Is Morgan Stanley quantum-safe?
Partly. 101 of 161 public servers under morganstanley.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- gateway-ap-a.lab.morganstanley.com
- gateway-ap-b.lab.morganstanley.com
- gateway-ap-ica.lab.morganstanley.com
- gateway-ap.lab.morganstanley.com
- gateway-eu-a.lab.morganstanley.com
- gateway-eu-b.lab.morganstanley.com
- gateway-eu-ica.lab.morganstanley.com
- gateway-eu.lab.morganstanley.com
- gateway-na-a.lab.morganstanley.com
- gateway-na-b.lab.morganstanley.com
- gateway-na-ica.lab.morganstanley.com
- gateway-na.lab.morganstanley.com
48 other servers without post-quantum key exchange
- adfs.lab.morganstanley.com
- adobeedge.morganstanley.com
- aovpn-au.morganstanley.com
- aovpn-cn.morganstanley.com
- aovpn-do2.morganstanley.com
- aovpn-do3.morganstanley.com
- aovpn-ef01.morganstanley.com
- aovpn-ef02.morganstanley.com
- aovpn-eh01.morganstanley.com
- aovpn-eu.morganstanley.com
- aovpn-fx38.morganstanley.com
- aovpn-fz38.morganstanley.com
- aovpn-hk.morganstanley.com
- aovpn-in.morganstanley.com
- aovpn-jp.morganstanley.com
- aovpn-kd07.morganstanley.com
- aovpn-kj07.morganstanley.com
- aovpn-ng29.morganstanley.com
- aovpn-rz29.morganstanley.com
- aovpn-sg.morganstanley.com
- aovpn-uat.morganstanley.com
- aovpn-zg01.morganstanley.com
- aovpn-zi01.morganstanley.com
- aovpn.morganstanley.com
- benefits.morganstanley.com
- cmgprodus1.morganstanley.com
- cmgprodus2.morganstanley.com
- cmguatus1.morganstanley.com
- emmdev.morganstanley.com
- emmna.morganstanley.com
- emmqa.morganstanley.com
- m.cm.morganstanley.com
- m.cm1.morganstanley.com
- m.mufg.morganstanley.com
- metrics.morganstanley.com
- morganstanley.com
- mstxt-uat.morganstanley.com
- mstxt.morganstanley.com
- mybenefits.morganstanley.com
- onboard.morganstanley.com
- origin-www.morganstanley.com
- smetrics.morganstanley.com
- starget.morganstanley.com
- t.cm.morganstanley.com
- t.cm1.morganstanley.com
- t.mufg.morganstanley.com
- video.morganstanley.com
- www.morganstanley.com
101 servers already protected
- adv.morganstanley.com
- advisor.morganstanley.com
- alphas-uat.morganstanley.com
- alphas.morganstanley.com
- analytics.morganstanley.com
- api-dev-t1.morganstanley.com
- api-dev-t2.morganstanley.com
- api-dev.morganstanley.com
- api-im-dev.morganstanley.com
- api-im-qa.morganstanley.com
- api-im.morganstanley.com
- api-t1.morganstanley.com
- api-t2.morganstanley.com
- api-uat-t1.morganstanley.com
- api-uat-t2.morganstanley.com
- api-uat.morganstanley.com
- api.morganstanley.com
- atwork.morganstanley.com
- brand-uat.morganstanley.com
- brand.morganstanley.com
- ceportal.morganstanley.com
- cod-api-t1.morganstanley.com
- cod-api-t2.morganstanley.com
- cod-api.morganstanley.com
- codetogive.morganstanley.com
- crm.morganstanley.com
- developer-mgmt-t1.morganstanley.com
- developer-mgmt-t2.morganstanley.com
- developer-mgmt.morganstanley.com
- developer-t1.morganstanley.com
- developer-t2.morganstanley.com
- developer.morganstanley.com
- directed.morganstanley.com
- edpvpnby.morganstanley.com
- edpvpncp.morganstanley.com
- em-uat.morganstanley.com
- em.morganstanley.com
- emmap-api.morganstanley.com
- emmeu-api.morganstanley.com
- emmna-api.morganstanley.com
- emmqaapi.morganstanley.com
- emmuat-api.morganstanley.com
- etp-uat.morganstanley.com
- etp.morganstanley.com
- expense.morganstanley.com
- fa.morganstanley.com
- fundlogic.morganstanley.com
- gateway-cloud-ap.lab.morganstanley.com
- gateway-cloud-eu.lab.morganstanley.com
- gateway-cloud-na.lab.morganstanley.com
- graph-uat.morganstanley.com
- graph.morganstanley.com
- graystone.morganstanley.com
- linkback.morganstanley.com
- msfs-uat.morganstanley.com
- msfs.morganstanley.com
- msiia.morganstanley.com
- mydesk-dev.morganstanley.com
- mydesk-qa.morganstanley.com
- mydesk-uat.morganstanley.com
- mydesk.morganstanley.com
- octopus-im.morganstanley.com
- ourhistory.morganstanley.com
- pgs.morganstanley.com
- prod-mssip.morganstanley.com
- psrs-qa.morganstanley.com
- psrs.morganstanley.com
- pwm.morganstanley.com
- qa07sfx.morganstanley.com
- qa1crm.morganstanley.com
- qa1sfx.morganstanley.com
- remote-dev.morganstanley.com
- remote-qa.morganstanley.com
- remote-uat.morganstanley.com
- remote.morganstanley.com
- res.cm.morganstanley.com
- res.cm1.morganstanley.com
- res.mufg.morganstanley.com
- research.morganstanley.com
- saml.morganstanley.com
- samluat.morganstanley.com
- sfx.morganstanley.com
- sp-uat.morganstanley.com
- sp.morganstanley.com
- stockplan.morganstanley.com
- thrive.morganstanley.com
- thrivedev.morganstanley.com
- uat-adv.morganstanley.com
- uat-as.morganstanley.com
- uat-mssip.morganstanley.com
- uat.morganstanley.com
- uatcrm.morganstanley.com
- vault-uat.morganstanley.com
- vault.morganstanley.com
- vault1-uat.morganstanley.com
- webapi-im.morganstanley.com
- workplace.morganstanley.com
- ws.api.morganstanley.com
- www.etp.morganstanley.com
- www.sp.morganstanley.com
- www2.morganstanley.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Morgan Stanley?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/morganstanley.com"><img src="https://latticescan.com/badge/readiness/morganstanley.com" alt="quantum readiness"></a>