generated: '2026-09-12'
method: probed
source: live HTTP probes of every gartner.com host this record knows
note: 'Probed the registrable domain, www, the two API hosts found in certificate transparency (api.gartner.com,
  gapi.gartner.com), the Gartner Peer Insights vendor help centre, and datainsights.gartner.com. Only
  www.gartner.com serves a first-party well-known document (RFC 9116 security.txt) — every other path
  on www.gartner.com answers with a Cloudflare managed challenge (HTTP 403, cf-mitigated: challenge),
  so those are OUR crawler being turned away, not confirmed absences. The security.txt on gpivendorresources.gartner.com
  is Intercom''s own document (Canonical: app.intercom.com) served by the help-centre platform, NOT a
  Gartner-authored file, so it is recorded but not counted as a hit.'
hosts:
- host: www.gartner.com
  documents:
  - path: /.well-known/security.txt
    status: 200
    file: gartner-security.txt
    note: RFC 9116, Gartner-authored. Expires 2025-12-31 — the document is EXPIRED.
  - path: /.well-known/openid-configuration
    status: 403
    note: Cloudflare managed challenge, not an absence
  - path: /.well-known/oauth-authorization-server
    status: 403
    note: Cloudflare managed challenge, not an absence
  - path: /.well-known/api-catalog
    status: 403
    note: Cloudflare managed challenge, not an absence
  - path: /.well-known/ai-plugin.json
    status: 403
    note: Cloudflare managed challenge, not an absence
  - path: /.well-known/agent-card.json
    status: 403
    note: Cloudflare managed challenge, not an absence
  - path: /.well-known/agent.json
    status: 403
    note: Cloudflare managed challenge, not an absence
  - path: /llms.txt
    status: 403
    note: Cloudflare managed challenge, not an absence
- host: gartner.com
  documents:
  - path: /.well-known/security.txt
    status: 301
    note: apex redirects to www.gartner.com
  - path: /llms.txt
    status: 301
    note: apex redirects to www.gartner.com
- host: api.gartner.com
  documents:
  - path: /.well-known/agent-card.json
    status: 404
  - path: /openapi.json
    status: 404
  - path: /swagger.json
    status: 404
  note: Host resolves (Cloudflare) and answers with an HTML application shell on 404; no machine-readable
    document at any probed path.
- host: gapi.gartner.com
  documents:
  - path: /
    status: 403
    note: 'AWS API Gateway behind CloudFront answering {"message":"Missing Authentication Token"} (x-amzn-errortype:
      MissingAuthenticationTokenException). A live, fully credential-gated Gartner API host with no public
      contract at any probed path.'
  - path: /openapi.json
    status: 403
  - path: /swagger/v1/swagger.json
    status: 403
- host: gpivendorresources.gartner.com
  documents:
  - path: /llms.txt
    status: 200
    file: llms/gartner-llms.txt
    note: Real 200 text/plain llms.txt indexing the Gartner Peer Insights vendor help centre. Generated
      by the Intercom help-centre platform Gartner runs on this host.
  - path: /.well-known/security.txt
    status: 200
    note: 'NOT counted as a Gartner document — the body is Intercom''s own security.txt (Canonical: https://app.intercom.com/.well-known/security.txt,
      Contact security@intercom.com, bugcrowd.com/intercom).'
  - path: /.well-known/api-catalog
    status: 404
  - path: /.well-known/agent-card.json
    status: 404
  - path: /.well-known/agent.json
    status: 404
  - path: /.well-known/openid-configuration
    status: 404
  - path: /.well-known/oauth-authorization-server
    status: 404
- host: datainsights.gartner.com
  documents:
  - path: /.well-known/agent-card.json
    status: 302
    note: Every root path 302s to datainsights.g2digitalmarkets.com — this host now fronts G2's Digital
      Markets estate after the February 2026 divestiture. See apis.yml x-discovery-notes.
  - path: /llms.txt
    status: 302
probed: '2026-09-12'