Website Technology Checker

Paste the address into the scanner above and it lists the website’s technologies: CMS, framework, JavaScript libraries, analytics, hosting, CDN and more, from 203 signatures. Each result shows the evidence it was found by, such as a script file, a response header or a cookie, and a confidence level of Confirmed, Likely or Possible.

The scan names the content management system when the page gives it away: WordPress, Shopify, Wix, Squarespace, Webflow, Drupal, Joomla, Ghost and others. It reads the generator meta tag, the paths a CMS serves files from (such as /wp-content/) and platform headers. A headless or heavily customised CMS may not show, because the page never mentions it.

Scan the store’s address and the report shows its Shopify theme: the name the store gave it, the theme it was built from (such as Dawn), its version and whether it is a Theme Store theme. Every Shopify storefront publishes this in its page code, so the detector reads it directly rather than guessing from the design.

A WordPress site loads files from /wp-content/ and /wp-includes/, usually has a "generator" meta tag naming WordPress, and often exposes /wp-json/. The scanner checks all of these and shows which one matched, plus the active theme and the plugins whose files the page loads.

The scan shows the server’s IP address, the server and CDN headers (such as Vercel, Cloudflare, Netlify or nginx) and the domain’s name servers. Together they usually name the host. A CDN like Cloudflare in front of a site hides the origin server, and then the CDN is what you see.

Scan the site and open the Security tab. It checks ten HTTP headers, including Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options and Referrer-Policy, shows each value, explains what each one protects against and grades the site from A to F on the six that matter most.

Yes. It is free, with no signup, no account and no browser extension. There is a short limit on scans per minute to keep it fair, and recent results are kept for ten minutes, so scanning the same site twice is instant.

This tool covers the everyday job of both for a single site: detecting the technologies behind a page, with the evidence for each. It adds a security header grade, SSL certificate details, DNS and email records, SEO tags and fonts in the same report. It does not sell lead lists or track a site’s history, which is what the paid plans of those tools are for.

The Stack tab lists the fonts the page loads: Google Fonts families from the stylesheet link, Adobe Fonts kits, and families declared with @font-face in the page. Fonts loaded only from an external stylesheet the page links to may not appear, because the scan reads the page itself.

Accurate for what a browser can see, and honest about the rest. Each result is scored from its evidence: a loaded script or a platform header counts strongly, a single class name counts weakly and never stands alone. Anything under 25 is dropped, and results under 30 are marked Possible so you can judge them.

Server-side tools (the database, the back-end language, the payment processor) are invisible unless the site leaks them in headers or cookies. Sites behind a bot check, such as a Cloudflare challenge, may send a placeholder page instead of the real one, and the report says so when that happens.

The site sees one ordinary page request from this tool’s server, identified as the Deeve Technologies tech stack detector, not from your browser or your IP address. Nothing from the scanned page is run or loaded in your browser; the report shows extracted text only.