Django
Django is a Python-based free and open-source web application framework.
What detecting Django tells you about a site
Django is Python's batteries-included web framework, and it leaves clear server-side prints. The classic pair is a csrftoken cookie alongside a sessionid cookie; add the reachable /admin/ login (Django's auto-generated admin), a /static/ and /media/ asset convention, and occasionally a Server header naming Gunicorn or uWSGI. Detecting it tells you the application logic and templating live in Python under a strongly opinionated, monolithic structure — often a content-, data- or ML-adjacent product where Python's ecosystem was the deciding factor.
The detail that matters for Django
Whether the site renders HTML server-side or only exposes JSON is the real tell beneath Django: server-rendered templates mean a classic Django monolith, while CSRF cookies fronting a SPA usually mean Django REST Framework serving an API to a separate React/Vue front end.
Django in a real-world stack
When you find Django, it rarely travels alone. Gunicorn or uWSGI as the app server, PostgreSQL as the default database, and Nginx as the front door.
About
Django is a Python-based free and open-source web application framework.
Categories: Web frameworks
Quick facts
How we detect Django
Sourcemap Explorer carries 5 fingerprint signals for Django, spread across 4 channels — cookie, javascript global, html source and dom selector. The exact patterns are listed below, and you can replay each one in Chrome DevTools to confirm a match by hand.
Each signal alone is rarely conclusive — Sourcemap Explorer cross-references all of them and weights by confidence. You can reproduce any of these checks yourself in Chrome DevTools.
Cookies set by the platform. Visible in DevTools → Application → Cookies.
django_language
Window-level global the technology installs on page. Reproducible by typing the path into the DevTools console.
window.__admin_media_prefix__
window.django
Substring or regex match against the page HTML — typically a unique class, comment marker, or asset path.
(?:powered by <a[^>]+>Django ?([\d.]+)?<\/a>|<input[^>]*name=["']csrfmiddlewaretoken["'][^>]*>)
A DOM selector that only this technology's pages render. Verified at runtime by the content script.
input[name='csrfmiddlewaretoken']
Implies
When Djangois detected, Sourcemap Explorer also marks the following technologies as present (Wappalyzer's implies graph).
FAQ
How do I check if a website is using Django?
Open the page in Chrome, click the Sourcemap Explorer toolbar icon, and read the Stack tab. Django's specific fingerprints here are cookie, javascript global, html source and dom selector, and the popup flags Django whenever any combination of them is found. The same checks can be reproduced manually in DevTools — see the "How we detect" section above.
What Django version can Sourcemap Explorer detect?
Django ships as a hosted web frameworks rather than a bundled npm package, so version-specific detection isn't always possible. Where the platform leaks a version in response headers (`X-Powered-By`, `Server`, generator meta tags) we surface it; otherwise we report presence only.
Is Django open source?
Yes, Django is open source. The license details are listed on the official site (https://djangoproject.com), and the codebase typically lives on a public source-control host.
Where can I read more about Django?
Official site: https://djangoproject.com. For Sourcemap Explorer's detection guide, see the deep-dive link below or the related guides in the cross-link section.
Detected by Sourcemap Explorer
Open the popup on any page running Djangoand you'll see the exact version pulled from the bundled package.json when sourcemaps are exposed.