PublicWWW finds every site using a snippet. TechSpy reads what one site runs.
PublicWWW is a source-code search engine built for footprinting the whole web by signature. TechSpy points at a single domain and returns an opinionated tech and infrastructure read — not a list of matches.
- Enter a domain, get a Verdict, Evidence, and Implications — not raw HTML matches
- Sees through React and Next.js SPAs that leave source-code scrapers near-empty
- Adds DNS, DMARC, SPF, DKIM, subdomains, and hidden-API Deep Scan
Free — no card, 30 scans/day.
PublicWWW — the matches
search: "js.stripe.com"
TechSpy — the read · acme.io
HighVerdict
Stripe checkout, Segment, and Datadog point to a well-instrumented commerce stack — but DMARC isn't enforced.
Evidence: Stripe.js + Checkout via JS-runtime fingerprint; Segment and Datadog RUM in the headless HAR capture; SPF present, DMARC p=none.
Implication: payments and monitoring are dialed in; spoofing protection is the weak link a competitor could exploit.
A match list tells you where a snippet is, not what a company is doing
PublicWWW is the tool for “find every site running this code.” It's built for footprinting at internet scale. But once you have one company you actually care about, a list of URLs that contain a string won't explain its stack. TechSpy reads that company end to end.
What a match list gives you
acme.io/checkout · contains "js.stripe.com"
Proof the snippet is there. Nothing on how the rest is wired.
What the read gives you
- VerdictA well-instrumented commerce stack, DMARC not enforced
- EvidenceStripe.js, Segment + Datadog RUM, DMARC p=none
- ImplicationsSpoofing protection is the weak link
Head to head
Not all checkmarks on our side — snippet search and footprinting at web scale are PublicWWW's home turf, bolded below.
What only TechSpy does
The per-company depth a source-code search doesn't reach — turned into an action, not a match list.
🧭
A read, not a match list
PublicWWW returns URLs that contain your query. TechSpy groups a domain's tools by what they mean and writes a Verdict, the Evidence behind it, and the business Implications.
👁️
Sees through modern SPAs
Source-code search reads the HTML that ships. TechSpy adds JS-runtime fingerprints and HTTP headers, so React and Next.js apps that leave scrapers near-empty still resolve to a real stack.
🔐
Infrastructure, not just embeds
DNS, DMARC, SPF, DKIM, subdomains, sitemap, and a headless Deep Scan that surfaces hidden APIs and SDKs — signals a code-signature search was never built to return.
Pick PublicWWW instead if…
Different jobs. Pick the one that matches yours.
Choose PublicWWW if you need to
- You need to find every site running a specific snippet, tracking ID, or code signature.
- Your job is OSINT footprinting or building lists of sites at internet scale.
- You want to reverse-search source code rather than analyze one company in depth.
Choose TechSpy if you need to
- You want an opinionated read on one company's stack and infrastructure, not a list of matches.
- The target is a React/Next.js SPA that leaves source-code scrapers near-empty.
- You need DNS, DMARC, subdomains, and hidden-API Deep Scan alongside tech detection.
- You want confidence markers, honest 'blocked' notes, and exportable reports (PDF / Zapier / API).
Start free — pay when it becomes a habit
Free
$0
- Scans: 30/day
- Deep Scan: —
- Interact: —
- Export PDF: —
- API · Zapier · MCP · CLI: —
Plus
$19/mo
- Scans: 30/day
- Deep Scan: 10
- Interact: 5
- Export PDF: —
- API · Zapier · MCP · CLI: ✓
Max
$49/mo
- Scans: Unlimited
- Deep Scan: 50
- Interact: 25
- Export PDF: ✓
- API · Zapier · MCP · CLI: ✓
Enterprise $199/mo. Static scan runs in seconds; Deep Scan & Interact take minutes.
Found the footprint? Now read the company.
Scan a real target free — no login, 30 scans a day.