Is Goldman Sachs quantum-safe?
Yes, on every public server we could reach. 20 of 20 public servers under goldmansachs.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade A. Scanned October 18, 2026.
20 servers already protected
- alumni.goldmansachs.com
- beta.goldmansachs.com
- beta.uat.goldmansachs.com
- dsp.goldmansachs.com
- goldmansachs.com
- pilot.dsp.goldmansachs.com
- pilot.uat.dsp.goldmansachs.com
- privatewealth.goldmansachs.com
- qa.privatewealth.goldmansachs.com
- video.goldmansachs.com
- www.alumni.goldmansachs.com
- www.beta.goldmansachs.com
- www.beta.uat.goldmansachs.com
- www.dsp.goldmansachs.com
- www.goldmansachs.com
- www.pilot.dsp.goldmansachs.com
- www.pilot.uat.dsp.goldmansachs.com
- www2.goldmansachs.com
- wwwqa.goldmansachs.com
- wwwqa2.goldmansachs.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Goldman Sachs?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/goldmansachs.com"><img src="https://latticescan.com/badge/readiness/goldmansachs.com" alt="quantum readiness"></a>