Technographic data providers, sorted by how they detect anything
Five detection methods and what each one can and cannot see, with ten providers, prices read today, and the test that shows where detection goes blind.
ListNovember 12, 2026 · 11 min read
Every list of technographic data providers ranks vendors. Almost none of them mention the thing that decides whether a vendor can answer your question at all: how it detects software in the first place. There are five methods in commercial use, each blind to something specific, and a provider using the wrong method for your product will be confidently wrong rather than usefully empty. ShopLeads is our product, so we say so and say where it sits in the sort below; every other vendor is described from its own pages, read on November 9, 2026.
Start from the method, not the brand. If you sell a backend system, a website crawler will never see your market. If you sell a Shopify app, a general web index will see your category and not your competitor. If you need timing rather than presence, only two of the five methods give you a date.
Detection method
What it sees
Blind to
Providers
Whole-web crawl
Anything a page serves, at scale, with history
Changes between crawls; self-hosted scripts; backend software
Technographic data is a record of which software a company uses, attached to the company rather than to a person. Firmographics tell you a company's size and industry; technographics tell you that it runs Klaviyo, Salesforce and a reviews app, and sometimes when it started. It is a prospecting signal because software choices imply budget, a decision-maker and a renewal date. It is only as good as the detection behind it, which is why the table above comes before the vendor list. For the definition at more length, see technographic data.
The providers
1
ShopLeads
E-commerce app-level technographics, tied to people
ShopLeads covers one slice of the market deliberately: e-commerce stores. It scans each store's own site, applies rules and an AI check to confirm it is a real DTC brand rather than a reseller or supplier, records the apps and technologies installed, and then finds the people behind the brands that pass. The technographic part is the filter; the people are the point.
Filter by installed apps and technologies by exact name, and by the gap: no email or SMS platform, no SMS, no reviews app, no subscriptions, no loyalty, no helpdesk, no upsell. Filtering on an absence is what most technographic providers cannot do.
Combine that with platform, monthly sales bands from 10k-100k up to 10M+, country, category, product keywords, social following and whether the brand also sells through retailers.
Then add the person: seniority from owner down to manager, about 30 departments, titles to include or exclude, and whether they have a checked work email, a mobile, a direct dial or a LinkedIn profile.
Search and counts are free, in the app and over the REST API and MCP server; credits are spent only on an unlock. Open signup: a 7-day trial with 500 free credits and a card.
BuiltWith is the reference point for the category. Its plans page states coverage of 491.9 million domains, 128,274 technologies and history going back 41 years, and its FAQ answers the method question directly: it indexes the internet the way a search engine does and takes no data from third parties (BuiltWith plans).
Basic $295, Pro $495 and Team $995 a month, single-site lookups free forever, and contact names, emails and titles for people publicly listed with a business on every plan. Basic is capped at 2 technologies, 2 keywords and 2 retail reports (plans).
Its e-commerce side is substantial: over 2500 e-commerce technologies and 2 billion unique e-commerce products across over 26 million e-commerce websites, with spend and revenue attributes (BuiltWith).
The crawl schedule is the trade-off. History is excellent; "as of this morning" is not what you are buying.
Wappalyzer, WhatRuns and the open-source fingerprints
Fingerprint matching, the cheapest route in
All three run the same basic idea: a library of patterns matched against HTML, scripts, headers and cookies. Wappalyzer's directory lists 8,189 web technologies across 106 categories and describes exactly that method (Wappalyzer technologies). WhatRuns does the per-site version for free with no sign-up, and enthec/webappanalyzer continues the original open-source fingerprint set under GPL-3.0 after the Wappalyzer project went private in August 2023.
Wappalyzer: free account with 50 lookups and 50 verifications a month, then Pro $250 for one user and two lead-list technology targets with no API credits, Business $450 where the API and CRM enrichment start, Enterprise from $850. Plan credits expire after 60 days (pricing).
The method's weakness is structural: it can only find what somebody has already described. A new product with no fingerprint is invisible until one is written.
NerdyData is the escape hatch when your technology is not on anybody's menu. It searches page code rather than a catalog of detections: HTML, JavaScript, CSS, HTTP headers, cookies and XHR URLs, with AND, OR and NOT operators, and it says it uses a proprietary crawler that fully renders pages so it reads third-party scripts and tag managers too (NerdyData pricing).
Basic $100, Pro $300 and Teams $600 a month, with a free account unlocking up to 100 rows per report. API access is pay-as-you-go and not included with a subscription (pricing).
Pick it when you can name the exact string your product leaves behind, and nobody has turned it into a named detection.
Infrastructure signals, and dates instead of presence
Bloomberry exists because websites cannot show you backend software. Its docs describe an API from Revealera, selling hiring and technology adoption data since 2020, covering 1,700+ B2B products across 190 categories, detected from new subdomains, DNS records, certificate transparency logs and per-product deployment signals rather than page scanning (Bloomberry docs).
The output is adoption and churn as dated events rather than a current-state flag, which is the difference between "uses this" and "bought this last month" (Bloomberry).
A free API key with 1,000 credits is offered for testing, and there is no published price list, so volume is a conversation.
If a company is staffing around a tool, the job ad says so before the website does. Both providers read public postings and company signals and sell them by the API call, which makes them the cheapest way to test a hypothesis. PredictLeads also offers full flat-file access with historic data from 2015 (PredictLeads pricing).
PredictLeads: 100 free API calls a month, then pay-as-you-go tiers from $0.04 per credit down to $0.002 at the top of the range, with a $40 minimum monthly charge and credits that do not roll over (pricing).
JobsPipe: 30+ job boards, ATS platforms and career sites normalized into one schema, 1,000 free credits with no card, and 1 credit per job charged once a month. Builder $49 for 25,000 credits, Growth $149 for 100,000, Scale $399 for 300,000, Business $650 for 500,000, and adding technologies to a job costs 1 extra credit (JobsPipe).
The blind spot is obvious once stated: plenty of software is used daily and never named in a job ad.
These two sit at the other end of the market and neither publishes a price. HG Insights sells a Contextual Intelligence Platform built on HG Fabric for data, with copilots, agents and an MCP server on top, plus HG Customer Voice powered by TrustRadius, aimed at connecting installs, spend, intent and contacts to one company identity (HG Insights).
Bombora's product is Company Surge Intent data derived from a Data Co-op of publishers, brand sites and data providers, which it says reflects research across 14B+ monthly events and 5M company domains (Bombora).
Both are built for enterprise accounts and long sales cycles. Neither is a sensible first purchase for a small team selling to small merchants, and both answer questions the crawl-based tools cannot touch.
For merchant software the depth gap is not subtle. Store Leads tracks 9,098 apps and 1,006 technologies across 13,990,637 active stores on 421 platforms, with a weekly refresh. StoreCensus reports 8,300+ Shopify apps indexed with 100+ filter attributes. A general web index lists apps in the hundreds.
Store Leads: Premium $75, Pro $250, Elite $450 and Enterprise $950 a month, with any two platforms below Elite and exports and API from Pro (Store Leads).
StoreCensus: free tier, then Starter $49, Professional $99 and Growth $149, with decision-maker contacts, WooCommerce and the API starting at Professional (pricing).
Neither covers software outside retail, which is the whole point of picking by method.
Accuracy is not a single number any vendor can honestly give you, and anyone who does is quoting a sample. The honest frame is: each method has a failure mode, and you can test for it in an afternoon. We read five live Shopify storefronts on November 9, 2026, looking for 25 common app fingerprints in the homepage HTML. Three returned six app names each, one returned four, and Gymshark returned none at all, because its homepage loads scripts from four hosts, all Shopify's or its own. Every crawler and every extension sees the same near-empty page. The full table is in BuiltWith vs Wappalyzer.
Read an empty technographic profile as "unknown", never as "not installed". The brands most worth selling to are the likeliest to have moved their app scripts behind their own domain, so a blank record correlates with size rather than with absence.
The second structural limit: a current-state record has no date on it. Three of the methods above return presence only, and two return events. If your pitch depends on timing, a renewal, a migration, a new install, you need a provider in the second group, or a provider that stores dated events alongside the technology. Bombora approaches it from the intent side, Bloomberry and PredictLeads from the deployment and hiring side, and Coresignal sells the underlying company and employee records by the credit, with its Premium API plan published at $1,500 a month for 1,000,000 credits (Coresignal pricing).
A buying checklist that takes one afternoon
Write down the exact technology you sell against, and the exact absence you sell into. Most providers can do the first; far fewer can filter on the second.
Match it to a method in the first table. A backend system rules out the crawl-based providers entirely, and a Shopify app rules out the general web indexes on depth.
Check two domains you already know by hand before any trial, so you have a baseline the vendor cannot influence.
Run the same two domains through the free tier or trial. Compare against your baseline, and check the large domain as carefully as the small one.
Ask what a record is dated to. "Detected" with no date is a snapshot of an unknown moment.
Only then compare price, in the unit you will actually consume: per domain, per credit, per API call or per month.
Turning a technology match into a decision-maker
A technographic record names a company. Outreach needs a person, a reason and an address, and that gap is where most technographic projects quietly stall. The sequence that works is short: narrow to accounts that could buy, add the gap your product fills rather than the competitor you are displacing, add the person before you export, and pay only for the contacts you will write to.
A company that sells records of which software other companies use, attached to the company rather than to a person. Providers differ mainly in how they detect that software: whole-web crawling, fingerprint matching, infrastructure signals such as DNS and certificates, job postings, or enterprise spend research.
Which technographic data provider is best?
The one whose detection method can see your product. BuiltWith for whole-web breadth and history, Wappalyzer for the cheapest front-end coverage, NerdyData for arbitrary code search, Bloomberry for backend software with dates, PredictLeads or JobsPipe for hiring signals, and an e-commerce index such as Store Leads or ShopLeads for Shopify apps.
How accurate is technographic data?
It varies by site, not by vendor average. Detection reads what a page serves, so a brand that proxies app scripts through its own CDN comes back nearly empty from every crawl-based provider. We tested five live Shopify storefronts and one well-known brand returned none of the 25 app fingerprints we looked for.
Is there free technographic data?
Yes, in small amounts. WhatRuns is a free browser extension, BuiltWith is free for single-site lookups, a free Wappalyzer account covers 50 lookups a month, PredictLeads gives 100 free API calls a month, JobsPipe gives 1,000 free credits, and the open-source webappanalyzer fingerprint set lets you run detection yourself.
How often is technographic data refreshed?
It depends on the method. Crawl-based providers refresh on a schedule, which for the e-commerce indexes is published as weekly. Fingerprint matching through a browser extension is effectively live for any page somebody loads. Infrastructure and job-posting providers return dated events rather than a refreshed snapshot.
