Analyse a competitor · 11 min read · Updated 3 Oct 2026

Prompts to Analyse a Competitor's Tech Stack

A technology detection tool reports what a competitor's pages loaded in a browser. That is a fact about their marketing site, not about their company. Turning the list into a claim about how they sell is the part a model does well. It is also where it quietly reads presence as use. These prompts keep the source and the capture date on every line, and separate what the profile states from what you concluded.

Download our CI Prompts Library

Stop rewriting prompts every time you analyse competitors. Steal our 112 prompts, with the instructions they need to run precisely and be deterministic.

Detected on a page is not the same as used in the product

A technology detection export lists what a browser downloaded on the pages that were scanned. Every line in it is true. The scope is far narrower than most people read it as.

Three very different situations produce the same line. A tracking tag fired once, on one campaign page a contractor built two years ago. The same tag runs on every page of the marketing site. Or the library sits inside the logged-in product, handling something customers depend on. Those are three different companies, and the export writes all three the same way.

So the first job of the prompt is not to classify anything. Make the model say where it saw each entry, and what real use of it would look like. That comes before any sentence starting “this suggests they”. An unmarked list invites a story, and a model asked for a reading will supply one whether the evidence carries it or not.

What a detection profile states, and what it is silent on

A profile states that one file loaded on one page at one moment. It says nothing about how much of the product that file serves. It says nothing about how long it has been there, whether anyone inside the company still uses it, or what it cost. Every question worth asking about a competitor’s technology sits in that silent column.

What a competitor tech stack analysis actually reads

Four inputs, and the order matters. They are ranked by what it would cost the competitor to be wrong about each one. A vendor list published beside a data-processing agreement is a promise they signed. A status page has to be right or customers notice within the hour. An integrations directory is marketing, and it costs nothing to oversell. A detection profile is the only one the competitor never wrote and has never seen.

Their published vendor or sub-processor list, with its last-modified date

Where it comes from
A trust centre, security page or data-processing agreement usually carries one. Of every source for a competitor's tech stack, this is the only one they have to keep accurate under contract. That is the argument for putting it at the top of the context window rather than the bottom.
What good looks like
The full table including the purpose column and any effective dates, plus the date you captured it.
Without it
The reading runs on what a browser downloaded, and the hosting, data and AI layers never show up at all.

A technology profile for their domain, carrying the date of the scan

Where it comes from
Whatever detector you already use. BuiltWith and Wappalyzer both export one, and the export matters more than the choice between them. A profile read off a screen arrives without its date, and nobody can check an undated stack claim. That includes you, three months from now.
What good looks like
Every detected entry, the page it was detected on, and the date of the scan.
Without it
Nothing anchors the reading to this company. The output drifts into a description of what firms like them usually run.

Their integrations directory and API documentation

Where it comes from
Their own site, usually behind a marketplace or integrations menu. This is marketing material, and optimism in it costs them nothing. Treat it as evidence of intent rather than of engineering.
What good looks like
The full directory rather than the featured tiles, plus the docs index showing which integrations have a real interface behind them.
Without it
You lose the only public view of what a competitor assumes is already running inside the companies they sell to.

Their status page, with the component names it lists

Where it comes from
A public status page names the internal services a vendor splits into, because customers have to be told which part is down. It is written to keep customers informed, not to sell, so the names on it are the ones their engineers use.
What good looks like
The component list rather than the current state, plus any historical incident that names a third party.
Without it
The product reads as one object, and you cannot tell which parts were built in house and which were bought in.
Then run it
Four labelled blocks, ordered by what it would cost the competitor to be wrong about each. The vendor list first, then the status page, then the integrations directory, and the detection profile last. Put the weakest evidence last and the model already has something better to contradict it with.
Before the output leaves the building
Trace every line of the output back to the block it came from. Anything you cannot tie to a specific entry in a specific input is the model completing a familiar pattern, not reading one. Then check each conclusion against its date. An undated stack reads as a claim about now, and it is a claim about whenever the scan happened.

The order is not tidiness. Give a model the detection profile first and it builds its picture from the marketing layer. Everything else then gets fitted around that, because it is what the model met while it had no other frame. Give it the signed list first and the detection profile arrives as detail to place inside a shape that already exists.

Prompts to analyse a competitor's tech stack

Three passes, doing genuinely different work. The first turns a profile into a reading. The second reads the integrations directory, which is the one input that describes the buyer rather than the builder. The third needs two captures, and it is the only one that reports a change.

Start here, and read the discard list at the end as carefully as the groups above it.

Here is a technology profile for [COMPETITOR]'s site, their integrations page, and their status page: [PASTE]. Group what this shows into: analytics and attribution, marketing and lifecycle, sales and support, infrastructure, and payments. Then answer the question the list does not: what do these choices imply about how they sell and who they sell to? Separate what the data states from what you are inferring, and name the two or three entries that carry the most weight in your reading. Ignore anything that is present on almost every website, and say which entries you discarded for that reason.

Run this on the directory, not the detection profile. What a vendor expects to sit beside says as much about your buyer as about theirs.

Here is [COMPETITOR]'s integrations directory and the integrations section of their documentation: [PASTE]. Group the listed integrations by the job they do for the customer. For each group, say what it assumes is already running inside the buying company. Then answer two things the directory does not state: 1. Which integrations are conspicuously absent, given the buyers this product is aimed at? 2. Which of these would be expensive for a customer to unpick if they moved to another vendor? Quote their own wording for anything you classify as a deep integration rather than a surface one. Mark as ABSENT anything you looked for and did not find, rather than leaving it out.

Use this once you have two captures of the same list. It is the only version of this job that reports a direction rather than a position.

Here are two captures of [COMPETITOR]'s published vendor or sub-processor list, taken on [DATE ONE] and [DATE TWO]: [PASTE]. Produce three lists: entries present in both, entries that appear only in the later capture, and entries that have gone. For every entry give the purpose exactly as they describe it, plus any effective date written beside it. Where an effective date falls after the capture date, put that entry in a separate list and label it announced rather than in use. Do not explain why anything changed. Report the change, the date, and their wording for it.

Read the discard list at the end of the first output before you read the groups above it. Asking the model to name what it threw out as too common is the cheapest audit on this job. If a consent banner and a font service were discarded, the filter worked. If a data warehouse was discarded as ordinary, the reading in front of you is about websites in general rather than about this company.

Why AI misses most of a competitor's tech stack

We asked which third-party vendors a real product runs on. Then we opened the list that company publishes itself and compared the two.

Which vendors HubSpot's products rely on, asked on 21 September 2026 with nothing supplied and then with the company's own sub-processor page in the window.

Claude Opus 5asked which third-party vendors HubSpot's products run on, nothing supplied

2026-09-21

Amazon Web Services for hosting, after moving off their own data centres. Cloudflare in front of the web properties. Stripe processes payments in the commerce products. Internally it is largely Java, with HBase, Kafka and MySQL in the data layer and Elasticsearch for search; the front end is React.

Checked against HubSpot's published sub-processor page, last modified 16 September 2026

Three named vendors are on the list and correct: Amazon Web Services for hosting, Cloudflare for content delivery, Stripe for payments. The page names seventeen third-party companies, so fourteen never appeared. They are not fourteen at random. Six of them serve one product area. Amazon Web Services, Baseten Labs, Google and OpenAI are all listed as AI service providers, and Bright Data and Exa Labs supply web search results to the same feature. Snowflake as data warehouse, Twilio for calling and SMS, Mux for video, Ably for chat and Dropbox for e-signature are missing too. Nothing in the answer was false. The second half of it, the languages and databases, is neither confirmed nor contradicted here. A sub-processor list names companies that process personal data, not the technology a product is built in. Two kinds of claim arrived under one heading, and the missing half is the one that would have shown you where this company is spending now.

Silent omission

Claude Opus 5the sub-processor page supplied, nothing else allowed in

2026-09-21

Infrastructure: Amazon Web Services (hosting), Cloudflare (CDN), Google (regional data processing), Snowflake (data warehouse). AI providers: Amazon Web Services, Baseten Labs, Google, OpenAI. Web search for AI: Bright Data, Exa Labs. Communications: Twilio (calling and SMS), Ably (chat), Meta (WhatsApp), Mux (video). Documents: Dropbox (e-signature), ConvertAPI, Litmus, Hyperdoc (meeting transcripts). Payments: Stripe. Dated: Baseten Labs, Bright Data and Exa Labs are marked effective 16 October 2026 - announced, not yet in use. Not stated on this page: languages, databases, internal services, or anything that does not process personal data.

Checked against HubSpot's published sub-processor page, last modified 16 September 2026

Accurate to the page, and two blocks in it are worth more than the list itself. The last one is the source drawing its own boundary. A sub-processor list covers companies that handle personal data on the vendor's behalf, so it is silent on anything built in house. An analysis presenting it as a complete technology inventory has overstated its evidence. The dated block is the finding. Three vendors carry an effective date thirty days after the page's own last-modified date, because the vendor has promised customers notice before a change. A competitor publishing the vendors they are about to start using is a forward-looking signal, and it shows up only if the prompt is told to report the date column.

Which layer goes missing

Hosting, content delivery and payments came back correctly. All three have been true about that company for years, and that is the whole explanation. An answer built out of what has been written about a company leans towards the years when most of the writing happened. Six of the missed entries serve a single feature area, and those six are the ones that would have shown you where this company is spending now.

The second half of the ungrounded answer is a different problem in the same clothes. Languages, databases and front-end frameworks are not on a sub-processor page at all. That document lists companies handling personal data, not the technology a product is built in. Two kinds of claim arrived under one heading: one checkable against a published source, one not. Nothing in the output separated them.

What each answer could actually support, question by question
What you wanted to knowAnswered from memoryAnswered from their published list
Which cloud do they run on?Correct, and it has been correct for years.Correct, with the regions and the data location per market.
Are they building on third-party AI, and whose?Never came up.Four named providers, plus two suppliers of web search.
What are they about to start using?No answer.Three vendors, each with an effective date still in the future.
What is the product built in?A confident list.Out of scope, and the page says so.

The last row is the one worth keeping. A source that states its own boundary lets you stop. An answer with no stated boundary leaves you unable to tell a gap in the evidence from a gap in the company. The same boundary problem decides whether a competitor website teardown is describing a site or describing the pages you happened to save.

Dates turn a competitor's stack into a direction

A stack read once is a photograph. It tells you where a competitor stood on the morning somebody ran a scan. Every sentence it produces is written in the present tense anyway.

Two things fix that, and neither is a better prompt. The first is capturing the same list twice and diffing it, which is the third prompt above. The second is reading the column almost nobody asks for. A published vendor list carries effective dates, and some of those dates have not arrived yet. Vendors promise their customers notice before they add a processor, so the list names the companies they are about to start using. On the page we checked, three entries took effect thirty days after the page itself was last changed.

An announced vendor is not an adopted one

That is why the prompt puts them in their own list instead of folding them in. An entry that takes effect next month is a decision already taken and a thing they have not shipped yet. Those two facts point to completely different actions. Treat them as one and you get a competitor who already does something they have only agreed to start doing. That claim reaches a sales call and gets corrected by the buyer.

None of this survives a profile that arrived without a date on it. That is the real reason the input contract asks for the export rather than a screenshot. It is also why engineering job postings are worth reading beside the list. A role naming a tool that appears nowhere in the published stack is either something built in house or something arriving, and the posting usually lands months before any other public trace. Which makes a competitor's open roles the earliest readable surface for a stack change, and the only one with a date on it.

Watch a competitor's tech stack automatically

Every layer of a stack moves at its own speed, and the layer that changes most often means the least. Tags, widgets and marketing tools turn over constantly. Hosting, data warehouses and model providers barely move. A move there is a decision somebody had to argue for inside the company, which is why it is worth an alert and the tag changes are not.

So this analysis has no natural re-run date. Run it monthly and you spend the time re-reading a marketing layer. Run it annually and you hear about a new model provider a year late, with an effective date you could have had in advance. What you want is not a schedule. You want to be told when one specific document changes.

The output belongs somewhere it can be compared against itself later. A dated technology section inside a competitor profile is enough, as long as every line keeps the source it came from. The same habit makes the next feature comparison easier to defend, because a capability and the vendor underneath it tend to surface in the public record at different moments.

One limit does not move. A change in a vendor list tells you that something changed, never why. The why is what decides whether it matters to you. A data warehouse swapped to cut costs and one swapped because a new product needs it look identical from outside, and no amount of watching tells them apart.

Flares monitors competitor documentation, trust pages and changelogs. A vendor appearing or a page being re-published arrives dated, rather than being discovered at the next review. What the change means for your roadmap stays a judgement somebody on your side has to make.

Watch a competitor's vendor list change

Flares monitors competitor documentation and trust pages, so a new vendor arrives dated rather than in hindsight.

14-day free trial · 30-second setup

Reading a competitor's technology choices FAQ

How do you analyse a competitor's tech stack with AI?

Give the model the profile rather than the company name. Paste four labelled blocks: a detection export, their published vendor list, their integrations directory and their status page. Put the capture date on each one. Then ask for a grouping by layer, plus a separate list of what that grouping says about how they sell. The grouping is the part worth handing over. The conclusions need a confidence rating beside every line.

Can AI tell you what software a competitor uses?

Not from memory, and the gap always falls in the same place. Asked with nothing supplied, a model returns the vendors that have been true about a company for years. Those tend to be hosting, content delivery and payments. Anything adopted recently is missing, and recent adoption is usually what you were asking about. Given the competitor's own published vendor list, the same model reads it accurately and says what the list does not cover.

Why does a model get a competitor's tech stack wrong?

Because a stack is a set of decisions with dates on them, and a model holds no dates. What comes back is an average of everything written about the company, leaning towards the years when most of that writing happened. So the long-standing vendors are right and the recent ones are absent. A stack analysis exists to catch the recent ones, which is why this job fails from memory more completely than almost any other competitive question.

Can you find out which AI models a competitor is using?

Often, and the place to look is contractual rather than technical. A vendor sending customer data to a third-party model usually has to name that provider in its sub-processor list. That list is published alongside the data-processing agreement, because enterprise customers require the disclosure. One published list read for this page named four AI service providers and two separate suppliers of web search results. What it will not tell you is which model version runs which feature. No technology detection tool sees any of it either, because none of it runs in the browser.

Does a sub-processor list show a competitor's whole tech stack?

No, and the boundary is unusually clean. A sub-processor list names companies that process personal data on the vendor's behalf. Anything built in house, every language and database, and any tool that never touches customer data all sit outside it by definition. Read as a vendor list, it is the most reliable input on this job. Read as a whole technology stack, it is a fragment being passed off as the lot.

How do you stop a tech stack analysis treating presence as use?

Make the prompt report where each entry was detected, and what real use of it would look like. A tag that fired on one campaign page and a tag present on every screen of the product are the same line in a detection export and two different facts about the company. Asking for the evidence behind each classification turns an unmarked list into one somebody can argue with. Nothing short of that is worth sending round.

What does a competitor's integrations directory say about their buyer?

Every listed integration is a claim about what the vendor expects to be running inside the buying company already. A directory heavy with enterprise data warehouses describes a different buyer from one heavy with small-business accounting tools, and neither vendor has said a word about segment. The absences carry as much as the entries. An integration an obvious segment would need, missing from a long directory, is either a gap or a boundary, and the directory will not say which.

How often does a competitor's tech stack analysis need re-running?

The layers move at such different speeds that one schedule is the wrong shape. Analytics tags, chat widgets and marketing tools change monthly and mean very little. Hosting, data warehouse and AI providers change rarely, and a change there is a decision somebody had to defend internally. Watching the published vendor list is the cheap version of this, since it is dated and the vendor has committed to keeping it current.

What can a competitor's tech stack not tell you?

How well any of it works, and what any of it cost. A detected analytics platform says what a company measures, and nothing about what the measurements showed. So estimating their traffic stays a separate exercise with separate sources. A named data warehouse says nothing about how much sits in it. The stack is evidence of choices, and choices are evidence of what a company cares about. That leaves you two guesses away from the money question most people are really asking.

Track the tools your competitors adopt

Flares follows competitor product pages, documentation and changelogs, and reports what changed and when.

14-day free trial · 30-second setup