Every company leaves a trail.
runsonwhat shows you the tools behind any company. Type a domain and in a few seconds you'll see where it's hosted, what it's built with, how it sells, and what the team uses day to day.
Every result links to the record, header or line of legal text it came from, so you can check it yourself.
Where the answers come from
DNS records
Companies prove they own their domain to vendors like Slack, Rippling or Cursor by adding a record to their DNS. Email settings name who sends and receives their mail.
Certificate logs
Every HTTPS certificate is logged publicly. That gives us a company's subdomains, and where each one points: help. to Zendesk, status. to incident.io, careers. to Ashby.
The website
Response headers, the scripts on the page, the app's own JavaScript, and the tags hidden inside Google Tag Manager.
Legal pages
Privacy laws make companies list the vendors that handle customer data. We read those subprocessor lists too.
Everything we read is public. We never log in anywhere or guess passwords, and we don't store the sites we scan. Tools that leave no public trace, like an internal spreadsheet or a laptop app nobody verified, won't show up.
Who it's for
- Sales teams checking what a prospect already runs before the first call.
- Founders curious how the companies they admire are put together.
- Engineers and security folks auditing their own footprint before someone else does.
Sponsor runsonwhat
Put your product in front of people who are researching the tools companies use. We keep sponsorships to a few at a time, so every one gets noticed.