WhatRuns tells you what runs. TechSpy tells you what it means.
WhatRuns is a fast, free browser extension for a one-click glance at a site's tech. TechSpy scans deeper — through SPAs, into DNS and hidden APIs — and hands you a verdict, not a list to interpret yourself.
- Sees through React and Next.js sites that leave extension scanners near-empty
- Adds DNS/DMARC/SPF, subdomains, sitemap, Deep Scan, and monitoring
- Groups tools by meaning and gives each finding High/Medium/Low confidence
Free — no card, 30 scans/day.
WhatRuns — the popup
TechSpy — the read · acme.io
HighVerdict
A modern React app on Vercel with Segment and HubSpot wired in — a product-led team instrumented for growth.
Evidence: Next.js on Vercel edge with no server-rendered HTML for scrapers; Segment + HubSpot found in runtime requests, not the static page; DMARC at p=none.
Implication: sell to the growth team, not IT — lead with analytics and lifecycle fit, and flag the email posture as an easy win.
A glance is a starting point, not an answer
WhatRuns is great for a one-click look while you browse. But modern sites often load their real stack after the page renders, and a list of tags still leaves you to work out what it means for the account. TechSpy scans past the first paint and writes the conclusion for you.
What a glance gives you
acme.io · React · Vercel · analytics not detected
A quick answer to “what is this built on”. Not what to do about it.
What the read gives you
- VerdictA product-led team instrumented for growth
- EvidenceSegment + HubSpot in runtime calls, DMARC p=none
- ImplicationsSell to growth, not IT — note the email gap
Head to head
Not all checkmarks on our side — a free extension and one-click checks while browsing are WhatRuns' home turf, bolded below.
What only TechSpy does
The depth a browser extension doesn't reach — turned into an action, not a data dump.
🧬
Sees through the SPA
Static HTML, JS-runtime fingerprints, and HTTP headers combined — so React and Next.js sites that leave extension scanners near-empty still return a full stack.
🔍
Deep Scan finds the hidden layer
A headless run captures the HAR, surfacing the analytics SDKs, payment APIs, and third-party calls that only fire after the page loads. Interact clicks and fills to expose post-interaction tools.
🛰️
Infra, not just front-end
DNS, DMARC, SPF and DKIM posture, subdomain discovery, and sitemap coverage — the operational signals an extension never touches.
Pick WhatRuns instead if…
Different jobs. Pick the one that matches yours.
Choose WhatRuns if you need to
- You want a free, no-signup extension that lives in your toolbar.
- You just need a quick glance at one site's front-end while browsing.
- You're checking a mostly static site where fingerprint-level detection is plenty.
Choose TechSpy if you need to
- You research React/Next.js SPAs where extensions come back nearly empty.
- You need a read — verdict, evidence, and implications — not a raw list to decode.
- You care about DNS/email posture, subdomains, and hidden APIs, not just visible tech.
- You want to save, compare, monitor, and export scans across a book of accounts.
Start free — pay when it becomes a habit
Free
$0
- Scans: 30/day
- Deep Scan: —
- Interact: —
- Export PDF: —
- API · Zapier · MCP · CLI: —
Plus
$19/mo
- Scans: 30/day
- Deep Scan: 10
- Interact: 5
- Export PDF: —
- API · Zapier · MCP · CLI: ✓
Max
$49/mo
- Scans: Unlimited
- Deep Scan: 50
- Interact: 25
- Export PDF: ✓
- API · Zapier · MCP · CLI: ✓
Enterprise $199/mo. Static scan runs in seconds; Deep Scan & Interact take minutes.
Glanced at the stack? Now get the read.
Scan a real target free — no login, 30 scans a day.