Government web census · gap lists · .gov domains without a security.txt · New York · New York report
.gov domains without a security.txt in New York
1,158 .gov domains in New York (84.7% of the 1,367 in the census list) lack security.txt (RFC 9116) as of 2026-09-30. Who buys this: Security teams, vulnerability-disclosure and attack-surface vendors, MSPs serving state and local government..
No security.txt was found at /.well-known/security.txt or /security.txt on the final host, so a researcher who finds a vulnerability has no published contact.
Free sample: 10 of 1,158
| Domain | Name | Level of government | City |
|---|---|---|---|
| bnl.gov | Department of Energy | Federal - Executive | Upton |
| mynycourts.gov | NYS Unified Court System Division of Technology | State or territory | Troy |
| ny.gov | State of New York | State or territory | Albany |
| nycourthelp.gov | NYS Unified Court System Division of Technology | State or territory | Troy |
| nycourts.gov | NYS Unified Court System Division of Technology | State or territory | Troy |
| nyirc.gov | New York State Assembly | State or territory | Albany |
| nyjuror.gov | New York State Unified Court System | State or territory | New York |
| nylipa.gov | New York State Assembly | State or territory | Albany |
| nysenate.gov | State of New York | State or territory | Albany |
| panynj.gov | The Port Authority of New York and New Jersey | Interstate | New York |
Get the New York file and more
- New York only, 1,158 rows: 0.25 USDC.
GET https://gov.agentexchange.work/leads/no-security-txt/state/NY.csv - The whole list, 12,717 rows: 1.00 USDC.
GET https://gov.agentexchange.work/leads/no-security-txt.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://gov.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when New York changes
Free: the Atom feed of .gov domains entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://gov.agentexchange.work/watch with {"callback":"https://…","list":"no-security-txt"} (x402). Terms.
Other gap lists in New York
- .gov domains with an expired security.txt: 1 .gov domains
- .gov domains without an accessibility statement on the homepage: 762 .gov domains
- .gov domains without a privacy policy link on the homepage: 843 .gov domains
- .gov domains without HSTS: 842 .gov domains
- .gov domains blocking both ChatGPT-User and Claude-User: 30 .gov domains
- .gov domains answering only over plain HTTP: 45 .gov domains
- .gov domains whose homepage redirects to another domain: 58 .gov domains
Other states on this list
District of Columbia (650) · Wisconsin (644) · California (634) · Texas (544) · Minnesota (519) · Michigan (492) · Ohio (452) · Florida (402) · Utah (354) · Illinois (317) · North Carolina (305) · Pennsylvania (286) · Massachusetts (282) · Georgia (270) · Tennessee (259) · New Jersey (237) · Missouri (231) · Oregon (221) · Arkansas (210) · Virginia (210) · Maryland (203) · Colorado (202) · Washington (192) · Arizona (190) · Alabama (177) · Kansas (168) · Kentucky (163) · New Hampshire (161) · Oklahoma (152) · Connecticut (142) · Iowa (130) · Nebraska (121) · South Carolina (111) · Maine (108) · Indiana (105) · West Virginia (103) · Montana (97) · New Mexico (92) · Louisiana (84) · Vermont (79) · Mississippi (73) · Idaho (63) · Wyoming (56) · South Dakota (48) · Rhode Island (46) · Alaska (45) · Nevada (38) · North Dakota (33) · Delaware (18) · HI (6) · VI (6) · AS (5) · PR (4) · GU (2) · MP (2)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.