Search

Find the Technology Stack of a Domain

Domain NameTechnology Stack

Have a domain? These OSINT tools take a domain as input and return technology stacks. 43 tools in our catalogue make this exact pivot — compare them by pricing, platform, and what they output, then chain the results into the next step of your investigation.

43tools
All Domain Name tools
BuiltWith icon

BuiltWith

Website technology profiling platform

FreemiumWebAPI
IN
OUT
Censys icon

Censys

Internet asset and certificate search engine

FreemiumWebAPI
IN
OUT+1
FOFA icon

FOFA

Internet asset search and mapping engine

FreemiumWebAPI
IN
OUT+1
Wappalyzer icon

Wappalyzer

Detect technologies used by websites

FreemiumWebAPI
IN
OUT
ZoomEye icon

ZoomEye

Cyberspace search engine for exposed assets

FreemiumWebAPI
IN
OUT+1
AADInternals icon

AADInternals

Recon Azure AD / M365 tenant info from a domain

FreeOSSCLI
IN
OUT
Arjun icon

Arjun

an HTTP parameter discovery tool for finding hidden inputs accepted by web ap

FreeOSSCLI
IN
OUT
BeVigil icon

BeVigil

Mobile-app security search engine surfacing APK secrets, keys and subdomains

FreemiumWebAPI
IN
OUT+1
BeVigil OSINT CLI icon

BeVigil OSINT CLI

Query BeVigil API for hosts, subdomains and S3 buckets from apps and domains

FreemiumOSSCLIAPI
IN
OUT
CMSeeK icon

CMSeeK

a CMS detection and exploitation-aid tool for identifying website platforms a

FreeOSSCLI
IN
OUT
Cloud Custodian icon

Cloud Custodian

Query cloud accounts for policy-violating resources

FreeOSSCLI
IN
OUT
Criminal IP icon

Criminal IP

CTI search engine scoring IPs and domains for threats

FreemiumWebAPI
IN
OUT+2
Dirsearch icon

Dirsearch

a web path scanner for enumerating hidden directories, files, and application

FreeOSSCLI
IN
OUT
DomainIQ icon

DomainIQ

Reverse-analytics and domain intelligence lookups

FreemiumWebAPI
IN
OUT
Driftnet icon

Driftnet

Internet-scan intelligence for domains and IPs

FreemiumWebAPI
IN
OUT+2
Droopescan icon

Droopescan

a CMS scanner focused on Drupal, SilverStripe, WordPress, and related web pla

FreeOSSCLI
IN
OUT
EyeWitness icon

EyeWitness

a web screenshot and service reporting tool for quickly triaging exposed inte

FreeOSSCLI
IN
OUT
Feroxbuster icon

Feroxbuster

a recursive content discovery tool for finding hidden web paths and files

FreeOSSCLI
IN
OUT
FullHunt icon

FullHunt

Attack-surface platform mapping a domain's exposed subdomains, IPs and services

FreemiumWebAPI
IN
OUT+2
Gobuster icon

Gobuster

a command-line scanner for brute forcing directories, DNS names, virtual host

FreeOSSCLI
IN
OUT
Gowitness icon

Gowitness

a screenshot and web technology collection tool for reviewing large sets of w

FreeOSSCLI
IN
OUT
Hakrawler icon

Hakrawler

a fast web crawler for discovering links, JavaScript files, endpoints, and pa

FreeOSSCLI
IN
OUT
Information Laundromat icon

Information Laundromat

Trace content reuse and linked sites by domain

FreeWeb
IN
OUT
Katana icon

Katana

a next-generation crawling and spidering framework for endpoint and URL disco

FreeOSSCLI
IN
OUT
Kiterunner icon

Kiterunner

an API route discovery tool built to find endpoints in modern web services

FreeOSSCLI
IN
OUT
LinkFinder icon

LinkFinder

a script that extracts endpoints and URLs from JavaScript files for applicati

FreeOSSCLI
IN
OUT
Netcraft Site Report icon

Netcraft Site Report

Hosting history, network owner and tech stack for a domain

FreeWeb
IN
OUT
Netlas.io icon

Netlas.io

Internet scan search engine for hosts, DNS, certs and WHOIS

FreemiumWebAPI
IN
OUT+3
ParamSpider icon

ParamSpider

a parameter mining tool that collects URLs and query parameters from public a

FreeOSSCLI
IN
OUT
ProjectDiscovery httpx icon

ProjectDiscovery httpx

a fast HTTP toolkit for probing hosts, collecting titles, technologies, redir

FreeOSSCLI
IN
OUT
Prowler icon

Prowler

Audit AWS/Azure/GCP accounts for security misconfigurations

FreeOSSCLI
IN
OUT
RedHunt Labs Attack Surface icon

RedHunt Labs Attack Surface

Discover an organisation's external attack surface from a domain

PaidWebAPI
IN
OUT
ScoutSuite icon

ScoutSuite

Multi-cloud configuration audit with HTML report

FreeOSSCLI
IN
OUT
SpyOnWeb icon

SpyOnWeb

Find sites sharing an analytics ID, AdSense code, or IP

FreeWebAPI
IN
OUT
Steampipe icon

Steampipe

Query cloud and SaaS APIs as live SQL tables

FreeOSSCLI
IN
OUT
Stormspotter icon

Stormspotter

Build an attack graph of Azure resources and identities

FreeOSSCLI
IN
OUT
Sucuri SiteCheck icon

Sucuri SiteCheck

Remotely scan a website for malware and blacklist status

FreeWeb
IN
OUT
WafW00f icon

WafW00f

a web application firewall detection tool that fingerprints protection produc

FreeOSSCLI
IN
OUT
Web-Check icon

Web-Check

All-in-one website DNS, TLS, headers and tech recon

FreeOSSWebDesktop App
IN
OUT+1
Webanalyze icon

Webanalyze

a technology detection tool using Wappalyzer fingerprints to identify web app

FreeOSSCLI
IN
OUT
WhatWeb icon

WhatWeb

a website fingerprinting tool that identifies content management systems, fra

FreeOSSCLI
IN
OUT
ffuf icon

ffuf

a fast web fuzzer for discovering directories, virtual hosts, parameters, and

FreeOSSCLI
IN
OUT
httprobe icon

httprobe

a command-line utility that probes discovered hosts and identifies live HTTP

FreeOSSCLI
IN
OUT

From domain name, also find…

Report / Summary103IOC (Indicator of Compromise)96DNS Records64URL60Subdomain57Website38CVE / Vulnerability34Email Address31

Find technology stack from other data

URL28Company Name9IP Address7
All OSINT use cases & data types