Is Deutsche Bank quantum-safe?

Partly. 97 of 202 public servers under db.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 18, 2026.

Grade

Quantum-safe

48%

Servers reached

202

Fix first

Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.

api-mtls.platform.db.com
api.apispace.db.com
api.baas.db.com
api.cards.db.com
api.cb-surveillance.db.com
api.corporatebank.db.com
api.digitalid.db.com
api.dpg.db.com
api.dubai.db.com
api.dwebcms.db.com
api.dws-iam.db.com
api.dws.db.com
api.ext.frontier.db.com
api.gcrs.db.com
api.ident-sign.db.com
api.int1.request-to-pay.db.com
api.int2.request-to-pay.db.com
api.ipb.db.com
api.nft.request-to-pay.db.com
api.opra.db.com
api.pbg.db.com
api.qcg.dpg.db.com
api.request-to-pay.db.com
api.sbx.corporatebank.db.com
api.sbx.dpg.db.com
api.sbx.request-to-pay.db.com
api.ses.db.com
api.sfeecalc.db.com
api.tas.db.com
api.teb.db.com
api.vop.db.com
app-autobahn.egslb.db.com
app-uk.autobahn.db.com
app.autobahn.db.com
gw.apispace.db.com
login-ny.isso.db.com
login-sg.isso.db.com
login-uk.isso.db.com
login.isso.db.com
login.isso.deutsche-bank.com.cn-waf-35102-2.db.com
login1-new.cdc.autobahnfo.db.com
login1-new.cth.autobahnfo.db.com
login1-new.gth.autobahnfo.db.com
login1-new.wtf.autobahnfo.db.com
login1-new.wtf.autobahnfo.gm.db.com
login2-new.hbr.autobahnfo.db.com
login2-new.kch.autobahnfo.db.com
secure-new.autobahnfo-sg.db.com
secure-new.autobahnfo-uk.db.com
secure-new.autobahnfo-us.db.com
secure.autobahnfo-sg.db.com
secure.autobahnfo-uk.db.com
secure.autobahnfo-us.db.com

52 other servers without post-quantum key exchange

agm.db.com
art.db.com
autobahn.db.com
brand.db.com
careers.db.com
china.db.com
dac.db.com
db-dc.db.com
dbartmag.db.com
dbdc.db.com
dbevents.db.com
dbnumis.db.com
dbras.db.com
dbrasweb.db.com
dbsteps.db.com
dev.cidp.db.com
dialin.db.com
dmil.db.com
dwo.db.com
dwoch.db.com
dwolux.db.com
dwouk.db.com
ebics.db.com
ebicsuat.db.com
egov-api.db.com
etf.db.com
flow.db.com
gp.xs2a.db.com
hongkong.db.com
idbook.db.com
japan.db.com
join.db.com
jss.db.com
mcp.baas.db.com
mit.db.com
myideal.db.com
news.db.com
plcmui.db.com
prd.xs2a.db.com
priips.db.com
pwm.db.com
sms.mtb.db.com
taiwan.db.com
tfe.db.com
uat.db.com
uk.mtb.db.com
vlm.db.com
www.db.com
www.etf.db.com
www.pwm.db.com
www.usa.db.com
xs2a.db.com

97 servers already protected

account.db.com
accounts.db.com
adr.db.com
adr.gtb.db.com
ais.db.com
ap.db.com
api-b1.prod.autobahnfx.db.com
api-p1.prod.autobahnfx.db.com
api.ail.db.com
api.businessbanking.db.com
api.consent.db.com
api.db.com
api.dbapi-sim.db.com
api.dbapi.db.com
api.dbonline.db.com
api.dbpi.db.com
api.frontier.db.com
api.gcp.developer.db.com
api.newrelic.db.com
api.platform.db.com
api.prod.autobahnfx.db.com
api.xdc.integration.db.com
app-uk.autobahnfx.db.com
aps.db.com
austria.db.com
auth.cidp-eu.db.com
belgium.db.com
blueport.db.com
canada.db.com
cbps.db.com
cca.db.com
ccas.db.com
cfc.db.com
cfc.dev.db.com
cfc.uat.db.com
cidp-eu.db.com
cidp.db.com
cidpext.db.com
country.db.com
daf-es.db.com
db-asl.db.com
db.com
dbimage.db.com
dbindex.db.com
dbone.db.com
dbonline.db.com
dbselect.db.com
dbwings.db.com
demo.vlm.db.com
developer.db.com
dpp-apps.db.com
easy3d.db.com
finland.db.com
fnbx.db.com
france.db.com
frontier.db.com
fsc-fm.db.com
fsf.cidp.db.com
hungary.db.com
identity.db.com
index.db.com
india.db.com
italy.db.com
korea.db.com
lp.tas.db.com
malaysia.db.com
mc.gm.db.com
mexico.db.com
ofat.pbc.db.com
pakistan.db.com
paytrack.db.com
poland.db.com
portal.brazil.db.com
portugal.db.com
russia.db.com
sg.dweb.db.com
sim-ap.db.com
sim-eu.db.com
sim-us.db.com
spain.db.com
sweden.db.com
tas.db.com
testwf.db.com
tss.gtb.db.com
tss.sfs.db.com
turkey.db.com
uat.cca.db.com
uat.vlm.db.com
ukraine.db.com
usa.db.com
vemex.db.com
vietnam.db.com
wealth.db.com
wrdo-es.db.com
wtk.db.com
www.adr.db.com
www.ap.db.com

What this means

NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.

Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.

Follow Deutsche Bank

One email when the grade changes. Re-scanned every week.

Follow the grade

Work at Deutsche Bank?

Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.

Scan your own domain

Badge

Shows the current grade and updates itself. Anyone may embed it.

<a href="https://latticescan.com/readiness/db.com"><img src="https://latticescan.com/badge/readiness/db.com" alt="quantum readiness"></a>