What technology does hsbc.com.hk use?

hsbc.com.hk uses 22 technologies including Adobe Experience Manager, Facebook Pixel, Microsoft Advertising, Optimizely, and AppDynamics.

What framework does hsbc.com.hk use?

hsbc.com.hk uses Angular and Mustache as its web frameworks.

What CMS does hsbc.com.hk use?

hsbc.com.hk uses Adobe Experience Manager as its content management system.

What analytics does hsbc.com.hk use?

hsbc.com.hk uses Facebook Pixel, AppDynamics, and Google Tag Manager for analytics and tracking.

What hosting does hsbc.com.hk use?

hsbc.com.hk's infrastructure includes Amazon CloudFront, Amazon S3, and Amazon Web Services.

🦊StackFox

hsbc.com.hk

Detected Technologies

Visit Site

🤖AI Policy

📦TechTechnologies

🔧InfraInfrastructure Status

22 technologies5 categories

hsbc.com.hk is built on Adobe Experience Manager with Facebook Pixel and Microsoft Advertising. It ranks #20,433 globally.

The frontend relies on Angular. Analytics are handled by Facebook Pixel and AppDynamics. Infrastructure includes Amazon CloudFront and Amazon S3.

Tech Stack Highlights

Adobe Experience ManagerCMS

AppDynamicsAnalytics

OptimizelyA/B Testing

Microsoft AdvertisingAdvertising

Facebook PixelAnalytics

Core Platform1

Adobe Experience Manager

CMS

100%

3 evidence signals

Scripthttps://www.hsbc.com.hk/etc.clientlibs/hsbc/global/clientlibs/appd.min.9a0d6a727f8b92f3a4cce4a6985afacb.js

Scripthttps://www.hsbc.com.hk/etc.clientlibs/dpws/clientlibs-public/clientlib-all.min.961c834f445a0853afc656b59f2d2437.js

stylesheet/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.e097f5476ae994e846d32f0c87328d80.css

Frameworks & Languages3

Angular

JavaScript frameworks

75%

1 evidence signal

HTML<meta name="app-img" content="/content/dam/hsbc/hk/images/ways-to-bank/mobile-banking-app

Java

Programming languages

75%

1 evidence signal

HTMLimplied by Adobe Experience Manager

Mustachev4.2.0

JavaScript frameworks

75%

1 evidence signal

JS GlobalMustache.version → object(v4.2.0)

Analytics & Marketing9

Facebook Pixelv2.0

Analytics

100%

2 evidence signals

Scripthttps://connect.facebook.net/en_US/fbevents.js

JS Global_fbq → function(v2.0)

Microsoft Advertising

Advertising

100%

2 evidence signals

Scripthttps://bat.bing.com/bat.js

JS Globaluetq → object

Optimizely

A/B Testing

100%

3 evidence signals

CookieoptimizelyEndUserId

Scripthttps://cdn.optimizely.com/js/20356210685.js

JS Globaloptimizely → object

AppDynamics

Analytics

100%

2 evidence signals

JS GlobalADRUM.conf.agentVer → object

scriptContentadrum

Google Tag Manager

Tag managers

75%

1 evidence signal

JS GlobaldataLayer → object

Google Analytics

Analytics

75%

1 evidence signal

Scripthttps://www.googletagmanager.com/gtag/js?id=DC-8694241

Tealium

Tag managers

75%

17 evidence signals

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.js

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.sync.js

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.276.js?utv=ut4.46.202205131608

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.603.js?utv=ut4.46.202410160138

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1206.js?utv=ut4.46.202207221353

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1391.js?utv=ut4.46.202201211719

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1432.js?utv=ut4.46.202503031106

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1459.js?utv=ut4.46.202206161707

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1481.js?utv=ut4.46.202512241000

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1507.js?utv=ut4.46.202312221624

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1537.js?utv=ut4.46.202508041002

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1553.js?utv=ut4.46.202403141232

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1584.js?utv=ut4.46.202512241000

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1629.js?utv=ut4.46.202601211017

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1660.js?utv=ut4.46.202509181104

Scripthttps://tags.tiqcdn.com/utag/hsbc/hk-rbwm/prod/utag.1682.js?utv=ut4.46.202510211000

Scripthttps://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=hsbc/hk-rbwm/202601211017&cb=1770270045674

LivePerson

Live chat

75%

1 evidence signal

JS GloballpTag.Chronos → object

Lytics

Customer data platform

75%

1 evidence signal

Scripthttps://c-hsbc.lytics.io/api/tag/d8e35ee75af88515adbd0623d12108d4/latest.min.js

Infrastructure & Security5

HSTS

Security

75%

1 evidence signal

Headermax-age=31536000; includeSubdomains

Amazon CloudFront

CDN

75%

2 evidence signals

Header$CloudFront$$: 1.1 459b85c545909b647abc5dea4320a0da.cloudfront.net (CloudFront)

HeaderYj9dokhY55v48cKsEuz83IykDm1qM4qrnGRdNHYasRqtAU7A1TVaFA==

Amazon S3

CDN

75%

1 evidence signal

Header

s3[^ ]*amazonaws\.com: default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.hlx.page *.hsbc.com.hk:* *.walkme.com bat.bing.com *.recaptcha.net *.gstatic.cn *.biocatch.com s.yimg.com tpc.googlesyndication.com connect.facebook.net tags.tiqcdn.com www.google.com.hk www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com cdn-assets-prod.s3.amazonaws.com *.callsign.com *.brightcove.net *.g.doubleclick.net *.zencdn.net *.hsbc.com.cn *.sc.omtrdc.net *.google-analytics.com ssl.google-analytics.com googleads.g.doubleclick.net www.google.com *.v.liveperson.net *.googlesyndication.com c-hsbc.lytics.io; img-src data: * blob: android-webview-video-poster: android-webview: *.lpsnmedia.net *.liveperson.net; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.brightcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *.demdex.net *.hsbc.co.om *.brightcovecdn.com *.hsbc.com.hk:* *.walkme.com bat.bing.com *.biocatch.com rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk ad.doubleclick.net www.facebook.com maps.googleapis.com *.siteintercept.qualtrics.com adservice.google.com manifest.prod.boltdns.net www.google.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com www.google.com.hk connect.facebook.net lptag.liveperson.net accdn.lpsnmedia.net *.v.liveperson.net s.yimg.com cdn.appdynamics.com cdn-assets-prod.s3.amazonaws.com brightcove.hs.llnwd.net *.akamaihd.net *.callsign.com *.googletagmanager.com *.facebook.com *.brightcove.com *.boltdns.net *.hs.llnwd.net *.hsbc.com.cn t.co analytics.twitter.com *.api.brightcove.com analytics.google.com *.google-analytics.com *.google.com.hk *.g.doubleclick.net *.analytics.google.com *.doubleclick.net *.liveperson.net *.lpsnmedia.net; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net *.walkme.com *.googletagmanager.com *.recaptcha.net www.facebook.com tpc.googlesyndication.com connect.facebook.net gateway.zscalertwo.net gateway.zscloud.net sts-aad.auth.hsbc.com lpcdn.lpsnmedia.net 8694241.fls.doubleclick.net *.online-metrix.net *.hsbc.com.hk *.demdex.net *.id.opendns.com *.tiqcdn.com *.facebook.com bid.g.doubleclick.net cdntm.hsbc.com.hk; frame-ancestors 'self' *.liveperson.net www.hsbc.com.hk *.hsbc.com.hk; font-src 'self' data: *.hsbc.com.hk *.gstatic.com *.walkme.com fonts.gstatic.com cdn.jsdelivr.net at.alicdn.com *.avast.com *.alicdn.com; worker-src 'self' blob: *.walkme.com; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net *.walkme.com *.askus.hsbc.co.uk *.lpsnmedia.net *.liveperson.net c-hsbc.lytics.io; object-src 'self' blob:; child-src 'self' blob:; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.brightcovecdn.com lpcdn.lpsnmedia.net manifest.prod.boltdns.net ssl.gstatic.com players.brightcove.net *.hsbc.com.hk *.lpsnmedia.net; manifest-src 'self'; upgrade-insecure-requests ; report-uri /csp/report;