Government web census · gap lists · .gov domains without HSTS · Washington · Washington report
.gov domains without HSTS in Washington
133 .gov domains in Washington (53.4% of the 249 in the census list) lack HTTP Strict Transport Security header as of 2026-09-30. Who buys this: Security teams, MSPs and hosting or CDN vendors serving government sites..
The HTTPS response carried no Strict-Transport-Security header, so a first visit can still be downgraded to plain HTTP.
Free sample: 10 of 133
| Domain | Name | Level of government | City |
|---|---|---|---|
| filelocal-wa.gov | FileLocal | State or territory | Seattle |
| padillabay.gov | Padilla Bay National Estuarine Research Reserve | State or territory | MOUNT VERNON |
| waworkzonespeedcameras.gov | WA State Dept of Transportation | State or territory | Olympia |
| lummihealth.gov | Lummi Indian Business Council | Tribal | Bellingham |
| puyalluptribe-nsn.gov | Puyallup Tribe of Indians | Tribal | Tacoma |
| shoalwaterbay-nsn.gov | Shoalwater Bay indian Tribe | Tribal | Tokeland |
| tulalipair-nsn.gov | The Tulalip Tribes of Washington | Tribal | Tulalip |
| tulaliptribalcourt-nsn.gov | Tulalip Tribes of Washington | Tribal | Tulalip |
| asotincountywa.gov | Asotin County | County | Asotin |
| clallamcountywa.gov | Clallam County | County | Port Angeles |
Get the Washington file and more
- Washington only, 133 rows: 0.25 USDC.
GET https://gov.agentexchange.work/leads/no-hsts/state/WA.csv - The whole list, 8,322 rows: 1.00 USDC.
GET https://gov.agentexchange.work/leads/no-hsts.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://gov.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when Washington changes
Free: the Atom feed of .gov domains entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://gov.agentexchange.work/watch with {"callback":"https://…","list":"no-hsts"} (x402). Terms.
Other gap lists in Washington
- .gov domains without a security.txt: 192 .gov domains
- .gov domains with an expired security.txt: 3 .gov domains
- .gov domains without an accessibility statement on the homepage: 91 .gov domains
- .gov domains without a privacy policy link on the homepage: 125 .gov domains
- .gov domains blocking both ChatGPT-User and Claude-User: 4 .gov domains
- .gov domains answering only over plain HTTP: 6 .gov domains
- .gov domains whose homepage redirects to another domain: 25 .gov domains
Other states on this list
New York (842) · Wisconsin (490) · California (425) · Michigan (399) · Texas (342) · Ohio (336) · Minnesota (329) · Florida (262) · Massachusetts (234) · Illinois (229) · Utah (211) · Pennsylvania (196) · North Carolina (192) · Georgia (191) · New Jersey (187) · Tennessee (174) · Missouri (152) · Virginia (138) · Arizona (136) · Arkansas (135) · Oregon (123) · Alabama (122) · Colorado (122) · Kentucky (122) · New Hampshire (119) · Kansas (110) · Connecticut (107) · Oklahoma (101) · Iowa (90) · District of Columbia (84) · Maryland (82) · West Virginia (76) · Maine (69) · South Carolina (69) · Nebraska (68) · Montana (66) · Indiana (61) · New Mexico (61) · Louisiana (54) · Vermont (54) · Mississippi (48) · Wyoming (40) · Idaho (39) · Rhode Island (32) · South Dakota (31) · Nevada (28) · Alaska (27) · North Dakota (18) · Delaware (15) · VI (5) · HI (2) · AS (1) · GU (1) · PR (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.