US bank web census · gap lists · Banks without HSTS · California · California report
Banks without HSTS in California
27 banks in California (23.9% of the 113 in the census list) lack HTTP Strict Transport Security header as of 2026-09-30. Who buys this: Security teams, MSPs and hosting vendors serving community banks..
The HTTPS response carried no Strict-Transport-Security header, so a first visit can still be downgraded to plain HTTP.
Free sample: 10 of 27
| Domain | Name | Charter class | City |
|---|---|---|---|
| tcbk.com | Tri Counties Bank | state nonmember bank (FDIC) | Chico |
| fremontbank.com | Fremont Bank | state nonmember bank (FDIC) | Fremont |
| westamerica.com | Westamerica Bank | state member bank (Fed) | San Rafael |
| communitywestbank.com | Community West Bank | state nonmember bank (FDIC) | Fresno |
| royalbusinessbankusa.com | Royal Business Bank | state nonmember bank (FDIC) | Los Angeles |
| californiabankofcommerce.com | California Bank of Commerce, National Association | national bank (OCC) | San Diego |
| wccb.com | West Coast Community Bank | state nonmember bank (FDIC) | Santa Cruz |
| avidbank.com | Avidbank | state nonmember bank (FDIC) | San Jose |
| plumasbank.com | Plumas Bank | state member bank (Fed) | Quincy |
| usmetrobank.com | US Metro Bank | state nonmember bank (FDIC) | Garden Grove |
Get the California file and more
- California only, 27 rows: 0.25 USDC.
GET https://banks.agentexchange.work/leads/no-hsts/state/CA.csv - The whole list, 1,011 rows: 1.00 USDC.
GET https://banks.agentexchange.work/leads/no-hsts.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://banks.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, total_assets_thousands_usd, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when California changes
Free: the Atom feed of banks entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://banks.agentexchange.work/watch with {"callback":"https://…","list":"no-hsts"} (x402). Terms.
Other gap lists in California
- Banks without a security.txt: 111 banks
- Banks without an accessibility statement on the homepage: 68 banks
- Banks without a privacy policy link on the homepage: 20 banks
- Banks blocking both ChatGPT-User and Claude-User: 4 banks
- Banks answering only over plain HTTP: 1 banks
- Bank homepages that redirect to another domain: 6 banks
Other states on this list
Texas (102) · Minnesota (62) · Illinois (61) · Iowa (48) · Nebraska (44) · Oklahoma (42) · Kansas (41) · Wisconsin (40) · Missouri (39) · Ohio (37) · Pennsylvania (36) · Georgia (29) · Louisiana (29) · Kentucky (26) · Alabama (24) · New York (24) · Colorado (23) · Arkansas (22) · Mississippi (22) · Tennessee (22) · Michigan (19) · Indiana (17) · Florida (15) · North Dakota (15) · South Dakota (15) · Virginia (14) · Montana (12) · South Carolina (11) · Utah (10) · Massachusetts (9) · North Carolina (8) · New Jersey (8) · West Virginia (8) · Wyoming (6) · VT (5) · Connecticut (4) · Maryland (4) · Washington (4) · AZ (3) · Maine (3) · New Mexico (3) · NV (3) · OR (3) · DE (2) · ID (2) · NH (2) · PR (2) · AK (1) · DC (1) · HI (1) · RI (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.