How does detection work?

It matches the live HTML and response headers against a library of signatures — the fingerprints platforms leave behind, such as a /_next/static path for Next.js or a cf-ray header for Cloudflare.

Why does it sometimes find nothing?

Plenty of well-built sites leave no fingerprint. A static site compiled to plain HTML looks like plain HTML. That is reported as nothing found rather than guessed at.

Does it run JavaScript?

No. It reads the HTML as delivered, so a framework that only reveals itself after hydration may go undetected. That is why the evidence string is always shown.

Free Tech Stack Detector

Tech Stack DetectorFind out what any website is built with. Enter a domain and see its CMS, framework, hosting, server, styling and analytics — each one shown with the exact evidence that identified it. Free, no signup.How detection worksPlatforms leave fingerprints. Next.js serves assets from a /_next/static path. WordPress references wp-content. Cloudflare adds a cf-ray response header. Shopify loads from cdn.shopify.com. This tool downloads the page, reads the response headers, and matches both against a signature library covering content management systems, e-commerce platforms, JavaScript frameworks, CSS frameworks, analytics tools, CDNs, web servers and backend languages.Every detection displays the literal string that triggered it. That is deliberate. A badge asks you to trust the tool; an evidence string lets you judge the call yourself, which matters because signature matching is inference rather than proof.Why it sometimes finds nothingA blank result is a real answer. A static site compiled to plain HTML genuinely looks like plain HTML — there is nothing to find. A server that strips its X-Powered-By header is following good security practice and has made its language undetectable from outside. Reporting "nothing found" is more useful than producing a confident guess that happens to be wrong.What it cannot seeDetection reads the page as delivered and does not execute JavaScript. A framework that only reveals itself after hydration can go undetected. Anything loaded lazily, behind a login, or injected by a tag manager after page load is invisible to a plain fetch. Browser-extension tools see more because they inspect the page after the browser has finished with it.What people use this for

Competitive research — what a competitor built on before choosing your own stack

Lead qualification — identifying sites running a platform you build for

Security review — spotting outdated or unexpected components on your own estate

Performance work — finding third-party scripts nobody remembers adding

Plain curiosity — a site loads beautifully and you want to know why

Categories detectedContent management systems including WordPress, Drupal, Joomla, Ghost, Wix, Squarespace and Webflow. E-commerce platforms including Shopify, WooCommerce, Magento and BigCommerce. Frameworks including Next.js, Nuxt, React, Vue, Angular, Svelte, Astro, Gatsby and Remix. Styling including Tailwind and Bootstrap. Analytics including Google Analytics, Tag Manager, Plausible, Fathom, Matomo, Hotjar, Segment and Meta Pixel. Infrastructure including Cloudflare, Vercel, Netlify, Fastly, Akamai and CloudFront. Servers including nginx, Apache, IIS, LiteSpeed and Caddy.Related free tools

HTTP Headers Checker — the full header set behind the infrastructure detections

Carbon Footprint — what all those scripts weigh

DNS Lookup — where the domain actually points

See all free domain tools

All free domain tools

Traffic Checker — Monthly visits, bounce rate and sources for any domain
Website Trust Score — One 0-100 rating from five live security checks
Carbon Footprint — Measured page weight converted to CO2 per visit
Domain Age Checker — Exact registration date and age via RDAP
Subdomain Finder — Every subdomain in Certificate Transparency logs
DNS Lookup — A, AAAA, MX, TXT, NS, CNAME, SOA and CAA records
WHOIS Lookup — Registrar, dates and nameservers via RDAP
SSL Certificate Checker — Expiry, issuer, covered domains and an A-F grade
HTTP Headers Checker — Security score, CDN detection and cache analysis
Redirect Chain Checker — Trace every 301 and 302 hop, detect loops
Backlink Checker — Authority score, PageRank and trust signals
Meta Tags Analyzer — Title, description, canonical and Open Graph
Robots.txt Tester — User-agent groups and rules per RFC 9309
Email Authentication — SPF, DKIM and DMARC with a pass or fail verdict
Domain Comparison — Up to 5 websites side by side
Trending Domains — The most analysed sites this week
All free domain tools — the complete hub