Is Huntington quantum-safe?
Partly. 136 of 235 public servers under huntington.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api-ext-int.huntington.com
- api-ext-mai.huntington.com
- api-ext-mam.huntington.com
- api-ext-tr.huntington.com
- api-fin-in.huntington.com
- api-fin-mai.huntington.com
- api-fin-mam.huntington.com
- api-fin-st.huntington.com
- api-fin-tr.huntington.com
- api-fin.huntington.com
- api-int.huntington.com
- api-mai.huntington.com
- api-mam.huntington.com
- api-tr.huntington.com
- api.huntington.com
- api.tprm.huntington.com
- secure-dv.gcp.huntington.com
- secure-st.gcp.huntington.com
- secure.gcp.huntington.com
80 other servers without post-quantum key exchange
- agw-ext-mtls.huntington.com
- agw-ext.huntington.com
- agw-in-ext-mtls.huntington.com
- agw-in-ext.huntington.com
- agw-in.huntington.com
- agw-mai-ext-mtls.huntington.com
- agw-mai-ext.huntington.com
- agw-mai.huntington.com
- agw-mam-ext-mtls.huntington.com
- agw-mam-ext.huntington.com
- agw-mam.huntington.com
- agw-qa-ext-mtls.huntington.com
- agw-qa-ext.huntington.com
- agw-qa.huntington.com
- agw-st-ext-mtls.huntington.com
- agw-st-ext.huntington.com
- agw-st.huntington.com
- agw-tr-ext-mtls.huntington.com
- agw.huntington.com
- api-ext-qa.huntington.com
- api-ext-stage.huntington.com
- api-fin-qa.huntington.com
- api-qa.huntington.com
- api-stage.huntington.com
- apply-qa1.qa.gcp.huntington.com
- apply-qa2.qa.gcp.huntington.com
- apply-qa3.qa.gcp.huntington.com
- apply-qa4.qa.gcp.huntington.com
- apply.pd.gcp.huntington.com
- calculators.huntington.com
- click.email.huntington.com
- cloud.huntington.com
- educators.huntington.com
- hnbcmg.huntington.com
- hnbcmgqa.huntington.com
- hnbdevportal.gcp.huntington.com
- ir.huntington.com
- metrics.huntington.com
- mock-agw-ext.huntington.com
- mock-agw-in-ext.huntington.com
- mock-agw-in.huntington.com
- mock-agw-mai-ext.huntington.com
- mock-agw-mai.huntington.com
- mock-agw-mam-ext.huntington.com
- mock-agw-mam.huntington.com
- mock-agw-qa-ext.huntington.com
- mock-agw-qa.huntington.com
- mock-agw-st-ext.huntington.com
- mock-agw-st.huntington.com
- mock-agw-tr-ext.huntington.com
- mock-agw-tr.huntington.com
- mock-agw.huntington.com
- mock-api-ext-int.huntington.com
- mock-api-ext-mai.huntington.com
- mock-api-ext-qa.huntington.com
- mock-api-ext-tr.huntington.com
- mock-api-ext.huntington.com
- mock-api-fin-mai.huntington.com
- mock-api-fin-mam.huntington.com
- mock-api-fin-qa.huntington.com
- mock-api-fin-st.huntington.com
- mock-api-fin-tr.huntington.com
- mock-api-fin.huntington.com
- mock-api-int.huntington.com
- mock-api-mai.huntington.com
- mock-api-mam.huntington.com
- mock-api-qa.huntington.com
- mock-api-stage.huntington.com
- mock-api-tr.huntington.com
- mock-api.huntington.com
- pages.email.huntington.com
- secure-qa.gcp.huntington.com
- securetracking.huntington.com
- smetrics.huntington.com
- starget.huntington.com
- tableaucloud.huntington.com
- test-rewards.huntington.com
- tprm.huntington.com
- view.email.huntington.com
- www.rewards.huntington.com
136 servers already protected
- acct-agg.huntington.com
- acct-agg.stage.huntington.com
- agw-tr-ext.huntington.com
- agw-tr.huntington.com
- als.rewards.huntington.com
- api-ext.huntington.com
- api-simulator-dv.huntington.com
- api-simulator-qa.huntington.com
- api-simulator.huntington.com
- api.lending.huntington.com
- apply-qa1.qa.huntington.com
- apply-qa2.qa.huntington.com
- apply-qa3.qa.huntington.com
- apply-qa4.qa.huntington.com
- apply.huntington.com
- arm-migrate.qa.huntington.com
- arm.huntington.com
- b2b-blend-1.qa.huntington.com
- b2b-blend-tr.huntington.com
- b2b-blend.huntington.com
- b2b.huntington.com
- b2b.qa.huntington.com
- b2s.rewards.huntington.com
- bclog.huntington.com
- bclogtest.huntington.com
- bcwup.huntington.com
- bcwuptest.huntington.com
- businessonline.huntington.com
- byod-1.qa.huntington.com
- byod-2.qa.huntington.com
- byod.huntington.com
- byod.stage.huntington.com
- careers.huntington.com
- cashvltivr.huntington.com
- cashvltivr.qa.huntington.com
- cat-als.rewards.huntington.com
- cat-b2s.rewards.huntington.com
- clerk.tprm.huntington.com
- cms-stage.huntington.com
- cms.huntington.com
- corporateactions.huntington.com
- developer-dv.huntington.com
- developer-qa.huntington.com
- developer.huntington.com
- digitallobby.huntington.com
- dp-ext-ent-gs.huntington.com
- dp-ext-ent-gw.huntington.com
- dp-ext-services.huntington.com
- escrowsolutions.huntington.com
- externalauth.huntington.com
- externalauth.qa.huntington.com
- hnbtpl-bau.qa.huntington.com
- hnbtpl.huntington.com
- huntington.com
- iav-test.huntington.com
- iav.huntington.com
- ic-uat.huntington.com
- ic.huntington.com
- image.email.huntington.com
- imaging.huntington.com
- imaging.stage.huntington.com
- ironline.huntington.com
- ironline.qa.huntington.com
- lbxwebex.huntington.com
- lbxwebex.qa.huntington.com
- lending.huntington.com
- login-in.huntington.com
- login-mai.huntington.com
- login-mam.huntington.com
- login-qa.huntington.com
- login-st.huntington.com
- login-tr.huntington.com
- login.huntington.com
- looplink.huntington.com
- m-businessonline.huntington.com
- m-qa2.qa.huntington.com
- m.huntington.com
- m.qa.huntington.com
- maintenance.huntington.com
- mock-api-ext-mam.huntington.com
- mock-api-fin-in.huntington.com
- mock-login-mai.huntington.com
- mock-login-mam.huntington.com
- netox01-dev.huntington.com
- netox01-int.huntington.com
- netox01-qa.huntington.com
- netox01-trng.huntington.com
- netox01.huntington.com
- netox02-int.huntington.com
- netoxbau-qa.huntington.com
- nextgen-circadia.huntington.com
- ofx.huntington.com
- ofx.stage.huntington.com
- onlinebanking.huntington.com
- onlinebanking.qa.huntington.com
- portal.huntington.com
- preview.dev.huntington.com
- preview.huntington.com
- preview.qa.huntington.com
- preview.stage.huntington.com
- preview2.dev.huntington.com
- preview2.qa.huntington.com
- register-ngc.huntington.com
- register-ngc.st.huntington.com
- reswareweb.huntington.com
- reswareweb.qa.huntington.com
- sagittaws.huntington.com
- sagittaws.qa.huntington.com
- secure-dv.huntington.com
- secure-qa.huntington.com
- secure-st.huntington.com
- secure.huntington.com
- secureweb.huntington.com
- secureweb.qa.huntington.com
- selfservice.huntington.com
- start-qa.huntington.com
- start.huntington.com
- taniumstornp.huntington.com
- taniumstorpd.huntington.com
- tfim.huntington.com
- tfim.qa.huntington.com
- tfim.stage.huntington.com
- vcapay.huntington.com
- vendorenroll.huntington.com
- verification-fl4.huntington.com
- virtualcard.huntington.com
- welcomelobby.huntington.com
- www.dev.huntington.com
- www.huntington.com
- www.mft.huntington.com
- www.mft.qa.huntington.com
- www.qa.huntington.com
- www.stage.huntington.com
- www.virtualcard.huntington.com
- www2.dev.huntington.com
- www2.qa.huntington.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Huntington?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/huntington.com"><img src="https://latticescan.com/badge/readiness/huntington.com" alt="quantum readiness"></a>