FAQ
What does fixasap do?
Enter a URL and fixasap analyzes which programming language, web server and framework the website is built with, along with applications such as a CMS.
How does it analyze a site?
It observes what the site publicly returns to normal requests (headers, cookies, HTML and the TLS certificate) and compares it with known technology fingerprints. It does not log in, bypass authentication or exploit vulnerabilities.
How accurate are the results?
Results are signature-based estimates. Each item is marked Confirmed (backed by a definitive signal) or Possible (based on clues, with a confidence score). Accuracy drops behind a CDN or WAF, and a warning is shown when the site returned a block page.
How many targets can I analyze?
Up to 20 at a time, and up to 200 per hour for each account.
How long are results kept?
Results can be viewed for 24 hours, and My page shows your analysis history for the last 30 days.
Do I need to log in?
Yes. Analysis is available only to logged-in users.
Can I use it through an API?
Yes. Create an API key on My page and see API Docs.
Can I analyze internal or private addresses?
No. Internal and private network addresses are blocked.
Which targets am I allowed to analyze?
Only targets you own, are explicitly authorized to check, or are checking as public information for a lawful purpose. See the legal notice.