Magento
Magento is an open-source ecommerce platform written in PHP.
What detecting Magento tells you about a site
Magento (Adobe Commerce) is a heavyweight PHP e-commerce platform for mid-market and enterprise stores. It is easy to fingerprint: /static/version*/ and /pub/static/ asset paths, the Mage-Cache-Sessid and X-Magento-* headers, a mage/ JavaScript namespace, and a form_key hidden input in checkout forms. Spotting it tells you a serious catalogue-and-checkout operation that needed deep customisation, multi-store support and complex pricing rules — and a budget for the engineering and hosting Magento demands, far beyond a hosted Shopify store.
The detail that matters for Magento
The asset-path shape separates the generations: /skin/ and /js/ at the root indicate legacy Magento 1 (end-of-life), while /pub/static/ and /static/version<digits>/ indicate Magento 2 / Adobe Commerce — a meaningful read on whether the store is on a supported, secure platform.
Magento in a real-world stack
When you find Magento, it rarely travels alone. PHP-FPM with MySQL/MariaDB, Elasticsearch/OpenSearch for catalogue search, Redis for sessions, and Varnish in front.
About
Magento is an open-source ecommerce platform written in PHP.
Categories: Ecommerce
Quick facts
Detection methodology for Ecommerce
E-commerce platforms expose themselves through cart/checkout JavaScript, payment-form snippets and platform-specific cookies. Shopify's `window.Shopify` plus `cdn.shopify.com` URLs; WooCommerce's `wc-cart-fragments` script and `/wp-content/plugins/woocommerce/` assets; Magento's `/pub/static/version*/` paths and `X-Magento-*` headers. The app/extension layer on top (Klaviyo, ReCharge, Loox, Yoast for WooCommerce) is enumerated separately from the asset URLs each one ships.
How we detect Magento
Sourcemap Explorer carries 14 fingerprint signals for Magento, spread across 4 channels — cookie, javascript global, script src url and dom selector. The exact patterns are listed below, and you can replay each one in Chrome DevTools to confirm a match by hand.
Each signal alone is rarely conclusive — Sourcemap Explorer cross-references all of them and weights by confidence. You can reproduce any of these checks yourself in Chrome DevTools.
Cookies set by the platform. Visible in DevTools → Application → Cookies.
X-Magento-Vary
frontend
mage-cache-storage
mage-cache-storage-section-invalidation
mage-translation-file-version
mage-translation-storage
Window-level global the technology installs on page. Reproducible by typing the path into the DevTools console.
window.Mage
window.VarienForm
Script URL pattern. Typically a CDN host or chunk path that ships with the technology.
js/mage
skin/frontend/(?:default|(enterprise))
skin/frontend/
static/_requirejs
A DOM selector that only this technology's pages render. Verified at runtime by the content script.
script[data-requiremodule*='mage/'], script[data-requiremodule*='Magento_'], html[data-image-optimizing-origin]
script[type='text/x-magento-init']
Implies
When Magentois detected, Sourcemap Explorer also marks the following technologies as present (Wappalyzer's implies graph).
FAQ
How do I check if a website is using Magento?
Open the page in Chrome, click the Sourcemap Explorer toolbar icon, and read the Stack tab. Magento's specific fingerprints here are cookie, javascript global, script src url and dom selector, and the popup flags Magento whenever any combination of them is found. The same checks can be reproduced manually in DevTools — see the "How we detect" section above.
What Magento version can Sourcemap Explorer detect?
Magento ships as a hosted ecommerce rather than a bundled npm package, so version-specific detection isn't always possible. Where the platform leaks a version in response headers (`X-Powered-By`, `Server`, generator meta tags) we surface it; otherwise we report presence only.
Is Magento open source?
Yes, Magento is open source. The license details are listed on the official site (https://magento.com), and the codebase typically lives on a public source-control host.
Where can I read more about Magento?
Official site: https://magento.com. For Sourcemap Explorer's detection guide, see the deep-dive link below or the related guides in the cross-link section.
Keep reading on Sourcemap Explorer
Practical guides
Detection deep dives
Alternative tools
Detected by Sourcemap Explorer
Open the popup on any page running Magentoand you'll see the exact version pulled from the bundled package.json when sourcemaps are exposed.