Detect Shiny
Shiny is an R package that enables the creation of interactive web applications using only R code, facilitating reactive programming and providing a variety of prebuilt widgets for dynamic user interfaces.
Detection looks at response headers, javascript globals across 2 fingerprint rules among the site's public responses.
01
Websites using Shiny
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Shiny. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- JavaScript globals
03
Example public indicators for Shiny
Illustrative indicators derived from public catalog metadata for Shiny. A live scan may match additional proprietary rules beyond these examples.
- x-powered-by: Shiny Server
- Shiny.addCustomMessageHandler
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Shiny signature (2 rules) at the time of the scan.
- Does not establish
- A sitewide install of Shiny, an active vendor contract, exclusive use, or that Shiny is still in place today.
05
How to check a site for Shiny
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Shiny signals.
- 2. PluginView reads only public responses (response headers, javascript globals) and scores them against the Shiny signature set (2 rules).
- 3. Review the confidence score and text explanation for Shiny on the results page.
06
FAQ: detecting Shiny
- Can PluginView detect Shiny without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Shiny — typically response headers, javascript globals. It does not bypass authentication or paywalls.
- What category is Shiny?
- Shiny is classified under Web frameworks in the PluginView directory.
- How many fingerprint rules cover Shiny?
- This reference currently tracks 2 fingerprint rules across response headers, javascript globals. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Shiny?
- Illustrative public indicators for Shiny include x-powered-by: Shiny Server; Shiny.addCustomMessageHandler. A live scan may match additional proprietary rules beyond these examples.
