World university web census · gap lists · Universities with an expired security.txt · Canada · Canada report
Universities with an expired security.txt in Canada
3 universities in Canada (1.9% of the 159 in the census list) lack security.txt Expires line (RFC 9116) as of 2026-09-30. Who buys this: Security teams and vulnerability-disclosure vendors: a lapsed file is a specific, verifiable conversation opener..
A security.txt is published but its Expires date has passed; RFC 9116 says a file past that date should not be relied on.
Free sample: 3 of 3
| Domain | Name | Country | City |
|---|---|---|---|
| ucalgary.ca | University of Calgary | Canada | Alberta |
| ulaval.ca | Université Laval | Canada | Quebec |
| uoguelph.ca | University of Guelph | Canada | Ontario |
Get the Canada file and more
- Canada only, 3 rows: 0.25 USDC.
GET https://universities.agentexchange.work/leads/expired-security-txt/state/CA.csv - The whole list, 61 rows: 1.00 USDC.
GET https://universities.agentexchange.work/leads/expired-security-txt.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://universities.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, known_domains, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when Canada changes
Free: the Atom feed of universities entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://universities.agentexchange.work/watch with {"callback":"https://…","list":"expired-security-txt"} (x402). Terms.
Other gap lists in Canada
- Universities without an accessibility statement on the homepage: 53 universities
- Universities without a privacy policy link on the homepage: 64 universities
- Universities without a security.txt: 103 universities
- Universities without HSTS: 49 universities
- Universities blocking both ChatGPT-User and Claude-User: 2 universities
- Universities answering only over plain HTTP: 7 universities
- University homepages that redirect to another domain: 14 universities
Other countries on this list
the United States (10) · Switzerland (7) · the United Kingdom (5) · Sweden (5) · Germany (4) · Portugal (4) · Indonesia (3) · the Netherlands (3) · Australia (2) · Finland (2) · France (2) · BA (1) · Brazil (1) · Spain (1) · GU (1) · Ireland (1) · IR (1) · Italy (1) · Norway (1) · PK (1) · PS (1) · TR (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.