Tech Stack Detection: How It Works
Tech stack detection fingerprints a website's technology from HTTP headers, HTML patterns, JavaScript globals, and DNS — without needing server access.
Tech Stack Detection: How It Works
Tech stack detection identifies what technologies a website uses — its CMS, frontend framework, CDN, analytics tools, e-commerce platform, and more — purely from publicly visible signals. No server access or credentials are needed.
How Detection Works
ElasticDomain's tech detection fetches the website over HTTPS and analyzes:
HTTP Response Headers
Headers reveal a lot:
- X-Powered-By: PHP/8.1 — PHP version
- Server: nginx/1.24 — web server
- X-Shopify-Stage — Shopify platform
- X-Generator: WordPress — CMS
- CF-Ray — Cloudflare CDN
HTML Source Patterns
The page HTML contains fingerprints:
- Meta generator tags (e.g., WordPress, Drupal, Joomla)
- Script src paths (/wp-content/ = WordPress, /sites/default/ = Drupal)
- CSS class patterns unique to frameworks
- Comment patterns left by CMS generators
JavaScript Globals
Scripts loaded on the page expose their presence:
- Google Analytics / GA4 (gtag.js)
- Hotjar, Intercom, HubSpot, Drift
- React, Vue, Angular (detected from bundle patterns)
DNS Patterns
DNS records reveal infrastructure choices:
- MX records pointing to Google Workspace or Microsoft 365
- CNAME to Shopify, Squarespace, Wix
- NS records identifying the DNS provider
What Gets Detected
Categories of technologies detected:
| Category | Examples |
|---|---|
| CMS | WordPress, Drupal, Joomla, Ghost, Webflow |
| E-commerce | Shopify, WooCommerce, Magento, BigCommerce |
| Frontend Frameworks | React, Vue.js, Angular, Next.js, Nuxt |
| CDN | Cloudflare, Fastly, AWS CloudFront, Akamai |
| Web Server | Nginx, Apache, Caddy, LiteSpeed |
| Analytics | Google Analytics, Plausible, Matomo, Heap |
| Marketing | HubSpot, Marketo, Salesforce Pardot |
| Hosting | Vercel, Netlify, AWS, Heroku, DigitalOcean |
| Google Workspace, Microsoft 365, Zoho | |
| Security | Cloudflare WAF, Sucuri, Imperva |
Reading the Tech Stack Tab
The Tech Stack tab on a domain detail page lists all detected technologies grouped by category. Each entry shows:
- Technology name
- Detected version (when available)
- Confidence level
- Detection method (which signal triggered the match)
Use Cases
Competitive Intelligence
See what stack your competitors use. Are they on Shopify or a custom build? Do they use Cloudflare? Which analytics tools are they running?
Security Assessment
Detect outdated software versions. An old WordPress or PHP version is a security risk. Tech detection surfaces these.
Agency Onboarding
Before taking on a new client, run tech detection to understand their existing stack before your first meeting.
Investment Due Diligence
Before acquiring a domain or website, understand the technical complexity of what you are buying.
Limitations
- JavaScript-rendered content (single-page apps) may not expose all technologies to static analysis
- Some technologies use obfuscated or CDN-served scripts that are harder to fingerprint
- Server-side technologies (databases, backend languages) are not always visible from the outside