How to use website technology lookup tools in 2026
A lookup answers one of two questions and the two need different tools. This walks the second one all the way through: which companies run OneTrust, how many, and what the badge on that page states.
1. Work out which of the two questions you have
One question is what this one named site runs. The other is which sites run this one named tool, and how many.
Installmap answers the second, as a share of a named list crawled as a set. It does not answer the first: no per company row is published, so a single arbitrary domain needs a per-site profiler instead.
What this step gives you: Two questions, and only one of them is a share.
2. Open the category inside the list
The category pages rank the tools inside one category against each other, and each group page does the same inside one list. The consent and privacy block on /groups/fortune500 is where this example starts.
The Fortune 500 order runs OneTrust at 44.9% (212), TrustArc at 6.1% (29), Securiti at 2.8% (13) and Osano at 2.1% (10), each divided by the 472 companies that returned a usable record.
What this step gives you: OneTrust leads at 44.9%, 212 of 472.
3. Read the badge on the tool's page
The leader of a category in a list gets a badge on its group tool page, at /groups/fortune500/onetrust. This one reads "#1 Consent · 212 Fortune 500 companies" and its alt text carries the whole claim: "OneTrust is the most detected Consent tool among the Fortune 500: 212 of 472 crawled Fortune 500 companies (44.9%)".
The image lives at /badges/fortune500/onetrust.svg and links back to the page holding the count, the denominator and the crawl date, so anyone who sees it on a vendor site can check it.
What this step gives you: A badge stating 44.9% with the base one click away.
4. Read what the detection actually saw
The method page states the rule: "The HTML, response headers and cookies of each fetched page are matched against 448 fingerprints: script hosts, generator meta tags, response headers, cookie names and asset paths on the site's own host. The fingerprints cover 26 software categories. One match records one install. A match shows that the site loads that tool's code. It does not show that the company pays for the tool." The group crawls load each homepage in a headless browser, so scripts a tag manager injects after load are counted; the wider sample uses a plain fetch.
Absence from a table does not mean zero. The Fortune 500 analytics table publishes 5 rows and ends at Google Universal Analytics on 65 companies, so a tool missing from that table was detected on fewer than 65 of the 472 homepages, so a missing row is a low count rather than zero. Of the 500 companies on the list, 28 returned no usable record at all.
What this step gives you: A match means the homepage loaded the code, nothing more.
5. For one arbitrary site, use a per-site profiler
Read from each provider's own pages on 3 September 2026: BuiltWith states individual site lookups are free forever. Wappalyzer states a free tier of 50 lookups and email verifications a month. PublicWWW searches source code and states that unregistered search covers the top 1,000,000 sites, returning the pages carrying a snippet rather than a share.
The ranked list puts eleven side by side with a table of what each shows before payment, and the comparison pages take them one at a time.
What this step gives you: One free lookup for one site, from three of the eleven.
Citing it
A lookup result on its own is not a number anyone can check. What makes it citable is the base it divides by and the date it was collected, and both sit in the Cite this card on every page here. The card on this one reads: Installmap, OneTrust among the Fortune 500, crawl of 4 September 2026, https://installmap.com/groups/fortune500/onetrust.
The counts are free to cite with a link back. If the badge is going on a vendor page, the alt text above already carries the share, the count and the list, so a reader who never clicks still sees the base.
What this cannot answer
This site cannot tell you what one named company runs. The published counts are aggregate and the per company rows are not published, so the 212 Fortune 500 companies behind that share are a count and not a list.
It also cannot see past a homepage. Software that runs behind a login, server-side tracking in the company's own backend, and email tools that only appear in sent mail leave no fingerprint on a public page, so no share is published for them and the method page names them. Two providers can also disagree about the same site on the same day, because one loaded the page in a browser and the other did not.