Payload: Content management system

What Payload is

Payload is a headless content management system written in TypeScript that runs inside a Node application, most often a Next.js one. Because it is a library rather than a hosted service, a Payload detection identifies the software producing the response and says nothing about who hosts it. It is frequently seen alongside Next.js on the same response.

How DNSTrace.dev detects it

Detection reads the final HTTPS response and the first bytes of its markup. One matching signal is reported as strong evidence; two or more independent signals are reported as confirmed.

x-powered-by naming Payload — Payload adds its name to the header, often combined with the framework, as in Next.js, Payload.

What a detection proves

The response was produced by an application running Payload.

What it does not prove

The version, the database behind it, or the host. Payload can be removed from the header, so absence proves nothing.

Common questions

Why does Payload appear next to Next.js?

Payload commonly runs inside a Next.js application, so both names arrive in one x-powered-by value. DNSTrace.dev reports them as separate detections because they are separate pieces of software.

Is the admin panel detectable?

Not from the home document. DNSTrace.dev reads the response for the requested hostname only and does not probe admin paths.