HN Showcase
Back to browse
DetectZeStack – Tech stack detection API with 4 detection layers

DetectZeStack – Tech stack detection API with 4 detection layers

by mlugo_apb·Feb 15, 2026·1 point·0 comments
Visit ProjectView on HN

AI Analysis

●●SolidWizardrySolve My Problem
The Take

Combines Wappalyzer fingerprints with DNS CNAME, TLS issuer checks and header matching to triangulate tech stacks — a practical, non-flashy way to catch what single-source scrapers miss. Batch analysis, compare endpoints, CPE IDs for NVD mapping and 24h smart caching make it genuinely useful for audits and competitor research; it's not reinventing the space, but it adds meaningful, usable layers that established tools often omit.

Target Audience

Backend developers, security auditors/engineers, competitive intelligence teams, SaaS product teams, sales/lead enrichment engineers

Post Description

I built a REST API that detects what technologies any website is running. You give it a URL, it gives you back the full stack: frameworks, CMS, CDNs, analytics, payment processors, etc.

What makes it different from BuiltWith/Wappalyzer:

- 4 detection layers running simultaneously: Wappalyzer fingerprinting (3,500+ signatures), DNS CNAME analysis (29 infrastructure signatures), TLS certificate inspection (8 issuer patterns), and custom HTTP header matching. Most tools only do one of these.

- Batch endpoint: analyze up to 10 URLs in a single request with concurrent processing.

- Compare endpoint: pass 2-10 URLs, get back shared vs unique technologies.

- CPE identifiers on every detected technology, so you can map directly to the NVD vulnerability database for security audits.

- 24-hour smart cache: cached responses return in <5ms and don't count against your quota.

Tech stack: Go, chi router, SQLite, wappalyzergo. Runs on a single Fly.io machine.

Free tier is 100 requests/month. Pro is $29.99 for 25K requests — significantly cheaper than BuiltWith ($295/mo minimum).

Try the live demo on the homepage, or check the API spec: https://detectzestack.fly.dev/openapi.yaml

Happy to answer questions about the detection approach or the architecture.

Similar Projects