truecoach.co

HTML metadata

Title: #1 Personal Trainer Software - TrueCoach
Description: Save time and grow your business with the #1 online platform built for personal trainers, coaches, and gym owners. Try TrueCoach completely free for 14 days. Cancel any time.
Language: en-GB
Canonical: https://truecoach.co/

Open Graph

url: https://truecoach.co/
title: Home
locale: en_GB
site name: TrueCoach
description: Save time and grow your business with the #1 online platform built for personal trainers, coaches, and gym owners. Try TrueCoach completely free for 14 days. Cancel any time.

Technology

CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×2
cdnjs.cloudflare.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

gail.ns.cloudflare.com
jay.ns.cloudflare.com

MX

1 truecoach-co.mail.protection.outlook.com

TXT

Show 8 TXT records

facebook-domain-verification=wyrkrk4ao9dmwsj7zydkcourwj2kw2
google-site-verification=94KYia6JJd-0JIV5CBO7MWZEReQ8Y5IBFnPF-WX9Eo8
google-site-verification=QhYMgL-qSdS329_iX_rEredoAATpkHAK-4_nr0qK9R4
google-site-verification=uknttBBrrnrVkOpF6owMFAXWOS6lV4SFHZA2OTrmqwo
stripe-verification=1d289ba8b4ade546e701662ad23ac75792aa25b8a70614f0e4c1933254f951c8
stripe-verification=b7fe9605137548fb56d040150cfb15dfca52cef0036bd3d5a407ac8e5db1c9c5
MS=ms46225746
ahrefs-site-verification_246fecc96c1df475329ac73520b872e75405a359ca7b9b9eb334d35cd120dad1

Email authentication strong

SPF

v=spf1 include:sendgrid.net include:457222.spf05.hubspotemail.net include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; ruf=mailto:rob.lufcy@xplortechnologies.com;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDfbOokSHY0vCP8s9KvHl1B5FBw56p1h2ES0rLhUsTtqlJT9z18iX7KGD0Yuiqg/YeDTNqiyU/XRhY…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuag4lxOBiLHWzfMKPBMJBuR7zpmcBOyIPa6dbHf8dOSv4F992AUxbv+mMYhA0SRVvyGqJqL2DAA7J6OXQc…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC38xJgBCATIIoG9zeOF4yV0z/DWVNnDcz/IS5vvPSbg1HvEZad4R4VMyFi+sKWF6xr6ETdQefyJyDN/hX21nyu+u…

selectors probed

Certificate (current)

R13

from 2026-04-13 to 2026-07-12

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://truecoach.co/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=*, microphone=(), camera=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
content-security-policy-report-only: default-src 'self' 'unsafe-inline' data: *.marianatek.com *.cookielaw.org *.chilipiper.com *.googletagmanager.com *.google.com *.gstatic.com *.cloudflare.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.licdn.com *.facebook.net *.clarity.ms *.google-analytics.com *.hs-scripts.com *.doubleclick.net unpkg.com *.wistia.net;upgrade-insecure-requests;