Name: Website Audit API: Tech Stack, WHOIS, SSL, PageSpeed
Brand: martindata
SKU: api-martindata-websiteauditsuite-api
Availability: InStock
Author: API Market

Martin Petrov

# Website Audit API

## Overview

The Website Audit API combines three website checks in one subscription. `/m/website-intelligence` audits a company website in one call: technologies, page title and description, social profiles, WHOIS dates from RDAP, DNS records, TLS certificate expiry, the redirect chain and sitemap size, with optional Lighthouse scores and a homepage screenshot. `/m/website-tech-stack-detector` detects CMS, frameworks, analytics, CDN, hosting and email provider for many sites at once, and `/m/lighthouse-pagespeed-audit` runs real Google Lighthouse audits with Core Web Vitals.

It is built for SEO tools, agencies, lead enrichment, sales intelligence and website monitoring products. In our tests stripe.com came back with its Amazon S3 CDN, Google Workspace mail, DNS, TLS and WHOIS details, wordpress.org was detected as WordPress with its generator version, and example.com scored 100 for performance on a mobile Lighthouse run with LCP 799 ms. A domain that does not resolve returns a row with an `error` and is not billed, and a missing `domains` list returns a clear `400`.

## Features

*   **3 endpoints**: full website audit, bulk tech stack detection and Lighthouse PageSpeed audits.
*   **One-call audit**: technologies, WHOIS, DNS, TLS, redirects, sitemap and social links together.
*   **Real Lighthouse**: performance, accessibility, best practices and SEO scores with LCP, CLS, TBT and FCP.
*   **Bulk input**: many domains or URLs per call.
*   **Free failures**: domains that do not resolve and URLs that cannot be audited are not billed.
*   **Billed per result**: one unit per result returned, shown in the `billed` field. Errors and empty results are free.

## Use Cases

*   **SEO tools and agencies**: audit client sites and track Core Web Vitals.
*   **Lead enrichment**: add tech stack, mail provider and social links to company records.
*   **Sales intelligence**: find prospects running a given CMS or analytics tool.
*   **Monitoring**: watch TLS and domain expiry dates and page speed over time.

## API Documentation

### Base URL

All requests use the following base URL.

```
https://prod.api.market/api/v1/martindata/websiteauditsuite-api
```

### Authentication

All requests are authenticated with the `x-api-market-key` header.

```
x-api-market-key: YOUR_API_KEY
```

Replace `YOUR_API_KEY` with your actual API key.

### Endpoints

#### 1. Audit a website

Returns one item per website with technologies, company info, WHOIS, DNS, TLS, redirects and sitemap details.

**Method:** `POST`

**Endpoint:** `/m/website-intelligence`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domains` | body | Company websites, as bare domains or full URLs | array of strings | Yes | - | - |
| `includeCompanyInfo` | body | Add title, meta description, generator and social profile links | boolean | No | - | - |
| `includeWhois` | body | Add registrar, creation and expiry dates and domain age from RDAP | boolean | No | - | - |
| `includeTls` | body | Add the TLS certificate issuer, validity and days left | boolean | No | - | - |
| `includeRedirects` | body | Record the redirect chain from the http:// address | boolean | No | - | - |
| `includeSitemap` | body | Read robots.txt and sitemap.xml and count the listed URLs | boolean | No | - | - |
| `includeLighthouse` | body | Run a Google Lighthouse audit per site | boolean | No | - | - |
| `lighthouseStrategy` | body | `mobile` or `desktop`, used when Lighthouse is on | string | No | - | - |
| `includeScreenshot` | body | Add a homepage screenshot link (1366x768) | boolean | No | - | - |
| `minConfidence` | body | Only report technologies detected with at least this confidence | integer | No | - | 100 |

**Example Request:**

```bash
curl -X POST 'https://prod.api.market/api/v1/martindata/websiteauditsuite-api/m/website-intelligence' \
  -H 'x-api-market-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"domains": ["stripe.com"], "includeCompanyInfo": true, "includeWhois": true, "includeTls": true, "includeRedirects": true, "includeSitemap": true, "includeLighthouse": false, "includeScreenshot": false, "minConfidence": 50}'
```

**Example Response (200 OK):**

```json
{
  "billed": 1,
  "count": 1,
  "items": [
    {
      "added": null,
      "analytics": [],
      "categories": [
        "CDN",
        "Email",
        "Miscellaneous"
      ],
      "cdn": "Amazon S3",
      "changes": null,
      "checkedAt": "2026-11-12T19:48:48Z",
      "cms": null,
      "description": "Stripe is a financial services platform that helps all types of businesses accept payments, build flexible billing models and manage money movement.",
      "dns": {
        "a": [
          "34.252.74.21",
          "52.215.231.162",
          "54.76.53.164"
        ],
        "aaaa": [],
        "caa": [
          "0 iodef \"mailto:caa-violations@stripe.com\"",
          "0 issue \"amazon.com\"",
          "0 issue \"digicert.com\""
        ],
        "dmarc": [
          "v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;"
        ],
        "mx": [
          "10 aspmx.l.google.com.",
          "20 alt1.aspmx.l.google.com.",
          "20 alt2.aspmx.l.google.com."
        ],
        "ns": [
          "ns-1087.awsdns-07.org.",
          "ns-1882.awsdns-43.co.uk.",
          "ns-423.awsdns-52.com."
        ],
        "spf": [],
        "spfSenders": []
      },
      "domain": "stripe.com",
      "ecommerce": null,
      "emailProvider": "Google Workspace",
      "error": null,
      "finalUrl": "https://stripe.com/en-fi",
      "generator": null,
      "isNew": null,
      "lighthouse": null,
      "redirect": {
        "chain": [
          {
            "status": 301,
            "url": "http://stripe.com/"
          },
          {
            "status": 307,
            "url": "https://stripe.com/"
          },
          {
            "status": 200,
            "url": "https://stripe.com/en-fi"
          }
        ],
        "finalStatus": 200,
        "finalUrl": "https://stripe.com/en-fi"
      },
      "removed": null,
      "screenshot": null,
      "sitemap": {
        "childSitemaps": 9,
        "isIndex": true,
        "source": "robots.txt",
        "url": "https://stripe.com/sitemap/sitemap.xml",
        "urlCount": 3693,
        "urlCountEstimated": true
      },
      "socialLinks": {
        "github": "https://github.com/stripe"
      },
      "statusCode": 200,
      "technologies": [
        {
          "categories": [
            "CDN"
          ],
          "confidence": 100,
          "name": "Amazon S3",
          "version": null,
          "website": "http://aws.amazon.com/s3/"
        },
        {
          "categories": [
            "PaaS"
          ],
          "confidence": 100,
          "name": "Amazon Web Services",
          "version": null,
          "website": "https://aws.amazon.com/"
        },
        {
          "categories": [
            "Programming languages"
          ],
          "confidence": 100,
          "name": "C",
          "version": null,
          "website": "http://www.open-std.org/jtc1/sc22/wg14/"
        }
      ],
      "technologyNames": [
        "Amazon S3",
        "Amazon Web Services",
        "C"
      ],
      "title": "Stripe | Financial Infrastructure to Grow Your Revenue",
      "tls": {
        "daysLeft": 178,
        "issuer": "DigiCert, Inc.",
        "notAfter": "2027-05-09T23:59:59Z",
        "notBefore": "2026-10-23T00:00:00Z",
        "san": [
          "stripe.com",
          "www.stripe.com"
        ],
        "tlsVersion": "TLSv1.3",
        "valid": true
      },
      "warnings": [],
      "whois": {
        "createdDate": "1995-09-12T04:00:00Z",
        "daysToExpiry": 302,
        "dnssec": false,
        "domainAgeDays": 11384,
        "expiryDate": "2027-09-11T04:00:00Z",
        "nameservers": [
          "ns-1087.awsdns-07.org",
          "ns-1882.awsdns-43.co.uk",
          "ns-423.awsdns-52.com"
        ],
        "registrar": "SafeNames Ltd.",
        "registrarIanaId": "447",
        "status": [
          "client delete prohibited",
          "client transfer prohibited",
          "client update prohibited"
        ],
        "updatedDate": "2025-10-01T01:39:51Z"
      }
    }
  ]
}
```

#### 2. Detect website tech stack

Returns one item per website with the detected technologies, CDN, email provider and social links.

**Method:** `POST`

**Endpoint:** `/m/website-tech-stack-detector`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domains` | body | Websites to analyse, as bare domains or full URLs, for example `stripe.com` or `https://www.hubspot.com` | array of strings | Yes | - | - |
| `includeDns` | body | Also read MX and TXT records to detect the email provider and SPF senders | boolean | No | - | - |
| `includeCompanyInfo` | body | Add the page title, meta description and the company's social profile links | boolean | No | - | - |
| `minConfidence` | body | Only report technologies detected with at least this confidence (0 to 100) | integer | No | - | 100 |

**Example Request:**

```bash
curl -X POST 'https://prod.api.market/api/v1/martindata/websiteauditsuite-api/m/website-tech-stack-detector' \
  -H 'x-api-market-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"domains": ["wordpress.org"], "includeDns": true, "includeCompanyInfo": true, "minConfidence": 50}'
```

**Example Response (200 OK):**

```json
{
  "billed": 1,
  "count": 1,
  "items": [
    {
      "added": null,
      "analytics": [],
      "categories": [
        "Blogs",
        "CMS",
        "Databases"
      ],
      "cdn": null,
      "checkedAt": "2026-11-12T19:48:56Z",
      "cms": "WordPress",
      "description": "Open source software which you can use to easily create a beautiful website, blog, or app.",
      "domain": "wordpress.org",
      "ecommerce": null,
      "emailProvider": null,
      "error": null,
      "finalUrl": "https://wordpress.org/",
      "generator": "WordPress 7.2-beta5-65438",
      "removed": null,
      "socialLinks": {
        "facebook": "https://www.facebook.com/WordPress",
        "instagram": "https://www.instagram.com/wordpress",
        "linkedin": "https://www.linkedin.com/company/wordpress",
        "tiktok": "https://www.tiktok.com/@wordpress",
        "twitter": "https://www.x.com/WordPress"
      },
      "statusCode": 200,
      "technologies": [
        {
          "categories": [
            "Programming languages"
          ],
          "confidence": 100,
          "name": "C",
          "version": null,
          "website": "http://www.open-std.org/jtc1/sc22/wg14/"
        },
        {
          "categories": [
            "Tag managers"
          ],
          "confidence": 100,
          "name": "Google Tag Manager",
          "version": null,
          "website": "http://www.google.com/tagmanager"
        },
        {
          "categories": [
            "WordPress plugins",
            "Editors"
          ],
          "confidence": 100,
          "name": "Gutenberg",
          "version": null,
          "website": "https://github.com/WordPress/gutenberg"
        }
      ],
      "technologyNames": [
        "C",
        "Google Tag Manager",
        "Gutenberg"
      ],
      "title": "Blog Tool, Publishing Platform, and CMS | WordPress.org"
    }
  ]
}
```

An invalid request returns `400`:

```json
{
  "error": "invalid input: domains is required: websites or URLs, e.g. {\"domains\": [\"stripe.com\", \"https://www.hubspot.com\"]}"
}
```

#### 3. Run a Lighthouse audit

Returns one item per URL and strategy with Lighthouse scores, Core Web Vitals and failing audits.

**Method:** `POST`

**Endpoint:** `/m/lighthouse-pagespeed-audit`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `urls` | body | Full page URLs to audit | array of strings | Yes | - | - |
| `strategy` | body | `mobile`, `desktop` or `both` (two rows per URL) | string | No | - | - |
| `categories` | body | Lighthouse categories to run. Empty runs all four. | array of strings | No | - | - |
| `maxUrls` | body | Audit at most this many URLs from the list | integer | No | - | - |
| `includeErrorRows` | body | Also return a billed row for URLs that could not be audited | boolean | No | - | - |

**Example Request:**

```bash
curl -X POST 'https://prod.api.market/api/v1/martindata/websiteauditsuite-api/m/lighthouse-pagespeed-audit' \
  -H 'x-api-market-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"urls": ["https://example.com"], "strategy": "mobile", "maxUrls": 1}'
```

**Example Response (200 OK):**

```json
{
  "billed": 1,
  "count": 1,
  "items": [
    {
      "accessibility": 96,
      "bestPractices": 100,
      "cls": 0,
      "durationSec": 6.1,
      "error": null,
      "failingAudits": [
        {
          "category": "seo",
          "id": "meta-description",
          "title": "Document does not have a meta description"
        },
        {
          "category": "seo",
          "id": "link-text",
          "title": "Links do not have descriptive text"
        },
        {
          "category": "accessibility",
          "id": "landmark-one-main",
          "title": "Document does not have a main landmark."
        }
      ],
      "fcpMs": 778,
      "fetchedAt": "2026-11-12T19:49:24.114Z",
      "finalUrl": "https://example.com/",
      "lcpMs": 799,
      "lighthouseVersion": "13.6.0",
      "opportunities": [],
      "performance": 100,
      "requests": 2,
      "seo": 80,
      "speedIndexMs": 778,
      "strategy": "mobile",
      "tbtMs": 43,
      "totalByteWeight": 1999,
      "ttiMs": 871,
      "url": "https://example.com"
    }
  ]
}
```

## Status Codes

| Code | Status | Description |
|---|---|---|
| 200 | OK | The request succeeded and the JSON result is in the response body. |
| 400 | Bad Request | The JSON body is invalid, a required field is missing or a value is not supported. The message says which. |
| 401 | Unauthorized | The `x-api-market-key` header is missing or the key is not valid. |
| 403 | Forbidden | Your key does not have an active subscription that includes this endpoint. |
| 404 | Not Found | The path does not match an endpoint of this API. Check the Base URL and path. |
| 429 | Too Many Requests | You went over 10 requests per second or used up the units of your plan. |
| 500 | Internal Server Error | The request failed on the server. Retry once, then contact us if it continues. |
| 503 | Service Unavailable | The service is temporarily unavailable. Retry after a short wait. |

## Rate Limits

Every plan allows up to 10 requests per second. The Free trial includes 100 units, Pro includes 10,000 units per month for $19, and PAYG is billed $0.002 per unit. When you go over a limit, the API returns `429 Too Many Requests`. Throttle your requests, back off before retrying, and honour the `Retry-After` header when it is present.

## FAQ

*   **How long does a Lighthouse audit take?**
    Usually 6 to 25 seconds per URL, because it loads the page in a real headless Chrome. Set a client timeout of at least 60 seconds.

*   **What is the difference between the first two endpoints?**
    `/m/website-tech-stack-detector` only detects technologies. `/m/website-intelligence` adds WHOIS, DNS, TLS, redirects, sitemap and optional Lighthouse and screenshot in the same row.

*   **Is a domain that does not exist billed?**
    No. It returns a row with an `error` and `billed` stays 0.

*   **How many units does a call use?**
    One unit per result returned. The `billed` field shows the count, and requests that fail or match nothing are free.

*   **Are identical requests cached?**
    Yes. Identical requests are cached for up to 6 hours, so repeat calls return quickly.

## Contact Us

If you have any questions or need support, reach out through the chat embedded on this page or email us at hello@magicapi.com.


Audit any website in one call: tech stack, WHOIS, DNS, TLS expiry, redirects and sitemap, plus bulk technology detection and Lighthouse Core Web Vitals.