15 technologies4 categories
nist.gov is built on Drupal with Cloudflare and Google Analytics. It ranks #204 globally among the most-visited websites.
The frontend relies on USWDS. Analytics are handled by Google Analytics and Cloudflare Browser Insights. Infrastructure includes Cloudflare and Amazon S3.
Tech Stack Highlights
Core Platform1
Drupalv10
CMS
100%
5 evidence signals
Header
19 Nov 1978: Sun, 19 Nov 1978 05:00:00 GMTHeader
HITHeader
^Drupal(?:\s([\d.]+))?\;version:\1: Drupal 10 (https://www.drupal.org)JS Global
Drupal → objectMeta Tag
<meta name="^Drupal(?:\s([\d.]+))?\;version:\1" content="Drupal 10 (https://www.drupal.org)">Frameworks & Languages2
PHP
Programming languages
75%
1 evidence signal
HTML
implied by DrupalUSWDS
UI frameworks
75%
1 evidence signal
JS Global
uswdsPresent → booleanAnalytics & Marketing5
Google Analytics
Analytics
100%
4 evidence signals
Cookie
_gaScript
https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L&cx=c>m=4e6250Script
https://www.googletagmanager.com/gtag/js?id=G-HEQ0YF2VYLJS Global
gtag → functionM
Microsoft 365
Email
100%
1 evidence signal
dns
MX: nist-gov.mail.protection.outlook.comCloudflare Browser Insights
Analytics
75%
1 evidence signal
Script
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015Google Tag Manager
Tag managers
75%
2 evidence signals
JS Global
google_tag_manager → objectJS Global
dataLayer → objectNew Relic
RUM
75%
2 evidence signals
JS Global
NREUM → objectJS Global
newrelic → objectInfrastructure & Security7
Cloudflare
CDN
100%
3 evidence signals
Header
9cb689acfd822ef6-LAXHeader
cloudflare: cloudflareCookie
__cf_bmHSTS
Security
75%
1 evidence signal
Header
max-age=31536000
Amazon S3
CDN
75%
1 evidence signal
Header
s3[^ ]*amazonaws\.com: default-src 'self'; script-src 'self' *.nist.gov js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com platform.twitter.com https://player.vimeo.com static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.nist.gov fonts.googleapis.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.nist.gov *.google-analytics.com *.googletagmanager.com cdnsecakmi.kaltura.com nist-el-nfrlhrr.s3.amazonaws.com https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen@2x.png https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen.png api.mapbox.com syndication.twitter.com https://h5p.org https://i.vimeocdn.com; media-src 'self' nist-el-nfrlhrr.s3.amazonaws.com; frame-src 'self' tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com https://platform.twitter.com/ https://player.vimeo.com *.bluejeans.com https://vimeo.com/ https://time.gov/ login.nist.gov https://customer-ltx6ylk10sje63q6.cloudflarestream.com https://challenges.cloudflare.com; frame-ancestors 'self'; child-src 'self' blob: tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com *.time.gov login.nist.gov; font-src 'self' *.nist.gov fonts.googleapis.com fonts.gstatic.com *.typekit.net data:; connect-src 'self' bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com; upgrade-insecure-requestsVarnish
Caching
75%
1 evidence signal
Header
varnish(?: \(Varnish/([\d.]+)\))?\;version:\1: varnishCloudflare Bot Management
Security
75%
1 evidence signal
Cookie
__cf_bmAcquia Cloud Platform
PaaS
75%
1 evidence signal
Header
^(next)?.*$\;version:\1?Next:: prodAmazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Acquia Cloud Platform