Detect Statamic

CMS

Statamic is an open-source and self-hosted content management system based on the PHP programming language.

Detection looks at response headers, javascript globals, inline scripts across 3 fingerprint rules among the site's public responses.

01

Websites using Statamic

Loading website list…

02

Signal classes

PluginView evaluates public page signals in these classes when identifying Statamic. Individual fingerprint rule bodies are proprietary and are not published.

  • Response headers
  • JavaScript globals
  • Inline scripts
03

Example public indicators for Statamic

Illustrative indicators derived from public catalog metadata for Statamic. A live scan may match additional proprietary rules beyond these examples.

  • x-powered-by: Statamic
  • Statamic
  • statamic.cp
04

What a detection means

Establishes
One or more public signals on the scanned page matched a known Statamic signature (3 rules) at the time of the scan.
Does not establish
A sitewide install of Statamic, an active vendor contract, exclusive use, or that Statamic is still in place today.
05

How to check a site for Statamic

  1. 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Statamic signals.
  2. 2. PluginView reads only public responses (response headers, javascript globals, inline scripts) and scores them against the Statamic signature set (3 rules).
  3. 3. Review the confidence score and text explanation for Statamic on the results page.
06

Commonly implies

A confirmed Statamic match also implies these technologies are present.

07

FAQ: detecting Statamic

Can PluginView detect Statamic without logging in?
Yes. PluginView only reads publicly accessible responses when checking for Statamic — typically response headers, javascript globals, inline scripts. It does not bypass authentication or paywalls.
What category is Statamic?
Statamic is classified under CMS in the PluginView directory.
How many fingerprint rules cover Statamic?
This reference currently tracks 3 fingerprint rules across response headers, javascript globals, inline scripts. Individual rule bodies are proprietary and are not published.
What public signals suggest a site uses Statamic?
Illustrative public indicators for Statamic include x-powered-by: Statamic; Statamic; statamic.cp. A live scan may match additional proprietary rules beyond these examples.