Is Erste Group quantum-safe?
Partly. 93 of 176 public servers under erstegroup.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Grade
B
Quantum-safe
53%
Servers reached
176
Fix first
2
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- mobile-log-a.erstegroup.com
- mobile-log-p.erstegroup.com
81 other servers without post-quantum key exchange
- assets.erstegroup.com
- at.content.gem.erstegroup.com
- at.content.gem.fat.erstegroup.com
- ba.content.gem.erstegroup.com
- ba.content.gem.fat.erstegroup.com
- bg.content.gem.erstegroup.com
- brandcentre.erstegroup.com
- consent.erstegroup.com
- cz.content.gem.erstegroup.com
- cz.content.gem.fat.erstegroup.com
- de.content.gem.erstegroup.com
- de.products.erstegroup.com
- deutschland.erstegroup.com
- developeridp.erstehub.fat.erstegroup.com
- developeridp.erstehub.sit.erstegroup.com
- eg.content.gem.erstegroup.com
- eg.content.gem.fat.erstegroup.com
- erstegroup.com
- erstegroupservices.erstegroup.com
- events.erstegroup.com
- fat.mig.erstegroup.com
- fds.erstegroup.com
- fds.fat.erstegroup.com
- fds.fit.erstegroup.com
- fit.mig.erstegroup.com
- george-at.content.gem.erstegroup.com
- george-at.content.gem.fat.erstegroup.com
- george-cz.content.gem.erstegroup.com
- george-cz.content.gem.fat.erstegroup.com
- george-hr.content.gem.erstegroup.com
- george-hr.content.gem.fat.erstegroup.com
- george-hu.content.gem.erstegroup.com
- george-hu.content.gem.fat.erstegroup.com
- george-ro.content.gem.erstegroup.com
- george-ro.content.gem.fat.erstegroup.com
- george-rs.content.gem.erstegroup.com
- george-rs.content.gem.fat.erstegroup.com
- george-sk.content.gem.erstegroup.com
- george-sk.content.gem.fat.erstegroup.com
- gr.erstegroup.com
- gr.fat.erstegroup.com
- gr.fit.erstegroup.com
- grusskarten.erstegroup.com
- hr.content.gem.erstegroup.com
- hr.content.gem.fat.erstegroup.com
- hu.content.gem.erstegroup.com
- hu.content.gem.fat.erstegroup.com
- idp-a.erstegroup.com
- idp-p.erstegroup.com
- idp.developers.erstegroup.com
- instantpayment.erstegroup.com
- instantpayment.fat.erstegroup.com
- internaljobmarket.erstegroup.com
- m.erstegroup.com
- me.content.gem.erstegroup.com
- mig.erstegroup.com
- mk.content.gem.erstegroup.com
- netfx.erstegroup.com
- netfxuat.erstegroup.com
- pl.content.gem.erstegroup.com
- quarantine.erstegroup.com
- rest-a.erstegroup.com
- rest-p.erstegroup.com
- ro.content.gem.erstegroup.com
- ro.content.gem.fat.erstegroup.com
- rs.content.gem.erstegroup.com
- rs.content.gem.fat.erstegroup.com
- si.content.gem.erstegroup.com
- si.content.gem.fat.erstegroup.com
- sk.content.gem.erstegroup.com
- sk.content.gem.fat.erstegroup.com
- sslvpn-sb.erstegroup.com
- sslvpn-uat.erstegroup.com
- sslvpn.erstegroup.com
- teamup.erstegroup.com
- webapi.developers.erstegroup.com
- webapi.erstehub.fat.erstegroup.com
- webapi.erstehub.sit.erstegroup.com
- www.deutschland.erstegroup.com
- www.digitaldesign.erstegroup.com
- www.teamup.erstegroup.com
93 servers already protected
- advisorservices.erstegroup.com
- advisorservices.fat.erstegroup.com
- api.scall.erstegroup.com
- cdn.erstegroup.com
- cdn.fat.erstegroup.com
- cdn.fit.erstegroup.com
- cdn0.erstegroup.com
- cdn0.fat.erstegroup.com
- cdn0.fit.erstegroup.com
- client.erstehub.fat.erstegroup.com
- client.erstehub.sit.erstegroup.com
- cmp.erstegroup.com
- cmp.fat.erstegroup.com
- cmp.fit.erstegroup.com
- confirming.erstegroup.com
- cz.products.erstegroup.com
- developers.erstegroup.com
- digitaldesign.erstegroup.com
- due-diligence.erstegroup.com
- due-diligence.fat.erstegroup.com
- dynatrace-clusterag.erstegroup.com
- ebics.erstegroup.com
- ebics.fat.erstegroup.com
- ecos.erstegroup.com
- ecos.fat.erstegroup.com
- edext-docaut-gw.erstegroup.com
- edext-docaut-gw.fat.erstegroup.com
- edext-docaut-gw.uat.erstegroup.com
- eleasing24.fat.erstegroup.com
- emil-demo.gem.fat.erstegroup.com
- emil.stage.erstegroup.com
- esg.erstegroup.com
- esg.fat.erstegroup.com
- esg.fit.erstegroup.com
- financial-health.erstegroup.com
- financial-health.fat.erstegroup.com
- financial-health.uat.erstegroup.com
- george-at.content.erstegroup.com
- george-at.content.fat.erstegroup.com
- george-at.content.pre-uat.erstegroup.com
- george-at.content.uat.erstegroup.com
- george-cz.content.erstegroup.com
- george-cz.content.fat.erstegroup.com
- george-cz.content.pre-uat.erstegroup.com
- george-cz.content.uat.erstegroup.com
- george-hr.content.erstegroup.com
- george-hr.content.fat.erstegroup.com
- george-hr.content.pre-uat.erstegroup.com
- george-hr.content.uat.erstegroup.com
- george-hu.content.erstegroup.com
- george-hu.content.fat.erstegroup.com
- george-hu.content.pre-uat.erstegroup.com
- george-hu.content.uat.erstegroup.com
- george-ro.content.erstegroup.com
- george-ro.content.fat.erstegroup.com
- george-ro.content.pre-uat.erstegroup.com
- george-ro.content.uat.erstegroup.com
- george-rs.content.erstegroup.com
- george-rs.content.fat.erstegroup.com
- george-rs.content.pre-uat.erstegroup.com
- george-rs.content.uat.erstegroup.com
- george-sk.content.erstegroup.com
- george-sk.content.fat.erstegroup.com
- george-sk.content.pre-uat.erstegroup.com
- george-sk.content.uat.erstegroup.com
- help.gem.fat.erstegroup.com
- help.gem.fit.erstegroup.com
- investments.erstegroup.com
- kibana.developers.erstegroup.com
- kibana.erstehub.fat.erstegroup.com
- kibana.erstehub.sit.erstegroup.com
- lux.erstegroup.com
- lux.fat.erstegroup.com
- nbca.erstegroup.com
- nbca.fat.erstegroup.com
- onboarding.erstegroup.com
- onboarding.fat.erstegroup.com
- onboarding.uat.erstegroup.com
- pds.erstegroup.com
- pds.fat.erstegroup.com
- pds.fit.erstegroup.com
- produkte.erstegroup.com
- reifenfreigabe.fat.erstegroup.com
- sc.erstegroup.com
- sc.fat.erstegroup.com
- sc.fit.erstegroup.com
- stage.mig.erstegroup.com
- testiny.erstegroup.com
- testiny.fat.erstegroup.com
- workspace.erstegroup.com
- www-csas-cz.content.erstegroup.com
- www-csas-cz.content.fat.erstegroup.com
- www.erstegroup.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Erste Group?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/erstegroup.com"><img src="https://latticescan.com/badge/readiness/erstegroup.com" alt="quantum readiness"></a>