WebAnalyzer

Detect the technologies, hosting, and server stack behind any website.

X-ray any site: tech stack & versions, CVEs, security headers, DNS, WHOIS & sitemap — 100% private. EN · PT-BR · DE See exactly how any website is built — and whether it's exposed — in one click. WebAnalyzer is your X-ray for the web. Open any page and instantly reveal its full technology stack, hosting, network footprint, security posture, known vulnerabilities and site structure. No sign-up. No data leaves your browser. 🔍 TECH STACK, DECODED Detect the CMS, JavaScript frameworks, libraries, web servers, languages, CDNs, analytics and payment providers behind any site — each with a confidence score, the evidence that proves it, and the exact version when it's exposed. Deep-scan WordPress for its version, themes and plugins. Detection signatures refresh automatically, so new platforms are recognized without waiting for an update. 🖥️ SERVER & ORIGIN HOSTING See the responding server, IP and status — plus, when a site isn't hidden behind a CDN, the real origin hosting provider and its ASN. When a CDN/WAF is masking the origin, WebAnalyzer tells you that too, instead of guessing. 🛡️ KNOWN VULNERABILITIES (CVEs) Cross-check the components detected with a confident version against the OSV.dev vulnerability database and surface known CVEs/advisories — with severity and the version that fixes each one. Only version-identified technologies are checked: nothing is guessed, so you don't get false alarms. 🔐 SECURITY HEADER AUDIT Instantly see which HTTP security headers are configured, misconfigured or missing — HSTS, CSP, X-Frame-Options and more — each with a plain-English explanation and the exact fix to apply. 🌐 NETWORK INTELLIGENCE Full DNS records (A, AAAA, MX, TXT, NS, CAA…), passive subdomain discovery via Certificate Transparency logs, IP geolocation, and one-click export to a BIND zone file ready for Cloudflare import. 🗺️ SITEMAP & SITE STRUCTURE Read the site's public sitemap — discovered through robots.txt and the standard locations — to reveal its sitemap files and its main, institutional pages (home, about, contact, services), with blog posts, products and other high-volume content filtered out. Copy any URL or open it in a new tab. Fully passive: only the site's own public crawler files, never hidden-path probing. 📇 WHOIS AT A GLANCE Registrar, creation and expiry dates, and ownership — laid out clearly, no raw dumps. 🤖 AI-POWERED REPORTS Turn raw analysis into a clear report in one click — Stack Intelligence, Security Posture, Competitive Brief or a Full Report. Connect your own n8n workflow; your data and keys stay yours. 🌍 SPEAKS YOUR LANGUAGE Fully localized — the entire interface follows your browser language: • English • Português (Brasil) • Deutsch More languages on the way. 🔒 PRIVATE BY DESIGN Everything runs locally in your browser. Vulnerability checks query the public OSV.dev API directly; your credentials and analysis never touch WebAnalyzer servers. No tracking, no account, ever. Built for developers, security researchers, agencies, SEOs — and anyone who's ever wondered "how is this site built, and is it safe?" Install WebAnalyzer and x-ray your first site in seconds.