.gov domain lookup · census · Federal - Executive · DC, DC · fetched 2026-09-30 · JSON · feed · badge
sftool.gov
General Services Administration · Clearinghouse | GSA
| Level of government | Federal - Executive |
|---|---|
| Website reachable over HTTPS | yes (HTTP 200) (serves from www.gsa.gov) |
| HSTS header | yes |
| Official .gov banner on the homepage | present |
| security.txt (RFC 9116) | incomplete published at /.well-known/security.txt; Expires date has passed |
| Privacy policy linked from the homepage | not linked |
| Accessibility statement linked from the homepage | linked |
| FOIA / public records link | linked |
| robots.txt | served; GPTBot partly blocked, ClaudeBot partly blocked, ChatGPT-User partly blocked, Claude-User partly blocked, Perplexity-User partly blocked, Googlebot partly blocked, all other bots partly blocked |
| llms.txt | not published |
| A2A agent card | not published |
On 3 gap lists
This domain appears in 3 gap lists of this census: sftool.gov is one of the .gov domains missing a control in the 2026-09-30 census. Each list comes with a free first 50 rows, a change feed, and the full list as a file for 1.00 USDC (x402 on Base, no account); the people who buy these lists sell the fix.
- .gov domains with an expired security.txt: 63 .gov domains · free top 50 · feed · full list CSV, 1.00 USDC · JSON · one state 0.25 USDC
Buyers: Security teams and vulnerability-disclosure vendors: a lapsed file is a specific, verifiable conversation opener. - .gov domains without a privacy policy link on the homepage: 8,559 .gov domains · free top 50 · feed · full list CSV, 1.00 USDC · JSON · one state 0.25 USDC
Buyers: Privacy-compliance vendors and agencies that write notices for public bodies. - .gov domains whose homepage redirects to another domain: 1,492 .gov domains · free top 50 · feed · full list CSV, 1.00 USDC · JSON · one state 0.25 USDC
Buyers: Web agencies and domain-consolidation vendors, security teams checking .gov names that point elsewhere.
Not re-checked since the census yet: this host re-checks a rotating slice of .gov domains every 6 hours, each domain at most once per 14 days, and records differences here. Watch this domain (feed).
What to fix
- security.txt has passed its Expires date; refresh it. Guide
- No privacy policy link found on the homepage. Legal notices checklist
- No llms.txt: a short Markdown index of what the site offers to AI assistants. Guide
- No A2A agent card at /.well-known/agent-card.json. Guide
Full agent-readiness grade (live)
Badge
Show your record: paste this on your site. It links to this page, follows the record (the badge is re-rendered from the census and live re-checks, cached one day) and carries no tracking.
<a href="https://gov.agentexchange.work/gov/sftool.gov"><img src="https://gov.agentexchange.work/gov/sftool.gov.svg" alt="Government web census record for sftool.gov"></a>
Run this site?
$49 full report or $99 monthly monitoring · Hosted accessibility feedback and privacy request desk
One fetch on 2026-09-30; homepage links detected from anchors and visible text, so a page that exists but is not linked from the homepage is not counted. Record as JSON: sftool.gov.json (CC BY 4.0) · Atom feed of changes: sftool.gov.xml. Not legal advice.