What We Detect
A comprehensive look at all the signals Unveil analyzes during a scan.
Overview
Unveil examines web properties across six major categories. Each category contributes different types of evidence to the overall reality assessment. The combination of signals across categories provides a holistic view of how functional and production-ready a web property appears to be.
Tech Stack
We identify the technologies used to build the site, which provides insight into development sophistication and maintenance requirements.
Frontend Frameworks
- React, Vue.js, Angular, Svelte
- Next.js, Nuxt.js, Gatsby, Remix
- SvelteKit, Astro, SolidJS
CMS & Platforms
- WordPress, Shopify, Webflow
- Squarespace, Wix, Ghost
- Strapi, Contentful, Sanity
Build Tools
- Webpack, Vite, Parcel
- esbuild, Rollup, Turbopack
- TypeScript, Babel
Hosting & CDN
- Vercel, Netlify, Cloudflare
- AWS, Google Cloud, Azure
- Heroku, Railway, Render
Network Behavior
Network activity reveals how the application communicates with backend services, which is a strong indicator of functional depth.
API Requests
We monitor XHR and Fetch requests to identify API integrations, authentication endpoints, and data loading patterns.
Third-Party Services
External service calls to payment processors, auth providers, and data services indicate real product functionality.
WebSocket Connections
Real-time features like chat, notifications, or live updates suggest sophisticated application architecture.
Security Posture
Security configuration maturity often correlates with production readiness. We evaluate both transport security and application-level protections.
| Check | What We Look For |
|---|---|
| TLS Configuration | Version, cipher suites, certificate validity |
| HSTS | HTTP Strict Transport Security header |
| Content-Security-Policy | XSS and injection attack prevention |
| X-Frame-Options | Clickjacking protection |
| X-Content-Type-Options | MIME sniffing prevention |
Reality Signals
These signals specifically differentiate functional products from marketing-only landing pages.
Authentication Flows
Login forms, signup processes, password reset, OAuth integrations
Dynamic Data Loading
Content that loads from APIs rather than being static HTML
State Management
Evidence of Redux, Zustand, or similar state libraries
User Interaction Handlers
Functional forms, buttons with real actions, interactive elements
Analytics & Tracking
We identify analytics and tracking implementations. While these are neutral signals (both marketing pages and real products use them), the specific services can provide context.
- Google Analytics (UA and GA4)
- Segment, Mixpanel, Amplitude
- Hotjar, FullStory, LogRocket
- Plausible, Fathom, Simple Analytics
Web3 & Blockchain
For Web3 projects, we detect blockchain-related integrations that indicate actual on-chain functionality.
- MetaMask and wallet provider integrations
- WalletConnect implementation
- Ethers.js or Web3.js libraries
- RainbowKit, wagmi, and similar frameworks
- Smart contract interaction patterns