LatticeScan

Are the banks quantum-safe?

Is Huntington quantum-safe?

Partly. 136 of 235 public servers under huntington.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.

Grade
B
Quantum-safe
58%
Servers reached
235
Fix first
19

Fix first

Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.

  • api-ext-int.huntington.com
  • api-ext-mai.huntington.com
  • api-ext-mam.huntington.com
  • api-ext-tr.huntington.com
  • api-fin-in.huntington.com
  • api-fin-mai.huntington.com
  • api-fin-mam.huntington.com
  • api-fin-st.huntington.com
  • api-fin-tr.huntington.com
  • api-fin.huntington.com
  • api-int.huntington.com
  • api-mai.huntington.com
  • api-mam.huntington.com
  • api-tr.huntington.com
  • api.huntington.com
  • api.tprm.huntington.com
  • secure-dv.gcp.huntington.com
  • secure-st.gcp.huntington.com
  • secure.gcp.huntington.com
80 other servers without post-quantum key exchange
  • agw-ext-mtls.huntington.com
  • agw-ext.huntington.com
  • agw-in-ext-mtls.huntington.com
  • agw-in-ext.huntington.com
  • agw-in.huntington.com
  • agw-mai-ext-mtls.huntington.com
  • agw-mai-ext.huntington.com
  • agw-mai.huntington.com
  • agw-mam-ext-mtls.huntington.com
  • agw-mam-ext.huntington.com
  • agw-mam.huntington.com
  • agw-qa-ext-mtls.huntington.com
  • agw-qa-ext.huntington.com
  • agw-qa.huntington.com
  • agw-st-ext-mtls.huntington.com
  • agw-st-ext.huntington.com
  • agw-st.huntington.com
  • agw-tr-ext-mtls.huntington.com
  • agw.huntington.com
  • api-ext-qa.huntington.com
  • api-ext-stage.huntington.com
  • api-fin-qa.huntington.com
  • api-qa.huntington.com
  • api-stage.huntington.com
  • apply-qa1.qa.gcp.huntington.com
  • apply-qa2.qa.gcp.huntington.com
  • apply-qa3.qa.gcp.huntington.com
  • apply-qa4.qa.gcp.huntington.com
  • apply.pd.gcp.huntington.com
  • calculators.huntington.com
  • click.email.huntington.com
  • cloud.huntington.com
  • educators.huntington.com
  • hnbcmg.huntington.com
  • hnbcmgqa.huntington.com
  • hnbdevportal.gcp.huntington.com
  • ir.huntington.com
  • metrics.huntington.com
  • mock-agw-ext.huntington.com
  • mock-agw-in-ext.huntington.com
  • mock-agw-in.huntington.com
  • mock-agw-mai-ext.huntington.com
  • mock-agw-mai.huntington.com
  • mock-agw-mam-ext.huntington.com
  • mock-agw-mam.huntington.com
  • mock-agw-qa-ext.huntington.com
  • mock-agw-qa.huntington.com
  • mock-agw-st-ext.huntington.com
  • mock-agw-st.huntington.com
  • mock-agw-tr-ext.huntington.com
  • mock-agw-tr.huntington.com
  • mock-agw.huntington.com
  • mock-api-ext-int.huntington.com
  • mock-api-ext-mai.huntington.com
  • mock-api-ext-qa.huntington.com
  • mock-api-ext-tr.huntington.com
  • mock-api-ext.huntington.com
  • mock-api-fin-mai.huntington.com
  • mock-api-fin-mam.huntington.com
  • mock-api-fin-qa.huntington.com
  • mock-api-fin-st.huntington.com
  • mock-api-fin-tr.huntington.com
  • mock-api-fin.huntington.com
  • mock-api-int.huntington.com
  • mock-api-mai.huntington.com
  • mock-api-mam.huntington.com
  • mock-api-qa.huntington.com
  • mock-api-stage.huntington.com
  • mock-api-tr.huntington.com
  • mock-api.huntington.com
  • pages.email.huntington.com
  • secure-qa.gcp.huntington.com
  • securetracking.huntington.com
  • smetrics.huntington.com
  • starget.huntington.com
  • tableaucloud.huntington.com
  • test-rewards.huntington.com
  • tprm.huntington.com
  • view.email.huntington.com
  • www.rewards.huntington.com
136 servers already protected
  • acct-agg.huntington.com
  • acct-agg.stage.huntington.com
  • agw-tr-ext.huntington.com
  • agw-tr.huntington.com
  • als.rewards.huntington.com
  • api-ext.huntington.com
  • api-simulator-dv.huntington.com
  • api-simulator-qa.huntington.com
  • api-simulator.huntington.com
  • api.lending.huntington.com
  • apply-qa1.qa.huntington.com
  • apply-qa2.qa.huntington.com
  • apply-qa3.qa.huntington.com
  • apply-qa4.qa.huntington.com
  • apply.huntington.com
  • arm-migrate.qa.huntington.com
  • arm.huntington.com
  • b2b-blend-1.qa.huntington.com
  • b2b-blend-tr.huntington.com
  • b2b-blend.huntington.com
  • b2b.huntington.com
  • b2b.qa.huntington.com
  • b2s.rewards.huntington.com
  • bclog.huntington.com
  • bclogtest.huntington.com
  • bcwup.huntington.com
  • bcwuptest.huntington.com
  • businessonline.huntington.com
  • byod-1.qa.huntington.com
  • byod-2.qa.huntington.com
  • byod.huntington.com
  • byod.stage.huntington.com
  • careers.huntington.com
  • cashvltivr.huntington.com
  • cashvltivr.qa.huntington.com
  • cat-als.rewards.huntington.com
  • cat-b2s.rewards.huntington.com
  • clerk.tprm.huntington.com
  • cms-stage.huntington.com
  • cms.huntington.com
  • corporateactions.huntington.com
  • developer-dv.huntington.com
  • developer-qa.huntington.com
  • developer.huntington.com
  • digitallobby.huntington.com
  • dp-ext-ent-gs.huntington.com
  • dp-ext-ent-gw.huntington.com
  • dp-ext-services.huntington.com
  • escrowsolutions.huntington.com
  • externalauth.huntington.com
  • externalauth.qa.huntington.com
  • hnbtpl-bau.qa.huntington.com
  • hnbtpl.huntington.com
  • huntington.com
  • iav-test.huntington.com
  • iav.huntington.com
  • ic-uat.huntington.com
  • ic.huntington.com
  • image.email.huntington.com
  • imaging.huntington.com
  • imaging.stage.huntington.com
  • ironline.huntington.com
  • ironline.qa.huntington.com
  • lbxwebex.huntington.com
  • lbxwebex.qa.huntington.com
  • lending.huntington.com
  • login-in.huntington.com
  • login-mai.huntington.com
  • login-mam.huntington.com
  • login-qa.huntington.com
  • login-st.huntington.com
  • login-tr.huntington.com
  • login.huntington.com
  • looplink.huntington.com
  • m-businessonline.huntington.com
  • m-qa2.qa.huntington.com
  • m.huntington.com
  • m.qa.huntington.com
  • maintenance.huntington.com
  • mock-api-ext-mam.huntington.com
  • mock-api-fin-in.huntington.com
  • mock-login-mai.huntington.com
  • mock-login-mam.huntington.com
  • netox01-dev.huntington.com
  • netox01-int.huntington.com
  • netox01-qa.huntington.com
  • netox01-trng.huntington.com
  • netox01.huntington.com
  • netox02-int.huntington.com
  • netoxbau-qa.huntington.com
  • nextgen-circadia.huntington.com
  • ofx.huntington.com
  • ofx.stage.huntington.com
  • onlinebanking.huntington.com
  • onlinebanking.qa.huntington.com
  • portal.huntington.com
  • preview.dev.huntington.com
  • preview.huntington.com
  • preview.qa.huntington.com
  • preview.stage.huntington.com
  • preview2.dev.huntington.com
  • preview2.qa.huntington.com
  • register-ngc.huntington.com
  • register-ngc.st.huntington.com
  • reswareweb.huntington.com
  • reswareweb.qa.huntington.com
  • sagittaws.huntington.com
  • sagittaws.qa.huntington.com
  • secure-dv.huntington.com
  • secure-qa.huntington.com
  • secure-st.huntington.com
  • secure.huntington.com
  • secureweb.huntington.com
  • secureweb.qa.huntington.com
  • selfservice.huntington.com
  • start-qa.huntington.com
  • start.huntington.com
  • taniumstornp.huntington.com
  • taniumstorpd.huntington.com
  • tfim.huntington.com
  • tfim.qa.huntington.com
  • tfim.stage.huntington.com
  • vcapay.huntington.com
  • vendorenroll.huntington.com
  • verification-fl4.huntington.com
  • virtualcard.huntington.com
  • welcomelobby.huntington.com
  • www.dev.huntington.com
  • www.huntington.com
  • www.mft.huntington.com
  • www.mft.qa.huntington.com
  • www.qa.huntington.com
  • www.stage.huntington.com
  • www.virtualcard.huntington.com
  • www2.dev.huntington.com
  • www2.qa.huntington.com

What this means

NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.

Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.

Follow Huntington

One email when the grade changes. Re-scanned every week.

Follow the grade

Work at Huntington?

Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.

Scan your own domain

Badge

Shows the current grade and updates itself. Anyone may embed it.

quantum readiness of huntington.com
<a href="https://latticescan.com/readiness/huntington.com"><img src="https://latticescan.com/badge/readiness/huntington.com" alt="quantum readiness"></a>