US credit union web census · gap lists · census 2026-09-30 · JSON (top 50) · feed
Credit unions without HSTS
1,640 of the 3,834 credit unions in the census list (42.8%; 46.8% of the 3,502 reachable over HTTPS), as fetched on 2026-09-30.
On this list
1,640
of 3,834 credit unions
Share of the list
42.8%
46.8% of reachable sites
States
53
largest: Texas (147)
Full list
1.00 USDC
x402, per file; first 50 rows free
What this gap means
The HTTPS response carried no Strict-Transport-Security header, so a first visit can still be downgraded to plain HTTP.
Control: HTTP Strict Transport Security header. Rule: no_hsts over the census record (reachable sites only). Who buys this: Security teams, MSPs and hosting vendors serving credit unions.
This list maps to no legal obligation in this census; it is a gap in published practice.
By state
53 states with at least one credit union on this list; "of the state" is the share of its credit unions in the census list. One state as CSV: 0.25 USDC (x402).
| State | On this list | Of the state | CSV (x402) |
|---|---|---|---|
| Texas (report) | 147 | 43.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/TX.csv · card $9 |
| Pennsylvania (report) | 133 | 55.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/PA.csv · card $9 |
| New York (report) | 108 | 46.6% | https://credit-unions.agentexchange.work/leads/no-hsts/state/NY.csv · card $9 |
| California (report) | 91 | 39.9% | https://credit-unions.agentexchange.work/leads/no-hsts/state/CA.csv · card $9 |
| Ohio (report) | 81 | 46.8% | https://credit-unions.agentexchange.work/leads/no-hsts/state/OH.csv · card $9 |
| Illinois (report) | 57 | 37.0% | https://credit-unions.agentexchange.work/leads/no-hsts/state/IL.csv · card $9 |
| Indiana (report) | 54 | 50.0% | https://credit-unions.agentexchange.work/leads/no-hsts/state/IN.csv · card $9 |
| New Jersey (report) | 54 | 57.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/NJ.csv · card $9 |
| Michigan (report) | 53 | 31.9% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MI.csv · card $9 |
| Tennessee (report) | 51 | 45.9% | https://credit-unions.agentexchange.work/leads/no-hsts/state/TN.csv · card $9 |
| Louisiana (report) | 42 | 41.2% | https://credit-unions.agentexchange.work/leads/no-hsts/state/LA.csv · card $9 |
| Massachusetts (report) | 42 | 38.2% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MA.csv · card $9 |
| Minnesota (report) | 36 | 47.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MN.csv · card $9 |
| Wisconsin (report) | 35 | 38.5% | https://credit-unions.agentexchange.work/leads/no-hsts/state/WI.csv · card $9 |
| Florida (report) | 34 | 33.3% | https://credit-unions.agentexchange.work/leads/no-hsts/state/FL.csv · card $9 |
| Missouri (report) | 34 | 44.2% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MO.csv · card $9 |
| Washington (report) | 34 | 46.6% | https://credit-unions.agentexchange.work/leads/no-hsts/state/WA.csv · card $9 |
| West Virginia (report) | 32 | 51.6% | https://credit-unions.agentexchange.work/leads/no-hsts/state/WV.csv · card $9 |
| Virginia (report) | 30 | 37.0% | https://credit-unions.agentexchange.work/leads/no-hsts/state/VA.csv · card $9 |
| Alabama (report) | 29 | 38.7% | https://credit-unions.agentexchange.work/leads/no-hsts/state/AL.csv · card $9 |
| Georgia (report) | 29 | 51.8% | https://credit-unions.agentexchange.work/leads/no-hsts/state/GA.csv · card $9 |
| Mississippi (report) | 26 | 54.2% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MS.csv · card $9 |
| South Carolina (report) | 24 | 58.5% | https://credit-unions.agentexchange.work/leads/no-hsts/state/SC.csv · card $9 |
| Iowa (report) | 23 | 41.1% | https://credit-unions.agentexchange.work/leads/no-hsts/state/IA.csv · card $9 |
| Arkansas (report) | 21 | 46.7% | https://credit-unions.agentexchange.work/leads/no-hsts/state/AR.csv · card $9 |
| Colorado (report) | 21 | 36.8% | https://credit-unions.agentexchange.work/leads/no-hsts/state/CO.csv · card $9 |
| North Carolina (report) | 20 | 36.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/NC.csv · card $9 |
| Oregon (report) | 20 | 44.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/OR.csv · card $9 |
| Kansas (report) | 19 | 36.5% | https://credit-unions.agentexchange.work/leads/no-hsts/state/KS.csv · card $9 |
| Nebraska (report) | 19 | 39.6% | https://credit-unions.agentexchange.work/leads/no-hsts/state/NE.csv · card $9 |
| Connecticut (report) | 18 | 32.7% | https://credit-unions.agentexchange.work/leads/no-hsts/state/CT.csv · card $9 |
| Kentucky (report) | 18 | 40.0% | https://credit-unions.agentexchange.work/leads/no-hsts/state/KY.csv · card $9 |
| Oklahoma (report) | 18 | 36.0% | https://credit-unions.agentexchange.work/leads/no-hsts/state/OK.csv · card $9 |
| Utah (report) | 18 | 42.9% | https://credit-unions.agentexchange.work/leads/no-hsts/state/UT.csv · card $9 |
| Maine (report) | 17 | 36.2% | https://credit-unions.agentexchange.work/leads/no-hsts/state/ME.csv · card $9 |
| Montana (report) | 17 | 48.6% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MT.csv · card $9 |
| South Dakota (report) | 16 | 51.6% | https://credit-unions.agentexchange.work/leads/no-hsts/state/SD.csv · card $9 |
| Hawaii (report) | 14 | 33.3% | https://credit-unions.agentexchange.work/leads/no-hsts/state/HI.csv · card $9 |
| Idaho (report) | 14 | 58.3% | https://credit-unions.agentexchange.work/leads/no-hsts/state/ID.csv · card $9 |
| Maryland (report) | 14 | 26.4% | https://credit-unions.agentexchange.work/leads/no-hsts/state/MD.csv · card $9 |
| New Mexico (report) | 14 | 38.9% | https://credit-unions.agentexchange.work/leads/no-hsts/state/NM.csv · card $9 |
| Arizona (report) | 9 | 28.1% | https://credit-unions.agentexchange.work/leads/no-hsts/state/AZ.csv · card $9 |
| DE | 8 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/DE.csv · card $9 |
| VT | 8 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/VT.csv · card $9 |
| District of Columbia (report) | 7 | 33.3% | https://credit-unions.agentexchange.work/leads/no-hsts/state/DC.csv · card $9 |
| North Dakota (report) | 6 | 24.0% | https://credit-unions.agentexchange.work/leads/no-hsts/state/ND.csv · card $9 |
| NV | 6 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/NV.csv · card $9 |
| AK | 4 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/AK.csv · card $9 |
| NH | 4 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/NH.csv · card $9 |
| WY | 4 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/WY.csv · card $9 |
| PR | 3 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/PR.csv · card $9 |
| RI | 2 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/RI.csv · card $9 |
| VI | 2 | — | https://credit-unions.agentexchange.work/leads/no-hsts/state/VI.csv · card $9 |
Free: the first 50 of 1,640 (by total assets ($, NCUA call report))
| Domain | Charter type | State | Total assets ($, NCUA call report) | Census record |
|---|---|---|---|---|
| suncoast.com SUNCOAST | federally insured state-chartered credit union | FL | 20,779,030,012 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| ent.com WINGS | federally insured state-chartered credit union | CO | 19,383,957,291 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| lmcu.org LAKE MICHIGAN | federally insured state-chartered credit union | MI | 17,260,743,113 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| vystarcu.org VYSTAR | federally insured state-chartered credit union | FL | 14,273,970,203 | HTTP 200 via validate.perfdrive.com · HSTS no · security.txt none · privacy no · accessibility no |
| pffcu.org POLICE & FIRE | federal credit union | PA | 10,229,312,227 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| patelco.org PATELCO | federally insured state-chartered credit union | CA | 9,769,967,823 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| starone.org STAR ONE | federally insured state-chartered credit union | CA | 9,697,340,927 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| sccu.com SPACE COAST | federally insured state-chartered credit union | FL | 9,151,014,136 | HTTP 200 via validate.perfdrive.com · HSTS no · security.txt none · privacy no · accessibility no |
| summitcreditunion.com SUMMIT | federally insured state-chartered credit union | WI | 8,522,236,354 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| landmarkcu.com LANDMARK | federally insured state-chartered credit union | WI | 7,905,062,411 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| bfsfcu.org BANK FUND STAFF | federal credit union | DC | 7,058,719,753 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| citadelbanking.com CITADEL | federal credit union | PA | 6,868,260,559 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| gesa.com GESA | federally insured state-chartered credit union | WA | 6,821,694,066 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| uwcu.org UNIVERSITY OF WISCONSIN | federally insured state-chartered credit union | WI | 6,716,051,700 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| traviscu.org TRAVIS | federally insured state-chartered credit union | CA | 5,853,615,481 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no |
| applefcu.org APPLE | federal credit union | VA | 5,683,855,886 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| langleyfcu.org LANGLEY | federal credit union | VA | 5,624,517,154 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| tvacreditunion.com KNOXVILLE TVA EMPLOYEES | federally insured state-chartered credit union | TN | 5,319,975,598 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| canvas.org CANVAS | federally insured state-chartered credit union | CO | 5,291,563,542 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| foundersfcu.com FOUNDERS | federal credit union | SC | 5,204,640,083 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| robinsfcu.org ROBINS FINANCIAL | federally insured state-chartered credit union | GA | 4,972,204,248 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| eecu.org EECU | federally insured state-chartered credit union | TX | 4,875,032,498 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| blazecu.com BLAZE | federally insured state-chartered credit union | MN | 4,847,116,515 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot blocked |
| gecu-ep.org GECU | federal credit union | TX | 4,735,159,889 | HTTP 200 via www.gecu.com · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| jovia.org JOVIA FINANCIAL | federal credit union | NY | 4,563,417,480 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| techcu.com TECHNOLOGY | federally insured state-chartered credit union | CA | 4,538,276,919 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| unitedfcu.com UNITED | federal credit union | MI | 4,432,382,368 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| navigantcu.org NAVIGANT | federally insured state-chartered credit union | RI | 4,284,102,386 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| gecreditunion.org GENERAL ELECTRIC | federally insured state-chartered credit union | OH | 4,213,032,916 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| covantagecu.org COVANTAGE | federally insured state-chartered credit union | WI | 4,206,508,951 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility yes · GPTBot partly blocked |
| cusocal.org CREDIT UNION OF SOUTHERN CA, A | federal credit union | CA | 4,006,096,229 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| nuvisionfederal.org NUVISION | federal credit union | CA | 3,968,592,754 | HTTP 200 via nuvisionfederal.com · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| soundcu.com SOUND | federally insured state-chartered credit union | WA | 3,403,158,551 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| vantagewest.org VANTAGE WEST | federally insured state-chartered credit union | AZ | 3,336,309,495 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| eastrise.com EASTRISE | federal credit union | VT | 3,232,513,257 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| altra.org ALTRA | federal credit union | WI | 3,141,431,760 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| orangecountyscu.org ORANGE COUNTY'S | federal credit union | CA | 3,079,796,470 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot partly blocked |
| selco.org SELCO COMMUNITY | federally insured state-chartered credit union | OR | 3,006,504,811 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| penair.org PENAIR | federally insured state-chartered credit union | FL | 2,823,572,366 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| oregonstatecu.com OREGON STATE | federally insured state-chartered credit union | OR | 2,783,407,485 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| bayportcu.org BAYPORT | federal credit union | VA | 2,780,782,512 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| y12fcu.org Y-12 | federal credit union | TN | 2,762,633,315 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| aboundcu.com ABOUND | federal credit union | KY | 2,760,466,663 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot partly blocked |
| alturacu.com ALTURA | federal credit union | CA | 2,645,892,363 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot allowed |
| hughesfcu.org HUGHES | federal credit union | AZ | 2,599,376,017 | HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot partly blocked |
| columbiacu.org COLUMBIA COMMUNITY | federally insured state-chartered credit union | WA | 2,592,325,204 | HTTP 429 · HSTS no · security.txt none · privacy no · accessibility no |
| kitsapcu.org KITSAP | federally insured state-chartered credit union | WA | 2,506,976,489 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility yes · GPTBot allowed |
| self-helpfcu.org SELF-HELP | federal credit union | NC | 2,409,490,172 | HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no |
| blackhillsfcu.org BLACK HILLS | federal credit union | SD | 2,378,125,758 | HTTP 403 via www.bhfcu.com · HSTS no · security.txt none · privacy no · accessibility no · GPTBot allowed |
| coastccu.org COAST CENTRAL | federally insured state-chartered credit union | CA | 2,308,313,259 | HTTP 200 · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot allowed |
The same rows as JSON: no-hsts.top.json (CORS open, cached one day).
Get the full list: 1,640 rows, 1.00 USDC
x402 on Base, paid per file, no account or key. GET https://credit-unions.agentexchange.work/leads/no-hsts.csv or GET https://credit-unions.agentexchange.work/leads/no-hsts.json answers 402 Payment Required with the terms (scheme exact, USDC on Base, maxAmountRequired 1000000, payTo 0xc91cE6291eDC0713ec753BAFBA002506ffb2b95c); an x402 client signs the EIP-3009 authorization and resends the same request with X-PAYMENT; the file comes back with a PAYMENT-RESPONSE header. HEAD gets the same 402. One state: GET https://credit-unions.agentexchange.work/leads/no-hsts/state/<code>.csv, 0.25 USDC (codes in the table above).
curl -sS -D - https://credit-unions.agentexchange.work/leads/no-hsts.csv # 402 with the x402 terms; pay and resend with X-PAYMENT
Columns (19): domain, name, type, city, state, total_assets_usd, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title. CSV: header row, every cell quoted, yes/no for booleans. JSON: { list, title, count, by_state, columns, rows[][] }. Sizes: CSV 344 KB, JSON 352 KB. The same facts are in the free CC BY 4.0 dumps: the price buys the filtered, state-sliceable file built from the 2026-09-30 census, not exclusive data. Settlement is final; no refunds. Prices in /.well-known/x402 equal the challenges. Terms · pricing.
Card checkout
Pay with a card through Stripe and get the file on the next page: Full list CSV, $29 · JSON, $29 · one state $9 (links in the table below) · all 8 lists, $79. Agents pay less with x402 (see above).
Monitor this list (free)
Atom feed: credit unions that entered or left this list according to the live re-checks (every 6 hours a rotating slice, each domain at most once per 14 days; each entry says which way it moved and which field changed). no-hsts.top.json: the first 50 rows and the counts by state as JSON, CORS open. Fields watched: hsts.
Membership reflects the homepage and well-known files as fetched on 2026-09-30: a control that exists but was not found where the census looked counts as missing, and sites answering 403 to our one polite request count as reachable. Every domain links to its record with what to fix, a JSON twin, a badge and a changes feed. Data licence CC BY 4.0. Not legal advice.