Website audits by CMS

How SiteRune fingerprints WordPress, what the WordPress bootcamp playbook contains, and why page builders show up as CMS health — not as a moral failing.

SiteRune's Shopify fingerprint, Hydrogen vs Online Store, and why Cloudflare in front is in the playbook.

SiteRune fingerprints Next from /_next and runtime markers. The playbook treats it as a server. We skip the bootcamp speech on sites that are already elite.

SiteRune fingerprints Webflow from data-wf-page and the runtime. CSP, HSTS, and frame-ancestors usually need Cloudflare in front. The playbook says that without a CDN essay.

SiteRune fingerprints WooCommerce assets on WordPress. We skip cart and checkout. The brief is headers, cache, and JSON-LD Product — not a SKU indexer.

SiteRune fingerprints Wix from static.wixstatic.com and x-wix headers. CSP and HSTS almost always need Cloudflare in front. The HTML still has to contain words.

Squarespace fingerprints from sqs-block and their CDN. SiteRune will not invent a header UI Squarespace does not have. Cloudflare in front is the usual path.

SiteRune fingerprints Drupal from generator tags, Drupal.settings, and /sites/default/files. The brief is reverse-proxy cache and modules — not a Drupal.org essay.

Joomla fingerprints from generator and /media/jui/. SiteRune treats it as a PHP CMS: cache at the edge, headers at the vhost, stop shipping every extension on the homepage.

Ghost fingerprints from generator and /ghost/api/. SiteRune scores the public HTML. Members-only posts we cannot fetch do not count as AEO coverage.

SiteRune fingerprints Magento from static/version and mage cookies. TTFB is usually uncached PHP plus extensions. We do not index the catalog.

SiteRune fingerprints cdn11.bigcommerce.com. Like Shopify, arbitrary security headers usually need a CDN in front. We skip cart.

PrestaShop fingerprints from generator and asset paths. SiteRune wants edge cache, fewer modules on the homepage, and headers at the vhost.

HubSpot fingerprints from hs-scripts.com and hs-banner. SiteRune scores the public page. Chat widgets and three HubSpot JS files are the usual third-party finding.

SiteRune fingerprints Framer from framerusercontent and __framer. We fetch HTML, not the editor canvas. Headers are hosted-CMS limited.

SiteRune fingerprints __NUXT__ and /_nuxt/. The playbook is nuxt.config routeRules / nitro.routeRules, not a Next.js snippet.

SiteRune fingerprints ___gatsby. SSG should be the easy mode for TTFB. It often is not, because the host sends no-store or the page hydrates a SPA anyway.

Astro fingerprints from astro-island and the generator. SiteRune expects server-rendered HTML. Islands that hide the hero from the first response still fail.

SiteRune fingerprints __remixContext. Remix can send headers from the document request. The brief treats it as a server.

SiteRune fingerprints __sveltekit. Playbook: prerender public pages, set headers in hooks.server.js, do not turn the marketing site into a logged-in app.

Docusaurus fingerprints from generator and runtime strings. SiteRune wants indexable docs HTML, a sitemap, llms.txt that lists the real pages, and headers at the host.

ctfassets.net is a fingerprint, not a CMS you configure in our UI. SiteRune still scores the Next/Nuxt/Astro (or unknown) origin that embeds Contentful.

SiteRune fingerprints Sanity's CDN. The ship files and header findings belong to the site that queries it — usually a JS framework or a custom origin.

A Strapi mention in HTML is a weak fingerprint. SiteRune scores the public frontend. Headers and llms.txt live there, not on /admin.

SiteRune fingerprints laravel_session, XSRF-TOKEN, and Livewire. Marketing pages should not inherit the app's no-store session layout.

SiteRune fingerprints Django cookies. The playbook is WhiteNoise or nginx for static, cache for anonymous HTML, headers at the proxy.

SiteRune fingerprints Rails sessions and Passenger. Public pages should be cacheable. Headers belong in nginx or config/nginx, not a layout helper only.

SiteRune fingerprints TYPO3 from generator and HTML. Treat it as a serious PHP CMS: cache, fewer extensions on the home, nginx headers.

SiteRune fingerprints Craft from craftcms and CRAFT_CSRF. The brief is cache and templates — not a plugin mall.

SiteRune fingerprints Duda from dudamobile and dmRoot. Arbitrary headers need a proxy. HTML still has to contain the copy.

Weebly fingerprints from their runtime strings. SiteRune will not pretend there is an .htaccess. Proxy for headers; publish real text.

SiteRune fingerprints blogspot.com / blogger.com. Custom domains still miss HSTS unless a proxy sends it. AEO is possible if posts are public HTML.

SiteRune fingerprints Hydrogen / Oxygen. We will not tell you to install a Online Store theme app. Headers and cache follow the host — often Oxygen, not always Vercel.