WPScan's tech stack
What does WPScan use?
WPScan (wpscan.com) uses at least 16 tools we can see from public records, including Amazon Web Services for hosting, Google Workspace for email and documents, Zendesk for customer support and Google Analytics for analytics. Last checked .
- Tools found
- 16
- Categories
- 13
- Layers
- 5 of 5
- Changes seen
- 1
WPScan's stack, layer by layer
Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.
Edge & Hosting
2 tools, where the bytes are served from
Hosting & Cloud
CDN & Edge
Application
2 tools, what the product is built with
Frontend
Payments & Billing
Data & Observability
3 tools, what they measure and store
Monitoring
Go-to-market
5 tools, how they find and keep customers
Website & CMS
Marketing
Ads & Pixels
Support & Docs
Company Ops
4 tools, what the team runs on day to day
What changed at WPScan
Recent starts and stops
- Stoppeddmarcian
WPScan tech stack FAQ
What tools does WPScan use?
As of October 2026, runsonwhat has found 16 tools at WPScan (wpscan.com) in public records. Edge & Hosting: Cloudflare and Amazon Web Services. Application: React and Stripe. Data & Observability: Google Analytics, Google Tag Manager and UptimeRobot. Go-to-market: WordPress, Google Ads and LinkedIn Insight Tag. Company Ops: Google Workspace, SendGrid and Amazon SES. Last checked October 20, 2026.
What cloud does WPScan run on?
WPScan uses Amazon Web Services for hosting and cloud infrastructure, according to runsonwhat (October 2026). runsonwhat found Amazon Web Services through Amazon Web Services code on wpscan.com. Amazon Web Services is used by 146,030 companies runsonwhat tracks.
What email provider does WPScan use?
WPScan uses Google Workspace for email and office software, according to runsonwhat (October 2026). runsonwhat found Google Workspace through email records that authorize Google Workspace. Google Workspace is used by 406,299 companies runsonwhat tracks.
What does WPScan use for customer support?
WPScan uses Zendesk for customer support and documentation, according to runsonwhat (October 2026). runsonwhat found Zendesk through email records that authorize Zendesk and code on wpscan.com. Zendesk is used by 42,314 companies runsonwhat tracks.
What payment provider does WPScan use?
WPScan uses Stripe for payments and billing, according to runsonwhat (October 2026). runsonwhat found Stripe through a DNS verification record for Stripe and code on wpscan.com. Stripe is used by 29,400 companies runsonwhat tracks.
What analytics tools does WPScan use?
WPScan uses Google Analytics for analytics, alongside Google Tag Manager, according to runsonwhat (October 2026). runsonwhat found Google Analytics through Google Analytics code on wpscan.com. Google Analytics is used by 890,024 companies runsonwhat tracks.
Does WPScan use Cloudflare?
Yes. runsonwhat found Cloudflare at WPScan through DNS records that point at Cloudflare and code on wpscan.com. Cloudflare is a CDN & Edge tool used by 709,101 companies runsonwhat tracks.
Has WPScan changed tools recently?
Yes. On runsonwhat's rechecks, WPScan stopped using dmarcian (latest on October 20, 2026). A change counts only between two checks of wpscan.com done the same way.
Which companies have a tech stack similar to WPScan's?
The companies with the stacks most like WPScan's are Relay Technologies, Elocal, Scientific Certification Services, Inc. (United States) and TiVo for Business, according to runsonwhat (October 2026). Each shares 8 to 10 tools with WPScan, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.
How does runsonwhat know what WPScan uses?
runsonwhat reads public records only. Of the 16 tools at WPScan, 7 were found through code on wpscan.com, 5 through email records, 3 through DNS records and 1 through subdomains that point at the vendor. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and wpscan.com about monthly.
We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.