factsmgt.com

HTML metadata

Title: FACTS | Modern Solutions for K-12 Schools and More
Description: Move your school to a connected ecosystem with intelligent K-12 SaaS solutions. Manage school data, finances, admissions, student information, and more in one system.
Language: en-US
Generator: WP Rocket 3.21.3
Canonical: https://factsmgt.com/

Open Graph

url: https://factsmgt.com/
title: FACTS | Modern Solutions for K-12 Schools and More
locale: en_US
site name: FACTS Management
description: Move your school to a connected ecosystem with intelligent K-12 SaaS solutions. Manage school data, finances, admissions, student information, and more in one system.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager
Hotjar

Fonts

Adobe Fonts

Social widgets

Vimeo Embed
YouTube Embed

Third-party hosts loaded (22)

cdnjs.cloudflare.com×4
player.vimeo.com×3
use.typekit.net×3
www.google.com×3
js-na2.hsforms.net×2
www.googletagmanager.com×2
www.youtube.com×2
ad.ipredictive.com×1
assets.apollo.io×1
js-na2.hs-banner.com×1
js-na2.hs-scripts.com×1
js-na2.hsadspixel.net×1
js-na2.hscollectedforms.net×1
js-na2.hubspot.com×1
js.hs-analytics.net×1
js.ipredictive.com×1
js.storylane.io×1
snap.licdn.com×1
static.hotjar.com×1
tracking-api.g2.com×1
transcend-cdn.com×1
www.gstatic.com×1

Social

Registration

Registrar

Gandi SAS

Created

1997-01-30

Expires

2027-01-31 257 days left

Updated

2025-12-27

Name servers

ns-1128.awsdns-13.org
ns-2001.awsdns-58.co.uk
ns-296.awsdns-37.com
ns-765.awsdns-31.net

DNS records live

NS

ns-1128.awsdns-13.org
ns-2001.awsdns-58.co.uk
ns-296.awsdns-37.com
ns-765.awsdns-31.net

MX

0 factsmgt-com.mail.protection.outlook.com

TXT

Show 12 TXT records

mongodb-site-verification=NLORkBSbxkBbUoQgFz6MbcKDfegQK6sD
google-site-verification=4djr687CQVwa8CIU3sgF7addAabX0IsT_3ZZRD8Srpc
google-site-verification=mJZv03z_YbLAO2fylSLhcUmDAYEXBHp9hTqvfTaROmw
zoom-domain-verification = bfc8f74b-d0f1-497a-8215-724af497e91a
anthropic-domain-verification-85syfn=yvYSe8IBJiFlshJF0jtNX3zK2
5qnr5k4ectg954t85j5l1b62e7
google-site-verification=CWZCWuyhjox0iUj-fYeYhQOf4VCIJ5RT4e890zcNWrY
_ecdchhiy10wdv86j65q36wzr7q86yaw
google-site-verification=HebCFrnywsftVpMovkTcQcdvVkXfXOxftYA7vnDDMn8
google-site-verification=_3UAhIP1uNx8_mviVun-OhXne3u5S76U0xuNnSNSivw
8901db81-0726-4b6a-9399-1d0d3e155eca
_cf-custom-hostname.factsedresources.factsmgt.com

Email authentication strong

SPF

v=spf1 a mx ip4:216.69.109.5 ip4:216.69.103.84 ip4:216.69.100.229 ip4:216.69.100.233 ip4:208.117.49.186 ip4:149.72.80.229 include:amazonses.com include:spf.protection.outlook.com include:et._spf.pardot.com include:242181635.spf10.hubspotemail.net include:spf.mandrillapp.com include:mail.zendesk.com include:spfe0108.renweb.com include:spfe0916.renweb.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnGbIB61dphKBtP2DP6MjgqWvH7K7D6cemsoeg2vpoCrwqI3HRA/H5qucCmhiHl1UGQfy0VixFF+dejiUk2e…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu01ktJ5cjQnlrYxbLybNqtFp5wjTTd/J/6VR81ay9iJwRxiCsnmYVRAv0ePzx0Cdp2e+7IgK0ObpGTsoxv…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXu0f+jnYTtdEFzBrID2SJ2/Nd20rQuqLECUiANIy29SYHCVq/BJURGWxXO4xv+YvLhMfyOIa5oN1MWwblxcgQ+9…

selectors probed

Certificate (current)

WE1

from 2026-04-17 to 2026-07-16

Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://factsmgt.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'unsafe-inline' blob: https://factsmgt.com https://*.cdn.us2.com *.addevent.com https://vimeo.com https://js-na2.hubspot.com https://js-na2.hsforms.net https://js-na2.hs-scripts.com https://js-na2.hsadspixel.net https://js-na2.hsadspixel.net/fb.js https://js.hubspot.com/content-embed/v1.js https://js.hs-analytics.net https://static.hsappstatic.net https://js-na2.hs-analytics.net https://js-na2.hscollectedforms.net https://js-na2.hs-banner.com transcend-cdn.com assets.apollo.io tracking-api.g2.com js.ipredictive.com *.storylane.io nelnet.jotform.com *.gstatic.com snap.licdn.com embed.eventbookings.com *.vimeo.com 'self' *.cookielaw.org *.hotjar.com *.google-analytics.com *.google.com ajax.googleapis.com *.facebook.net googleads.g.doubleclick.net *.facebook.com addevent.com static.addtoany.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com *.pardot.com *.googletagmanager.com whova.com *.factsmgt.com factsmgt.com *.cloudfront.net *.googleadservices.com 'uns
strict-transport-security: max-age=63072000; includeSubDomains;