Detect Apache APISIX
Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.
Detection looks at response headers across 2 fingerprint rules among the site's public responses.
01
Websites using Apache APISIX
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Apache APISIX. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
03
Example public indicators for Apache APISIX
Illustrative indicators derived from public catalog metadata for Apache APISIX. A live scan may match additional proprietary rules beyond these examples.
- x-apisix-upstream-status
- server: APISIX/?
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Apache APISIX signature (2 rules) at the time of the scan.
- Does not establish
- A sitewide install of Apache APISIX, an active vendor contract, exclusive use, or that Apache APISIX is still in place today.
05
How to check a site for Apache APISIX
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Apache APISIX signals.
- 2. PluginView reads only public responses (response headers) and scores them against the Apache APISIX signature set (2 rules).
- 3. Review the confidence score and text explanation for Apache APISIX on the results page.
06
FAQ: detecting Apache APISIX
- Can PluginView detect Apache APISIX without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Apache APISIX — typically response headers. It does not bypass authentication or paywalls.
- What category is Apache APISIX?
- Apache APISIX is classified under Web servers in the PluginView directory.
- How many fingerprint rules cover Apache APISIX?
- This reference currently tracks 2 fingerprint rules across response headers. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Apache APISIX?
- Illustrative public indicators for Apache APISIX include x-apisix-upstream-status; server: APISIX/?. A live scan may match additional proprietary rules beyond these examples.
