US bank web census · gap lists · census 2026-09-30 · JSON (top 50) · feed
Banks without HSTS
1,011 of the 4,123 banks in the census list (24.5%; 25.1% of the 4,023 reachable over HTTPS), as fetched on 2026-09-30.
On this list
1,011
of 4,123 banks
Share of the list
24.5%
25.1% of reachable sites
States
52
largest: Texas (102)
Full list
1.00 USDC
x402, per file; first 50 rows free
What this gap means
The HTTPS response carried no Strict-Transport-Security header, so a first visit can still be downgraded to plain HTTP.
Control: HTTP Strict Transport Security header. Rule: no_hsts over the census record (reachable sites only). Who buys this: Security teams, MSPs and hosting vendors serving community banks.
This list maps to no legal obligation in this census; it is a gap in published practice.
By state
52 states with at least one bank on this list; "of the state" is the share of its banks in the census list. One state as CSV: 0.25 USDC (x402).
| State | On this list | Of the state | CSV (x402) |
|---|---|---|---|
| Texas | 102 | 30.2% | https://banks.agentexchange.work/leads/no-hsts/state/TX.csv |
| Minnesota | 62 | 29.0% | https://banks.agentexchange.work/leads/no-hsts/state/MN.csv |
| Illinois | 61 | 19.5% | https://banks.agentexchange.work/leads/no-hsts/state/IL.csv |
| Iowa | 48 | 21.6% | https://banks.agentexchange.work/leads/no-hsts/state/IA.csv |
| Nebraska | 44 | 33.3% | https://banks.agentexchange.work/leads/no-hsts/state/NE.csv |
| Oklahoma | 42 | 25.5% | https://banks.agentexchange.work/leads/no-hsts/state/OK.csv |
| Kansas | 41 | 22.7% | https://banks.agentexchange.work/leads/no-hsts/state/KS.csv |
| Wisconsin | 40 | 26.1% | https://banks.agentexchange.work/leads/no-hsts/state/WI.csv |
| Missouri | 39 | 20.5% | https://banks.agentexchange.work/leads/no-hsts/state/MO.csv |
| Ohio | 37 | 24.3% | https://banks.agentexchange.work/leads/no-hsts/state/OH.csv |
| Pennsylvania | 36 | 34.0% | https://banks.agentexchange.work/leads/no-hsts/state/PA.csv |
| Georgia | 29 | 24.0% | https://banks.agentexchange.work/leads/no-hsts/state/GA.csv |
| Louisiana | 29 | 27.9% | https://banks.agentexchange.work/leads/no-hsts/state/LA.csv |
| California | 27 | 23.9% | https://banks.agentexchange.work/leads/no-hsts/state/CA.csv |
| Kentucky | 26 | 21.8% | https://banks.agentexchange.work/leads/no-hsts/state/KY.csv |
| Alabama | 24 | 27.0% | https://banks.agentexchange.work/leads/no-hsts/state/AL.csv |
| New York | 24 | 25.0% | https://banks.agentexchange.work/leads/no-hsts/state/NY.csv |
| Colorado | 23 | 36.5% | https://banks.agentexchange.work/leads/no-hsts/state/CO.csv |
| Arkansas | 22 | 28.6% | https://banks.agentexchange.work/leads/no-hsts/state/AR.csv |
| Mississippi | 22 | 39.3% | https://banks.agentexchange.work/leads/no-hsts/state/MS.csv |
| Tennessee | 22 | 20.2% | https://banks.agentexchange.work/leads/no-hsts/state/TN.csv |
| Michigan | 19 | 26.8% | https://banks.agentexchange.work/leads/no-hsts/state/MI.csv |
| Indiana | 17 | 19.5% | https://banks.agentexchange.work/leads/no-hsts/state/IN.csv |
| Florida | 15 | 18.1% | https://banks.agentexchange.work/leads/no-hsts/state/FL.csv |
| North Dakota | 15 | 25.4% | https://banks.agentexchange.work/leads/no-hsts/state/ND.csv |
| South Dakota | 15 | 28.3% | https://banks.agentexchange.work/leads/no-hsts/state/SD.csv |
| Virginia | 14 | 25.0% | https://banks.agentexchange.work/leads/no-hsts/state/VA.csv |
| Montana | 12 | 35.3% | https://banks.agentexchange.work/leads/no-hsts/state/MT.csv |
| South Carolina | 11 | 25.6% | https://banks.agentexchange.work/leads/no-hsts/state/SC.csv |
| Utah | 10 | 24.4% | https://banks.agentexchange.work/leads/no-hsts/state/UT.csv |
| Massachusetts | 9 | 10.1% | https://banks.agentexchange.work/leads/no-hsts/state/MA.csv |
| North Carolina | 8 | 22.9% | https://banks.agentexchange.work/leads/no-hsts/state/NC.csv |
| New Jersey | 8 | 16.7% | https://banks.agentexchange.work/leads/no-hsts/state/NJ.csv |
| West Virginia | 8 | 20.0% | https://banks.agentexchange.work/leads/no-hsts/state/WV.csv |
| Wyoming | 6 | 26.1% | https://banks.agentexchange.work/leads/no-hsts/state/WY.csv |
| VT | 5 | — | https://banks.agentexchange.work/leads/no-hsts/state/VT.csv |
| Connecticut | 4 | 15.4% | https://banks.agentexchange.work/leads/no-hsts/state/CT.csv |
| Maryland | 4 | 15.4% | https://banks.agentexchange.work/leads/no-hsts/state/MD.csv |
| Washington | 4 | 14.3% | https://banks.agentexchange.work/leads/no-hsts/state/WA.csv |
| AZ | 3 | — | https://banks.agentexchange.work/leads/no-hsts/state/AZ.csv |
| Maine | 3 | 13.6% | https://banks.agentexchange.work/leads/no-hsts/state/ME.csv |
| New Mexico | 3 | 10.7% | https://banks.agentexchange.work/leads/no-hsts/state/NM.csv |
| NV | 3 | — | https://banks.agentexchange.work/leads/no-hsts/state/NV.csv |
| OR | 3 | — | https://banks.agentexchange.work/leads/no-hsts/state/OR.csv |
| DE | 2 | — | https://banks.agentexchange.work/leads/no-hsts/state/DE.csv |
| ID | 2 | — | https://banks.agentexchange.work/leads/no-hsts/state/ID.csv |
| NH | 2 | — | https://banks.agentexchange.work/leads/no-hsts/state/NH.csv |
| PR | 2 | — | https://banks.agentexchange.work/leads/no-hsts/state/PR.csv |
| AK | 1 | — | https://banks.agentexchange.work/leads/no-hsts/state/AK.csv |
| DC | 1 | — | https://banks.agentexchange.work/leads/no-hsts/state/DC.csv |
| HI | 1 | — | https://banks.agentexchange.work/leads/no-hsts/state/HI.csv |
| RI | 1 | — | https://banks.agentexchange.work/leads/no-hsts/state/RI.csv |
Free: the first 50 of 1,011 (by total assets ($ thousands, FDIC))
| Domain | Charter class | State | Total assets ($ thousands, FDIC) | Census record |
|---|---|---|---|---|
| marcus.com Goldman Sachs Bank USA | state member bank (Fed) | NY | 758,788,000 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| usbank.com U.S. Bank National Association | national bank (OCC) | OH | 705,554,946 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| 53.com Fifth Third Bank, National Association | national bank (OCC) | OH | 299,177,000 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no |
| huntington.com The Huntington National Bank | national bank (OCC) | OH | 283,073,605 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| schwabbank.com Charles Schwab Bank, SSB | state member bank (Fed) | TX | 250,828,000 | HTTP 400 · HSTS no · security.txt none · privacy no · accessibility no |
| regions.com Regions Bank | state member bank (Fed) | AL | 159,787,000 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| pnfp.com Pinnacle Bank | state member bank (Fed) | TN | 128,791,735 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| synchronybank.com Synchrony Bank | savings bank | UT | 115,217,000 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| zionsbancorporation.com Zions Bancorporation, N.A. | national bank (OCC) | UT | 89,041,284 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| flagstar.com Flagstar Bank, National Association | national bank (OCC) | NY | 87,714,456 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| southstatebank.com SouthState Bank, National Association | national bank (OCC) | FL | 68,794,317 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| columbiabank.com Columbia Bank | state nonmember bank (FDIC) | OR | 65,367,657 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| prosperitybankusa.com Prosperity Bank | state nonmember bank (FDIC) | TX | 43,875,300 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| atlanticunionbank.com Atlantic Union Bank | state member bank (Fed) | VA | 38,020,862 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| citynational.com City National Bank of Florida | national bank (OCC) | FL | 29,112,337 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot allowed |
| wesbanco.com WesBanco Bank, Inc. | state nonmember bank (FDIC) | WV | 27,745,993 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no |
| firstinterstatebank.com First Interstate Bank | state member bank (Fed) | MT | 25,794,971 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no |
| provident.bank Provident Bank | state savings institution | NJ | 25,650,552 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| tscbank.com TriState Capital Bank | state member bank (Fed) | PA | 24,258,271 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| bankatfirst.com First Financial Bank | state member bank (Fed) | OH | 22,351,293 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| firstmerchants.com First Merchants Bank | state nonmember bank (FDIC) | IN | 21,320,482 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| bankmerchants.com Merchants Bank of Indiana | state nonmember bank (FDIC) | IN | 21,170,764 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| stifelbank.com Stifel Bank and Trust | state member bank (Fed) | MO | 19,620,017 | HTTP 200 via bankwithstifel.com · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot allowed |
| firstunitedbank.com First United Bank and Trust Company | state member bank (Fed) | OK | 16,594,244 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| nbtbank.com NBT Bank, National Association | national bank (OCC) | NY | 16,091,731 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| liveoak.bank Live Oak Banking Company | state nonmember bank (FDIC) | NC | 15,959,938 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| sunflowerbank.com Sunflower Bank, National Association | national bank (OCC) | TX | 15,653,917 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| nicoletbank.com Nicolet National Bank | national bank (OCC) | WI | 15,390,715 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| ffin.com First Financial Bank | state member bank (Fed) | TX | 15,234,117 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| stifelbankstl.com Stifel Bank | state member bank (Fed) | MO | 14,623,006 | HTTP 200 via bankwithstifel.com · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot allowed |
| nbhbank.com NBH Bank | state member bank (Fed) | CO | 12,537,055 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| orientalbank.com Oriental Bank | state nonmember bank (FDIC) | PR | 12,043,258 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| burkeandherbertbank.com Burke & Herbert Bank & Trust Company | state member bank (Fed) | VA | 10,984,290 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot allowed |
| syb.com Stock Yards Bank & Trust Company | state nonmember bank (FDIC) | KY | 10,360,306 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| origin.bank Origin Bank | state member bank (Fed) | LA | 10,177,963 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| tcbk.com Tri Counties Bank | state nonmember bank (FDIC) | CA | 9,929,055 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| capfed.com Capitol Federal Savings Bank | savings bank | KS | 9,677,291 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| rbcbank.com RBC Bank, (Georgia) National Association | national bank (OCC) | GA | 9,594,495 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes |
| b1bank.com b1BANK | state nonmember bank (FDIC) | LA | 8,893,460 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| mcbankny.com Metropolitan Commercial Bank | state member bank (Fed) | NY | 8,857,429 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| firstambank.com First American Bank | state nonmember bank (FDIC) | IL | 8,626,339 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| fsbank.com First Security Bank | state member bank (Fed) | AR | 8,583,002 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| bankerstrust.com Bankers Trust Company | state nonmember bank (FDIC) | IA | 7,832,471 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| needhambank.com Needham Bank | state member bank (Fed) | MA | 7,416,433 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| johnsonfinancialgroup.com Johnson Bank | state member bank (Fed) | WI | 7,068,332 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| midpennbank.com Mid Penn Bank | state nonmember bank (FDIC) | PA | 7,038,845 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| fnba.com First National Bank of America | national bank (OCC) | MI | 6,818,824 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| bankatcity.com City National Bank of West Virginia | national bank (OCC) | WV | 6,756,219 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| hbtbank.com Heartland Bank and Trust Company | state nonmember bank (FDIC) | IL | 6,721,503 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| trustcobank.com TrustCo Bank | savings bank | NY | 6,523,938 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked |
The same rows as JSON: no-hsts.top.json (CORS open, cached one day).
Get the full list: 1,011 rows, 1.00 USDC
x402 on Base, paid per file, no account or key. GET https://banks.agentexchange.work/leads/no-hsts.csv or GET https://banks.agentexchange.work/leads/no-hsts.json answers 402 Payment Required with the terms (scheme exact, USDC on Base, maxAmountRequired 1000000, payTo 0xc91cE6291eDC0713ec753BAFBA002506ffb2b95c); an x402 client signs the EIP-3009 authorization and resends the same request with X-PAYMENT; the file comes back with a PAYMENT-RESPONSE header. HEAD gets the same 402. One state: GET https://banks.agentexchange.work/leads/no-hsts/state/<code>.csv, 0.25 USDC (codes in the table above).
curl -sS -D - https://banks.agentexchange.work/leads/no-hsts.csv # 402 with the x402 terms; pay and resend with X-PAYMENT
Columns (19): domain, name, type, city, state, total_assets_thousands_usd, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title. CSV: header row, every cell quoted, yes/no for booleans. JSON: { list, title, count, by_state, columns, rows[][] }. Sizes: CSV 214 KB, JSON 219 KB. The same facts are in the free CC BY 4.0 dumps: the price buys the filtered, state-sliceable file built from the 2026-09-30 census, not exclusive data. Settlement is final; no refunds. Prices in /.well-known/x402 equal the challenges. Terms · pricing.
Card checkout for this list is not open yet; the x402 route works now.
Monitor this list (free)
Atom feed: banks that entered or left this list according to the live re-checks (every 6 hours a rotating slice, each domain at most once per 14 days; each entry says which way it moved and which field changed). no-hsts.top.json: the first 50 rows and the counts by state as JSON, CORS open. Fields watched: hsts.
Membership reflects the homepage and well-known files as fetched on 2026-09-30: a control that exists but was not found where the census looked counts as missing, and sites answering 403 to our one polite request count as reachable. Every domain links to its record with what to fix, a JSON twin, a badge and a changes feed. Data licence CC BY 4.0. Not legal advice.