runsonwhat

winfunc's tech stack

What does winfunc use?

winfunc (winfunc.com) uses at least 10 tools we can see from public records, including Google Workspace for email and documents, Apollo.io for sales, PostHog for analytics and web-vitals for monitoring. Last checked .

“winfunc is an AI security platform whose autonomous agents audit codebases, prove what is exploitable, and ship fixes as pull requests: SAST, SCA, IaC, secrets, container scanning, and AI penetration testing.”

Industry
Security
Size
1–10 employees
Based in
San Francisco, United States
Founded
2024
LinkedIn
Company page
Tools found
10
Categories
8
Layers
5 of 5
Last checked
Oct 2026

winfunc's stack, layer by layer

Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.

Edge & Hosting

1 tool, where the bytes are served from

CDN & Edge

Application

4 tools, what the product is built with

Data & Observability

2 tools, what they measure and store

Go-to-market

2 tools, how they find and keep customers

Company Ops

1 tool, what the team runs on day to day

winfunc tech stack FAQ

What tools does winfunc use?

We've found 10 tools at winfunc (winfunc.com). Edge & Hosting: Cloudflare. Application: React, Tailwind CSS and Next.js. Data & Observability: web-vitals and PostHog. Go-to-market: Apollo.io. Company Ops: Google Workspace. Last checked October 2, 2026.

What CRM does winfunc use?

winfunc uses Apollo.io for sales and CRM. We found Apollo.io through website code.

What email provider does winfunc use?

winfunc uses Google Workspace for email and documents. We found Google Workspace through email records and website code.

What analytics tools does winfunc use?

winfunc uses PostHog for analytics. We found PostHog through website code.

Does winfunc use Cloudflare?

Yes. We found Cloudflare at winfunc through DNS records and website code. Cloudflare is used by 304,431 companies we track.

How does runsonwhat know what winfunc uses?

We read public traces only: winfunc's DNS and email records, certificate logs, the code its website loads, and published subprocessor lists. A tool is listed only when a direct record backs it up. DNS is rechecked weekly and the website monthly.

We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.