Is Citi quantum-safe?
Partly. 62 of 168 public servers under citi.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api.citi.com
- auth.citi.com
- developer.citi.com
- pay.citi.com
- portal.communityinvestinganddevelopment.citi.com
- secure.citi.com
- vpn.citi.com
99 other servers without post-quantum key exchange
- 390g.desktopauth.asia.citi.com
- 390g.desktopauth.europe.citi.com
- 390g.vpnuat.citi.com
- 390gspod.desktopauth.asia.citi.com
- 390gspod.desktopauth.europe.citi.com
- accountonline.citi.com
- aubex20.desktopauth.asia.citi.com
- aubex20spod.desktopauth.asia.citi.com
- b2b.ccb.icgservices.citi.com
- b2b.msst.icgservices.citi.com
- b2b.tts.icgservices.citi.com
- ccb.icgservices.citi.com
- citi.com
- citipay.citi.com
- click.ccb10.citi.com
- cloud.ccb10.citi.com
- desktopauth.asia.citi.com
- desktopauth.europe.citi.com
- dit01.citi.com
- dit02.citi.com
- dit03.citi.com
- email.homeloans.citi.com
- fdc.desktopauth.asia.citi.com
- fdc.desktopauth.europe.citi.com
- fdc.vpnuat.citi.com
- fdcspod.desktopauth.asia.citi.com
- fdcspod.desktopauth.europe.citi.com
- ftps.filetransfer.citi.com
- go.homeloans.citi.com
- hkna81.desktopauth.asia.citi.com
- hkna81.desktopauth.europe.citi.com
- hkna81.vpnuat.citi.com
- hkna81ip.desktopauth.asia.citi.com
- indiaspod.desktopauth.asia.citi.com
- indiaspod.desktopauth.europe.citi.com
- japanspod.desktopauth.asia.citi.com
- japanspod.desktopauth.europe.citi.com
- jpbeu80.desktopauth.asia.citi.com
- jpbeu80.desktopauth.europe.citi.com
- jrdcspod.desktopauth.europe.citi.com
- koreaspod.desktopauth.asia.citi.com
- mail-content.security1.citi.com
- metrics.citi.com
- msst.icgservices.citi.com
- mwdc.desktopauth.asia.citi.com
- mwdc.desktopauth.europe.citi.com
- mwdc.vpnuat.citi.com
- mwdcspod.desktopauth.asia.citi.com
- mwdcspod.desktopauth.europe.citi.com
- mymortgage.citi.com
- nonconfig.desktopauth.asia.citi.com
- nonconfig.desktopauth.europe.citi.com
- pymtexchange.citi.com
- qrdcspod.desktopauth.europe.citi.com
- rdc.desktopauth.asia.citi.com
- rdc.desktopauth.europe.citi.com
- rdcspod.desktopauth.asia.citi.com
- rdcspod.desktopauth.europe.citi.com
- ruth.desktopauth.asia.citi.com
- ruth.desktopauth.europe.citi.com
- sgbdu38.desktopauth.asia.citi.com
- sgbdu38.desktopauth.europe.citi.com
- sgbdu38spod.desktopauth.asia.citi.com
- sgbdu38spod.desktopauth.europe.citi.com
- sit58.online.citi.com
- swdc.desktopauth.asia.citi.com
- swdc.desktopauth.europe.citi.com
- swdcspod.desktopauth.asia.citi.com
- swdcspod.desktopauth.europe.citi.com
- tts.api.citi.com
- tts.apib2b.citi.com
- tts.developer.citi.com
- tts.icgservices.citi.com
- tts.sandbox.api.citi.com
- tts.sandbox.developer.citi.com
- uat.backoffice.bicbanamex.citi.com
- uat.bicbanamex.citi.com
- uat.citi.com
- uat.desktopauth.asia.citi.com
- uat.desktopauth.citi.com
- uat.mypcauth.citi.com
- uat.portal.communityinvestinganddevelopment.citi.com
- uat.report.nacustomerexperience.citi.com
- uat.vpn.citi.com
- uat01.citi.com
- uat02.citi.com
- uat03.citi.com
- uat04.citi.com
- uat1.bf.mymortgage.citi.com
- uat1.mymortgage.citi.com
- view.ccb10.citi.com
- vpnuat.citi.com
- webqa01.citi.com
- webqa02.citi.com
- www.accountonline.citi.com
- www.citi.com
- www.desktopauth.asia.citi.com
- www.desktopauth.europe.citi.com
- www.vpnuat.citi.com
62 servers already protected
- account.citi.com
- aspac.cgw.partner.citi.com
- aspac.partner.citi.com
- b2badmin.citipaymentexchange.citi.com
- b2bapi.citipaymentexchange.citi.com
- b2bclient.citipaymentexchange.citi.com
- b2bportal.citipaymentexchange.citi.com
- b2capi.citipaymentexchange.citi.com
- b2cportal.citipaymentexchange.citi.com
- bankportal.citipaymentexchange.citi.com
- careers.citi.com
- cfptt.citi.com
- cgw.nam.partner.citi.com
- clientportal.citipaymentexchange.citi.com
- contents1.00220.citi.com
- contents2.00220.citi.com
- dev1.aemapi.citi.com
- dev1.services.citi.com
- dev2.aemapi.citi.com
- dev2.services.citi.com
- dev3.aemapi.citi.com
- dev3.services.citi.com
- docs.citi.com
- emea.psd.partner.b2b.citi.com
- gtdc.stage.aemapi.citi.com
- hk.partner.citi.com
- icg.citi.com
- image.ccb10.citi.com
- image.indiacommunications.citi.com
- jobs.citi.com
- lifeandmoney.citi.com
- partner.c2b.citi.com
- partner.citi.com
- perf.emea.psd.partner.b2b.citi.com
- perf.services.citi.com
- privatebank.citi.com
- qa1.aemapi.citi.com
- qa2.aemapi.citi.com
- qa3.aemapi.citi.com
- sit.emea.psd.partner.b2b.citi.com
- sit1.cgw.nam.partner.b2b.citi.com
- sit1.cgw.nam.partner.citi.com
- sit2.cgw.nam.partner.citi.com
- stage.aemapi.citi.com
- stage.preview.aemapi.citi.com
- swdc.stage.aemapi.citi.com
- test03.accountonline.citi.com
- tts.sandbox.apib2b.citi.com
- uat.csmsuppliers.citi.com
- uat.emea.psd.partner.b2b.citi.com
- uat.lifeandmoney.citi.com
- uat1.cgw.nam.partner.b2b.citi.com
- uat1.cgw.nam.partner.citi.com
- uat1.services.citi.com
- uat2.cgw.nam.partner.citi.com
- uat2.services.citi.com
- uat3.services.citi.com
- wiresuat1.citi.com
- wiresuat2.citi.com
- www.icg.citi.com
- www.lifeandmoney.citi.com
- www.privatebank.citi.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Citi?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/citi.com"><img src="https://latticescan.com/badge/readiness/citi.com" alt="quantum readiness"></a>