Skip to content

This translation has not been editorially reviewed yet. The German version is authoritative. Deutsche Fassung →

Which systems get detected — and by what

The check distinguishes content management systems, shop systems, forums, learning platforms, wikis, website builders, and application frameworks. Identification happens via traits in the delivered code — generator tags, characteristic paths, typical headers.

  • The category matters more for context than the name: a website builder is maintained differently from a self-hosted installation, and an application framework says something about how the site is built, not about content management.
  • Multiple detections are normal. A page can run on an application framework and also embed a content management system — the report names both.
  • If nothing gets detected, that's neither a shortcoming nor a confirmation. It means the page allows no conclusions from outside.

FAQ

What happens if our system isn't detected?

The report states that nothing was detected. That costs no points and confirms nothing either — it's a statement about visibility from outside.

Can the detection be wrong?

It relies on unambiguous traits and names the evidence location. If a trait stays ambiguous, the check doesn't attribute it — a wrongly named system would be worse than no attribution at all.

Deutsche Fassung — mit allen Prüfpunkten dieses Themas