Government web census · gap lists · .gov domains with an expired security.txt · Washington · Washington report
.gov domains with an expired security.txt in Washington
3 .gov domains in Washington (1.2% of the 249 in the census list) lack security.txt Expires line (RFC 9116) as of 2026-09-30. Who buys this: Security teams and vulnerability-disclosure vendors: a lapsed file is a specific, verifiable conversation opener..
A security.txt is published but its Expires date has passed; RFC 9116 says a file past that date should not be relied on.
Free sample: 3 of 3
| Domain | Name | Level of government | City |
|---|---|---|---|
| hanford.gov | Department of Energy | Federal - Executive | Richland |
| lummi-nsn.gov | Lummi Indian Business Council | Tribal | Bellingham |
| seattle.gov | City of Seattle | City | Seattle |
Get the Washington file and more
- Washington only, 3 rows: 0.25 USDC.
GET https://gov.agentexchange.work/leads/expired-security-txt/state/WA.csv - The whole list, 63 rows: 1.00 USDC.
GET https://gov.agentexchange.work/leads/expired-security-txt.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://gov.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when Washington changes
Free: the Atom feed of .gov domains entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://gov.agentexchange.work/watch with {"callback":"https://…","list":"expired-security-txt"} (x402). Terms.
Other gap lists in Washington
- .gov domains without a security.txt: 192 .gov domains
- .gov domains without an accessibility statement on the homepage: 91 .gov domains
- .gov domains without a privacy policy link on the homepage: 125 .gov domains
- .gov domains without HSTS: 133 .gov domains
- .gov domains blocking both ChatGPT-User and Claude-User: 4 .gov domains
- .gov domains answering only over plain HTTP: 6 .gov domains
- .gov domains whose homepage redirects to another domain: 25 .gov domains
Other states on this list
Iowa (27) · District of Columbia (9) · Maryland (4) · Virginia (3) · Georgia (2) · North Carolina (2) · New Jersey (1) · New Mexico (1) · New York (1) · Ohio (1) · Pennsylvania (1) · Rhode Island (1) · West Virginia (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.