US bank web census · gap lists · Banks without a security.txt · California · California report
Banks without a security.txt in California
111 banks in California (98.2% of the 113 in the census list) lack security.txt (RFC 9116) as of 2026-09-30. Who buys this: Security teams, vulnerability-disclosure and attack-surface vendors, fintech and MSP vendors selling to community banks..
No security.txt was found at /.well-known/security.txt or /security.txt on the final host, so a researcher who finds a vulnerability has no published contact.
Free sample: 10 of 111
| Domain | Name | Charter class | City |
|---|---|---|---|
| cnb.com | City National Bank | national bank (OCC) | Los Angeles |
| eastwestbank.com | East West Bank | state member bank (Fed) | Pasadena |
| bancofcal.com | Banc of California | state member bank (Fed) | Los Angeles |
| axosbank.com | Axos Bank | savings bank | San Diego |
| cathaybank.com | Cathay Bank | state nonmember bank (FDIC) | Los Angeles |
| mechanicsbank.com | Mechanics Bank | state nonmember bank (FDIC) | Walnut Creek |
| cbbank.com | Citizens Business Bank, National Association | national bank (OCC) | Ontario |
| bankofhope.com | Bank of Hope | state nonmember bank (FDIC) | Los Angeles |
| bankofamerica.com | Bank of America California, National Association | national bank (OCC) | San Francisco |
| fmb.com | Farmers and Merchants Bank of Long Beach | state member bank (Fed) | Long Beach |
Get the California file and more
- California only, 111 rows: 0.25 USDC.
GET https://banks.agentexchange.work/leads/no-security-txt/state/CA.csv - The whole list, 3,986 rows: 1.00 USDC.
GET https://banks.agentexchange.work/leads/no-security-txt.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://banks.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, total_assets_thousands_usd, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when California changes
Free: the Atom feed of banks entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://banks.agentexchange.work/watch with {"callback":"https://…","list":"no-security-txt"} (x402). Terms.
Other gap lists in California
- Banks without an accessibility statement on the homepage: 68 banks
- Banks without a privacy policy link on the homepage: 20 banks
- Banks without HSTS: 27 banks
- Banks blocking both ChatGPT-User and Claude-User: 4 banks
- Banks answering only over plain HTTP: 1 banks
- Bank homepages that redirect to another domain: 6 banks
Other states on this list
Texas (332) · Illinois (301) · Iowa (216) · Minnesota (211) · Missouri (186) · Kansas (177) · Oklahoma (163) · Ohio (147) · Wisconsin (147) · Nebraska (126) · Georgia (116) · Kentucky (114) · Tennessee (106) · Louisiana (101) · Pennsylvania (101) · New York (93) · Indiana (86) · Alabama (84) · Florida (82) · Massachusetts (81) · Arkansas (73) · Michigan (69) · Colorado (62) · North Dakota (57) · Virginia (55) · Mississippi (54) · South Dakota (49) · New Jersey (44) · South Carolina (42) · West Virginia (39) · Utah (37) · North Carolina (34) · Montana (33) · New Mexico (27) · Washington (27) · Connecticut (26) · Maryland (25) · Wyoming (23) · Maine (21) · NH (15) · NV (14) · VT (12) · OR (11) · AZ (10) · ID (10) · DE (9) · HI (6) · AK (5) · RI (5) · DC (4) · PR (4) · FM (1) · GU (1) · VI (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.