Reconnaissance
What is this site actually built on?
Every site tells visitors more than its owner intends — the framework, the CDN, the analytics, sometimes the exact server version. This reads the first HTML response and its headers, and reports what an attacker would learn in the same ten seconds.
- We request the homepage once, over HTTPS, with an honest user agent that identifies this tool. We don't spoof a browser to get around bot rules.
- Fingerprints are written by hand. Wappalyzer moved to a proprietary licence in 2023, so its ruleset isn't used here — coverage is narrower than a commercial detector and will miss long-tail libraries.
- Only the first ~600KB of HTML is read, and only the homepage. Technology used on inner pages, or purely server-side with no client footprint, will not show up.
- A detection is evidence, not proof. Version numbers in particular are whatever the server chooses to claim.
- Public domains only. Internal hostnames and IP addresses are rejected.
Want to know what your own estate leaks?
We map external attack surface properly — every subdomain, every exposed service, not just one homepage.