01 · Operator
Who operates Wappalyzer
- Company
- Wappalyzer
- Type
- Other bot
- Official docs
- github.com
02 · Behavior
What Wappalyzer does
Wappalyzer collects technology data from millions of websites. It sells technology lookups, lead lists and competitor tracking through its platform and API. Its open-source detection code was published on GitHub by AliasIO.
03 · Impact
Why Wappalyzer matters for your site
If you allow it
- Lookups are often started by people researching your site
- Low request volume per site
If you block it
- Feeds a commercial sales-intelligence database
- Exposes your technology stack to competitors and attackers
04 · Allow
How to allow Wappalyzer
robots.txt
User-agent: Wappalyzer
Allow: /Cloudflare
# Security › WAF › Custom rules › Create rule
Expression: (http.user_agent contains "Wappalyzer")
Action: Skip › All Super Bot Fight Mode rules
# Also check Security › Bots: "Block AI bots" can block it regardless of robots.txt.WordPress
# WordPress serves a virtual robots.txt. Edit it with your SEO plugin:
# Yoast: SEO › Tools › File editor · Rank Math: General Settings › Edit robots.txt
User-agent: Wappalyzer
Allow: /nginx
# nginx serves every user agent by default.
# Make sure no rule like this blocks it:
# if ($http_user_agent ~* "Wappalyzer") { return 403; }Apache
# Apache serves every user agent by default.
# Make sure .htaccess has no rule like this:
# RewriteCond %{HTTP_USER_AGENT} Wappalyzer [NC]
# RewriteRule .* - [F,L]05 · Block
How to block Wappalyzer
Start with robots.txt. If Wappalyzer keeps showing up in your logs, block it at your CDN or web server.
robots.txt
User-agent: Wappalyzer
Disallow: /Cloudflare
# Security › WAF › Custom rules › Create rule
Expression: (http.user_agent contains "Wappalyzer")
Action: BlockWordPress
# WordPress serves a virtual robots.txt. Edit it with your SEO plugin:
# Yoast: SEO › Tools › File editor · Rank Math: General Settings › Edit robots.txt
User-agent: Wappalyzer
Disallow: /nginx
# In your server { } block:
if ($http_user_agent ~* "Wappalyzer") {
return 403;
}Apache
# .htaccess
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} Wappalyzer [NC]
RewriteRule .* - [F,L]
</IfModule>06 · User agents
User agents we see for Wappalyzer
The user agent published by the operator:
Mozilla/5.0 (compatible; Wappalyzer; +https://github.com/AliasIO/Wappalyzer)07 · Verification
Is it really Wappalyzer?
Wappalyzer’s operator publishes no IP ranges or hostnames, so requests cannot be verified. Treat the user agent as a claim, and watch your logs for unusual request rates.
FAQ
Questions about Wappalyzer
What does Wappalyzer do?
It detects the technologies a website uses, such as CMS, web server, JavaScript frameworks and analytics tools.
Should I block Wappalyzer?
It is your call. Blocking the user agent stops its server-side lookups but not detection by its browser extension.
Last reviewed Oct 8, 2026