CMS detection

The system that built the pages, recognised from the markup and the headers. Likely means it was matched on a path rather than on something the site declares outright.

• Help center

A content management system or site builder — WordPress, Joomla, Drupal, Shopify, Wix, Tilda, Bitrix and dozens of others — is what produces the site's HTML. Knowing which one a site runs tells you where its pages come from, which plugins and updates to watch, and which known weaknesses apply.

How SiteScan recognises it

Only the entry page is read; no extra requests are made.

• Green — the site declares the platform itself: a <meta name="generator"> tag or a header only that system sends (for example X-Pingback pointing at xmlrpc.php on WordPress). The version is shown when the declaration includes one.
• Amber, "likely" — the platform was matched on a fingerprint in the markup, such as /wp-content/ paths. That is strong evidence but not a statement, so the report says "likely". Amber here is not a fault.
• Grey, "not recognised" — a hand-built site, a framework, or a platform that leaves no trace.

Good practice

A generator tag with an exact version, such as WordPress 6.5.2, tells an attacker how far behind you are. Remove it — most platforms have a setting or a one-line filter for it — and, more importantly, keep the core, themes and plugins updated. The rest of the stack is listed under detected technologies.