We asked seven BuiltWith alternatives one question, the way a buyer would before an outbound campaign: how many companies use HubSpot? We used only what each site shows a logged-out visitor, on 5 September 2026, and then asked the same thing about Klaviyo and PostHog. The answers for HubSpot ran from 117,653 to 1,001,024. BuiltWith itself did not answer at all; its trends pages served an image verification challenge on three different routes, while its pricing page loaded first time.
Key findings
- Four free sources answered the HubSpot question. The answers were 117,653 (PublicWWW), 229,488 (TheirStack), 540,000 (Wappalyzer) and 1,001,024 (Enlyft), a spread of 8.5x.
- For PostHog the same sources were 101x apart: TheirStack says 3,054 companies, Wappalyzer says 310,000 websites.
- Only two of the seven print the population the number is over, and only two print a date. Installmap does both on every page; PublicWWW does both, on separate pages.
- The number moves more with the list than with the vendor. On one crawl on one day, HubSpot is on 25.6% of the Inc 5000 and 2.5% of the Fortune 500.
- TheirStack's own regional breakdown for HubSpot adds up to 77,616, a third of its 229,488 headline.
The free HubSpot count runs from 117,653 to 1,001,024
Each row is what the source printed. The unit column matters more than the number: three sources count sites or pages, two count companies, one counts a share of a named list.
| Source | Number | Counts | Out of | Dated |
|---|---|---|---|---|
| Enlyft | 1,001,024 | companies | not stated | no |
| Wappalyzer | 540,000 | live websites | not stated | no |
| TheirStack | 229,488 | companies | not stated | no |
| PublicWWW | 117,653 | pages with the HubSpot script | 524,927,560 pages indexed | 3 September 2026, on the homepage |
| Installmap, Inc 5000 | 1,252 (25.6%) | company homepages | 4,885 crawled of 4,969 | 4 September 2026 |
| Installmap, Y Combinator | 603 (11.2%) | company homepages | 5,386 crawled of 6,133 | 4 September 2026 |
| Installmap, Fortune 500 | 12 (2.5%) | company homepages | 472 crawled of 500 | 4 September 2026 |
| BuiltWith | none | trends page returned a verification challenge on a datacenter proxy, a rendered request and a residential IP | ||
| SimilarTech | none | connection failed on four routes | ||
| NerdyData | none | no count shown without an account | ||
We expected the company counts to sit inside the site counts, since one company can run several sites. Enlyft's 1,001,024 companies is nearly double Wappalyzer's 540,000 websites, so at least one of the two is counting something other than what its label says.
For PostHog the same two sources are 101x apart
HubSpot is old and everywhere, which flatters every counting method. PostHog is four years into most of these indexes, and the spread opens up.
| Source | Klaviyo | PostHog | Counts |
|---|---|---|---|
| Enlyft | 421,204 | 116,839 | companies |
| Wappalyzer | 200,000 | 310,000 | live websites |
| PublicWWW | 186,437 | 75,837 | pages with the script |
| TheirStack | 30,827 | 3,054 | companies |
| Installmap, Inc 5000 | 326 (6.7%) | 86 (1.8%) | of 4,885 homepages |
| Installmap, Y Combinator | 45 (0.8%) | 687 (12.8%) | of 5,386 homepages |
Wappalyzer has PostHog on more websites than Klaviyo. Every other source has it the other way round, by 2x to 10x. We do not know which is right, and nothing on the pages lets a reader work it out.
Two of seven print what the number is out of, and two print a date
A count is only useful for sizing a campaign if you know the pool it came from. Wappalyzer says it "tracks 540,000 live websites using HubSpot" and TheirStack says "we have data on 229,488 companies and users that use HubSpot". Neither page says how many websites or companies it checked, so neither number can be turned into a share of anything.
Enlyft prints a share, "about 2.1%" of a category it calls Enterprise Marketing Management, next to its 1,001,024 companies. Divide one by the other and the category would hold roughly 48 million companies. The category size is not on the page, and PostHog is scored in a different category, so the shares cannot be compared with each other.
TheirStack's HubSpot page lists customers by continent under the headline: 42,146, 24,258, 7,227, 1,948, 1,573 and 464. Those add up to 77,616. The headline says 229,488. The page does not say where the other two thirds are.
Installmap prints the denominator and the date on the same page as the share: "4,885 of 4,969 Inc 5000 domains returned a usable record and form the denominator", crawled 4 September 2026, with the split between rendered crawl, plain fetch and no record. PublicWWW prints its index size and date on the homepage, 524,927,560 pages on 3 September 2026, though the result page itself only says "117653 web pages in 0.01 s".
The number changes more by list than by vendor
The biggest swing in the whole test was not between vendors. It was inside one source on one day. Installmap crawls named lists of companies and prints the share of each list, so the same tool can be read against several populations at once.
| List (crawled homepages) | HubSpot | Klaviyo | PostHog |
|---|---|---|---|
| Inc 5000 2026 (4,885) | 25.6% | 6.7% | 1.8% |
| Unicorns (1,000) | 17.2% | 1.9% | n/a |
| Y Combinator (5,386) | 11.2% | 0.8% | 12.8% |
| SaaS companies (8,173) | 7.0% | n/a | 0.7% |
| Fortune 500 (472) | 2.5% | n/a | n/a |
HubSpot goes from one in four Inc 5000 companies to one in forty in the Fortune 500. PostHog is on 12.8% of YC company sites and 1.8% of the Inc 5000. An ICP that says "companies using HubSpot" describes a pool that is ten times bigger or smaller depending on which of those lists your buyers resemble, and none of the global counts above will tell you which. Cells marked n/a fall under Installmap's publishing floor.
What we do with this on a client build
We pick the population before we pick the vendor. If the client sells to funded software companies, the YC and unicorn shares are the sizing numbers, and a global "540,000 websites" is noise. If the client sells to mid-market services firms, the Inc 5000 cut by industry and state is closer. Installmap gives those shares free, with the base printed, so the sizing step costs nothing.
Then we buy or build the list from whichever vendor exports the shape we need. That is a different decision, and it is mostly about price, export limits and whether contacts come attached.
| Source | Price | Free tier | List export | Contacts |
|---|---|---|---|---|
| BuiltWith | $295, $495, $995 a month; $2,950, $4,950, $9,950 a year | single site lookups | Excel and CSV | names, emails, titles |
| Wappalyzer | $250, $450, $850+ a month; 17% off annually | 50 lookups a month | lead lists, API credits | emails and phones, email verification |
| TheirStack | 1,000 credits $109 to 200,000 credits $999, one time; API from $49 a month | free account | CSV and Excel | not on the pricing page |
| NerdyData | $200, $300, $1,000 a month | 500 rows per report with an account | 5,000 to 1,000,000 rows per download | contact details on domain lookups |
| PublicWWW | $109, $199, $499 a month; $49 a day | top 3M sites, 1,000 rows | CSV, 100k to 1M rows | no |
| Enlyft | no pricing page; demo request | none stated | behind the demo | contact discovery listed |
| Installmap | free, no account | whole site | no | no |
The failure we see most often is a team buying an export of every company running a tool and finding out mid-campaign that the pool was a tenth of what the vendor count implied, because their buyers live in one list and the count was over the whole web. The sizing step above would have told them before they paid.
Our stack-based lists start from companies using Stripe, companies using Snowflake and SaaS companies, and get filtered to a client's ICP before anything is sent. The wider set is on the email lists page.
How we ran it
All fetches on 5 September 2026 through a rotating proxy, with a rendered browser request where a plain fetch returned a challenge or a JavaScript shell. No accounts, no logins, nothing bought. BuiltWith's three trends pages returned the same verification page on a datacenter proxy, a rendered request and a residential IP, and we did not try to solve it. SimilarTech failed at the connection on four routes. NerdyData shows no count to a logged-out visitor. Installmap has no page for some list and tool pairs; those show as n/a above. Where a vendor did not print something, the cell says so rather than guessing.