Download websites that use Detectify

About Detectify

Most rows in a technology dataset describe something a visitor browser downloads. A Security platform is a different kind of row, because Detectify is a product an organisation points at its own estate rather than something it serves to the public. A trace of it on a domain says less about how the page was built and more about who is responsible for keeping that page safe, and about a budget line that has already been approved.

Detectify built the platform around external attack surface management, the practice of discovering everything an organisation has exposed to the internet and testing it continuously instead of once a quarter. Founded in Stockholm by people who had been finding bugs for a living, the company crowdsources test cases from working researchers, so coverage follows what is currently being exploited rather than a fixed checklist. Adoption of that model is itself informative. A company running it has usually accepted that its perimeter changes faster than an annual penetration test can track.

Detection here is inferential and we would rather say so plainly than imply more precision than we have. Ownership verification markers, scanner infrastructure and asset records can be observed on the domains that carry them, but a scanning product leaves a much lighter footprint than a chat widget or a content management system. As of September 2026 we detect Detectify on 8,442 sites, and the true number of organisations using the platform is certainly larger, because much of the work happens against assets that never advertise the relationship.

Detectify has been available since 2013 under a Proprietary licence, so every deployment corresponds to a commercial account rather than a free download someone left running. For a competitor, an integration partner or an investor looking at the security tooling market, that is the useful property of the list. A per-domain lookup confirms one customer. A full extract shows the shape of a customer base, which sectors and which national markets have adopted continuous surface monitoring, and which large estates still show no evidence of any such tooling at all.

The absence half of the file is often the half worth buying. Domains with substantial infrastructure and no detectable security tooling form a prospecting list for everyone selling in this market, and they can only be found by subtraction from a complete picture of the web rather than by checking companies one at a time.