API: MX, NS, SPF, DMARC via REST (2026)
Free DNS lookup API returning MX, NS, SPF, DMARC, DKIM, A/AAAA and SOA records as structured JSON. Real curl examples against /dns, automatic email-provider and DNS-provider identification, and an A–F email security grade in a single call. Cron + Slack diff pattern, lead-enrichment hooks, and pricing.
SSL Monitoring API: Cert Expiry, Issuer & Chain (2026)
Monitor SSL certificates via a REST API instead of openssl shell-outs. Track expiry, issuer, chain validity, SAN coverage, and key strength with structured JSON. Cron + Slack alerting pattern, chain-audit script, and bulk monitoring with real curl examples against /certificate/check.
Tech Stack Due Diligence M&A: What to Check Before You Buy
A pre-LOI checklist for acquirers: confirm the target's public-facing tech footprint, audit hosting and CDN concentration risk, surface CVEs via CPE identifiers, check TLS and email-auth posture, and track tech changes between LOI and close. Every step reproducible with one curl call.
Find Companies Using WordPress: Build Targeted Lead Lists
Pipe a CSV of target domains through the DetectZeStack API, filter for WordPress, and split by managed host, CDN, and analytics. A complete batch-prospecting script and a four-step pipeline that costs $9/month at 1,000-domain scale.
jQuery Is Still Spreading: 38 New Adoptions This Week
First weekly issue of the DetectZeStack tech-change feed. jQuery had 38 new site adoptions vs 30 removals this week — net positive in 2026. Plus HSTS surge (27/0), HTTP/3 churn, and government-site migrations.
How to Set Up a Slack Webhook for DetectZeStack Tech Change Alerts
Route tech-change alerts into the Slack channel your team already lives in. Three screenshots, five minutes: create a Slack app, enable incoming webhooks, paste the URL into your DetectZeStack dashboard.
StackShare Alternative: Programmatic Tech Stack Research API
StackShare popularized the public stack profile, but its API isn’t accessible for developer workflows in 2026. Compare options for programmatic tech stack research, live detection, and bulk company lookups — with a working curl example.
Wappalyzer API Pricing 2026: After Going Closed Source
Wappalyzer API pricing in 2026 starts around $250/month after the 2023 closed-source transition. Here's what changed, what each tier includes, the per-lookup math, and when a focused detection API covers the same use case for a fraction of the cost.
BuiltWith API Pricing 2026: Is It Worth $295/Month?
BuiltWith API pricing in 2026 starts at $295/month. Here's what each tier actually includes, the hidden limits that show up after you sign up, and when a focused detection API covers the same use case for 90% less.
SimilarTech Alternative: Faster, Cheaper Tech Detection
Looking for a SimilarTech alternative? Compare DetectZeStack — a developer-focused tech detection API with DNS signatures, a free tier, and prices roughly 40–100x cheaper at the same call volume.
WhatRuns Alternative API: 4 Options for Programmatic Detection
WhatRuns has no public API. Compare four WhatRuns alternative API options for programmatic tech stack detection, with a working curl example you can copy and run today.
SaaS Tech Stack 2026: Patterns From Real Scan Data
We scanned hundreds of SaaS websites to find the most common tech stack patterns in 2026. Five recurring stacks, real detection data, and what each pattern reveals about the company behind it.
Ecommerce Tech Stack Analysis: Shopify vs WooCommerce
Analyze the full tech stack behind Shopify, WooCommerce, and custom ecommerce sites. Detect payment processors, CDNs, analytics tools, and JavaScript frameworks via API.
Set Up Webhook Tech Stack Changes Alerts via API
Create webhook subscriptions that push HMAC-signed notifications when a monitored domain adds, removes, or updates technologies. Includes HMAC verification, Slack integration, and a full Python example.
How to Batch Scan 1,000 Websites for Tech Stack Data at Scale
Use the /analyze/batch endpoint to scan thousands of websites for technology data. Includes a Python script, curl examples, and tips for optimizing speed and cost.
Tech Stack Detection in Go: Build or Buy Guide
Build tech stack detection in Go with wappalyzergo or call the DetectZeStack API. Covers DNS detection, CPE mapping, batch analysis, and a full build-vs-buy comparison.
DetectZeStack MCP Server: Tech Detection for AI Agents (2026)
DetectZeStack is now available as an MCP server. Claude Code, Cursor, and Windsurf can detect tech stacks, scan security headers, and check SSL certs as native tools.
Track Website Tech Changes Over Time via API (2026)
Monitor when websites add, remove, or update technologies. Automated change feeds, historical snapshots, and webhook alerts via a developer-friendly API.
Website Vulnerability Scanner API: CVE + CPE Detection (2026)
Scan any website for known vulnerabilities by mapping detected technologies to CVEs in the National Vulnerability Database.
Website Tech Lookup for Competitor Analysis (2026)
Analyze competitor tech stacks with a free demo, Chrome extension, and API. Compare multiple sites side by side.
SecurityHeaders.com API Migration Guide (2026)
Step-by-step guide to migrating from the securityheaders.com API to DetectZeStack. Before/after code examples for CI/CD pipelines.
DNS Intelligence API: SPF, DKIM and DMARC Checks (2026)
Programmatically check DNS records, email authentication (SPF, DKIM, DMARC), and get email security grades via API.
SSL Certificate Check API for DevOps Teams (2026)
Monitor SSL certificate expiry, chain validity, and TLS configuration across domains via a simple API call.
SecurityHeaders.com API Is Shutting Down: Free Alternative for Header Scanning (2026)
Snyk is shutting down the securityheaders.com API in April 2026. The free scanner stays, but programmatic access is gone. Here's how to migrate to the DetectZeStack security headers API with 100 free requests/month.
WhatRuns API Key: Why It Doesn't Exist & What to Use Instead (2026)
WhatRuns is a browser extension only — there is no WhatRuns API key or documentation. Here's how to get programmatic tech stack detection with a free API.
How to Detect if a Website Uses Intercom: 5 Methods
Source inspection for messenger scripts, DOM element checks, cookies and local storage, JavaScript globals, and the DetectZeStack API — five reliable ways to detect Intercom on any website.
How to Detect if a Website Uses Shopify: 5 Methods
DNS CNAME lookup, HTML and JavaScript signatures, cookie fingerprinting, HTTP response headers, and the DetectZeStack API — five reliable ways to identify Shopify on any domain, including custom-branded stores.
How to Detect if a Website Uses HubSpot: 4 Methods
From checking page source for tracking scripts and inspecting DNS CNAME records to automated API detection, here are four reliable ways to detect HubSpot on any website.
How to Detect Google Analytics on Any Website: 5 Methods
From checking the page source for tracking snippets to programmatic API detection at scale, here are five reliable ways to detect Google Analytics and distinguish GA4 from Universal Analytics.
How to Detect AWS Hosting on Any Website: 5 Methods
From DNS CNAME records to HTTP headers and TLS certificates, here are five reliable ways to detect AWS hosting and distinguish between CloudFront, S3, ELB, Elastic Beanstalk, and more.
How to Audit Security Headers with Python: Grade Any Website A+ to F
Check security headers and grade any website from A+ to F using Python. Learn the manual way with requests, then automate with the DetectZeStack security headers API.
How to Detect Tailwind CSS on Any Website: 5 Methods
From inspecting utility class patterns in the DOM to automated API scanning, here are five reliable ways to detect Tailwind CSS and distinguish it from Bootstrap and other CSS frameworks.
How to Detect if a Website Uses Vue.js: 5 Methods
From DevTools console checks to programmatic API scanning, here are five reliable ways to detect Vue.js and distinguish it from Nuxt.js, Quasar, and plain Vue setups.
How to Detect if a Website Uses Next.js: 5 Methods
From page source inspection to programmatic API scanning, here are five reliable ways to detect Next.js and distinguish it from Gatsby, Remix, and plain React.
How to Detect if a Website Uses React: 4 Proven Methods
From DevTools console checks to programmatic API scanning, here are four reliable ways to detect React and distinguish it from Next.js, Gatsby, and Remix.
How to Check if a Website Uses WordPress (5 Methods That Actually Work)
From checking /wp-admin to DNS CNAME analysis, here are five reliable ways to detect WordPress sites — including edge cases like headless WordPress and WP Engine.
How to Detect What JavaScript Framework a Website Uses (React, Vue, Angular, Next.js)
JavaScript frameworks leave fingerprints in the DOM, window globals, and HTTP headers. Learn how to identify React, Vue, Angular, Next.js, and more.
Shopify vs WooCommerce: How to Tell Which E-Commerce Platform a Site Uses
Shopify hides behind custom domains. WooCommerce runs on WordPress. Learn how DNS CNAME detection and HTTP fingerprinting reveal which platform powers any store.
Free BuiltWith Alternatives in 2026: 5 Tools That Won't Cost You $295/Month
BuiltWith starts at $295/mo. Here are five alternatives — from free browser extensions to affordable APIs — for developers and small teams on a budget.
Tech Stack Detection with MCP and AI Agents: The Next Wave of Automation
MCP lets AI agents call external tools. Tech stack detection is a natural fit — sales agents, security auditors, and DevOps bots can all use it programmatically.
How to Detect the CDN and Hosting Provider of Any Website
DNS CNAME records, HTTP headers, TLS certificates, and IP ranges all reveal CDN and hosting providers. Here's how to identify Cloudflare, CloudFront, Fastly, and more.
How to Detect What CMS a Website Uses (WordPress, Shopify, Squarespace)
Manual CMS detection methods fail on headless setups. Learn how to identify WordPress, Shopify, Wix, and 8 other CMS platforms using DNS, TLS, and HTTP analysis.
Detect Any Website's Tech Stack with Python (Under 50 Lines)
A step-by-step Python tutorial for detecting website technologies. Covers single-domain scanning, batch processing, CSV export, and error handling.
Find Companies Using Stripe: A Guide to Technographic Prospecting
Use tech stack detection to find prospects who already use Stripe. Build a prospecting pipeline with the DetectZeStack API for a fraction of BuiltWith's $295/mo price.
Wappalyzer Went Closed Source: What Changed and What to Use Instead
Wappalyzer archived its open-source repo in August 2023. Here's what changed for users, what alternatives exist, and how DetectZeStack compares on price, features, and API access.
Browser Extensions Miss Your Infrastructure Layer: Why DNS and TLS Detection Matter
Browser extensions detect JavaScript and HTTP headers, but miss CDN providers, hosting platforms, and certificate authorities. DNS and TLS detection fills the gap.
DetectZeStack vs WhatRuns: API Access vs Browser Extension (2026)
WhatRuns has no API. DetectZeStack gives you programmatic tech detection with DNS/TLS analysis, CPE data, change tracking, and batch processing.
How Sales Teams Use Tech Stack Data for Competitive Intelligence
Real-world example: how one customer uses tech stack detection to scan SaaS competitors before sales calls. 960 API calls in one month.
What We Learned From Our First 1,768 API Calls
Build-in-public: real metrics from our first 1,768 API calls. Top domains scanned, cache hit rates, the partial results problem, and what surprised us most.
Track Technology Changes Over Time with the /changes API
Monitor when websites add, remove, or upgrade technologies. Queryable change feed with tier-gated history up to 365 days. BuiltWith charges $295/mo for this.
DNS-Based Technology Detection: Why Your CDN Can't Hide
Technical deep dive on CNAME-based detection. How DNS records reveal CDN, PaaS, and cloud providers even when sites block HTTP requests. 100+ signatures.
Website Technology Checker API: Detect Any Site's Tech Stack Programmatically
How to use a tech stack detection API with code examples in curl, Python, and JavaScript. Compare BuiltWith, Wappalyzer, and DetectZeStack pricing.
Tech Stack Enrichment for Sales Teams: Why Knowing What Your Prospects Run Changes Everything
Technographic data tells you more about a prospect's budget, sophistication, and buying signals than any revenue estimate. Here's how to use it.
CPE Identifiers Explained: A Practical Guide for Security Teams
What CPE is, how the naming convention works, and how to use CPE identifiers from DetectZeStack to query the NVD for known vulnerabilities.
BuiltWith vs Wappalyzer: Feature-by-Feature Comparison (2026)
A detailed comparison of BuiltWith and Wappalyzer — pricing, API access, detection accuracy, and where DetectZeStack fits in.
Wappalyzer vs WhatRuns: Which Tech Detection Tool Should You Use?
Both are browser extensions for tech detection, but with different approaches. Compare features, API access, and find the best fit for your workflow.
BuiltWith vs WhatRuns: Enterprise Data vs Free Extension
Two very different tools — BuiltWith is enterprise SaaS with massive data, WhatRuns is a free browser extension. Which one do you need?
Security Audit Any Website's Dependencies with CPE Data
Map detected technologies to the NVD vulnerability database using CPE identifiers. Automate security audits of any public website.
How to Build a Lead Enrichment Pipeline with Tech Detection
Use tech stack detection to enrich your sales leads. Build a pipeline that identifies prospects by their CMS, framework, CDN, and more.
BuiltWith vs Wappalyzer vs DetectZeStack: Which Tech Detection Tool Is Right for You?
An honest comparison of three tech stack detection tools. Features, pricing, accuracy, and API access compared side by side.
Detect Vulnerable Technologies on Any Website Using CPE Identifiers
Many technologies include CPE identifiers that map to the NVD vulnerability database. Learn how to use tech stack detection to find security risks automatically.
Detect Any Website's Tech Stack With a Single API Call
How DetectZeStack combines Wappalyzer fingerprinting, DNS CNAME analysis, and TLS certificate inspection to identify 7,500+ technologies.

Get API updates and tech detection tips

Join the mailing list. No spam, unsubscribe anytime.