Is NatWest quantum-safe?
Partly. 67 of 196 public servers under natwest.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 18, 2026.
Grade
C
Quantum-safe
34%
Servers reached
196
Fix first
22
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api-dlp-prd.natwest.com
- api-dlp-tst.natwest.com
- api-gcp-ats-mr.natwest.com
- api-governance.pricing.natwest.com
- api-ingress-cto.natwest.com
- api.agent-response.corastaging.natwest.com
- api.bankline.securebusiness.natwest.com
- api.banklinedirect.natwest.com
- api.cms-proving.natwest.com
- api.cms.natwest.com
- api.mobilebankline.natwest.com
- api.natwest.com
- api.pre-prod.pay.natwest.com
- api.pricing.natwest.com
- api.prod.pay.natwest.com
- auth0.securebanking.natwest.com
- auth0.securebusiness.natwest.com
- auth0z2.securebanking.natwest.com
- login.autopay-online.natwest.com
- remote-ch.natwest.com
- secure1t.natwest.com
- update.natwest.com
107 other servers without post-quantum key exchange
- accelerator.natwest.com
- api.dev.pay.natwest.com
- api.sandbox.acc.natwest.com
- api.sandbox.natwest.com
- api.test.pay.natwest.com
- apply.natwest.com
- auth.sandbox.natwest.com
- autopay-online.natwest.com
- autopay.natwest.com
- beta-api.natwest.com
- beta-consent.natwest.com
- businesscard.natwest.com
- carbonplanner.natwest.com
- chatcora.natwest.com
- ci.natwest.com
- cms.natwest.com
- consent.natwest.com
- cora.test.natwest.com
- corastaging.natwest.com
- customerportal.natwest.com
- dbadvisor.natwest.com
- debitcardsave.natwest.com
- dev-api.awscdna.natwest.com
- dev-api.awsfhs.natwest.com
- dev-api.pricing.natwest.com
- dev-openapi.natwest.com
- eforms-lwbr-rb.natwest.com
- events.natwest.com
- iamapi1.natwest.com
- live.hermes.natwest.com
- locator.natwest.com
- loginwithcora.natwest.com
- m.mail.insights.natwest.com
- m.notifications.natwest.com
- m.smallbusiness.natwest.com
- m10.sdol.natwest.com
- m10.statements.natwest.com
- m10.updates.natwest.com
- m11.sdol.natwest.com
- m11.statements.natwest.com
- m11.updates.natwest.com
- m12.sdol.natwest.com
- m12.statements.natwest.com
- m12.updates.natwest.com
- m16.sdol.natwest.com
- m16.statements.natwest.com
- m16.updates.natwest.com
- m17.sdol.natwest.com
- m17.statements.natwest.com
- m17.updates.natwest.com
- m9.sdol.natwest.com
- m9.statements.natwest.com
- m9.updates.natwest.com
- marketinsights.natwest.com
- messaging.cora.natwest.com
- mgf.natwest.com
- mitek-id.natwest.com
- mqtt.chatcora.natwest.com
- nft-api.awscdna.natwest.com
- nft-api.awsfhs.natwest.com
- nft-api.natwest.com
- nft-api.pricing.natwest.com
- nft-openapi.natwest.com
- nft-proton-api.natwest.com
- ob.sandbox.natwest.com
- openapi.natwest.com
- payit-payout.natwest.com
- prd-api.awsfhs.natwest.com
- preprod-api.natwest.com
- preprod-openapi.natwest.com
- proton-api.natwest.com
- proton-openapi.natwest.com
- qa-openapi.natwest.com
- sc.natwest.com
- sit-api.awsfhs.natwest.com
- sit-openapi.natwest.com
- spa.mortgages.natwest.com
- supportcentre.natwest.com
- supportingyou.natwest.com
- t10.sdol.natwest.com
- t10.statements.natwest.com
- t10.updates.natwest.com
- t11.sdol.natwest.com
- t11.statements.natwest.com
- t11.updates.natwest.com
- t12.sdol.natwest.com
- t12.statements.natwest.com
- t12.updates.natwest.com
- t16.sdol.natwest.com
- t16.statements.natwest.com
- t16.updates.natwest.com
- t17.sdol.natwest.com
- t17.statements.natwest.com
- t17.updates.natwest.com
- t9.sdol.natwest.com
- t9.statements.natwest.com
- t9.updates.natwest.com
- tags.bankline.natwest.com
- tools.natwest.com
- tt.natwest.com
- www.bankline.natwest.com
- www.chatcora.natwest.com
- www.ci.natwest.com
- www.if-facflow.natwest.com
- www.offers.natwest.com
- www.tracker.natwest.com
- yourfeedback.natwest.com
67 servers already protected
- afbroker.natwest.com
- api.bankline.securebusiness-nft.natwest.com
- api.cms-nft-static.natwest.com
- api.cms-nft.natwest.com
- api.mobilebankline-nft.natwest.com
- apis-01.api-services-egress.natwest.com
- bdd.api.dev.dcp.natwest.com
- bdd.api.sit.dcp.natwest.com
- bookings.natwest.com
- broker-dev.natwest.com
- broker-qa.natwest.com
- broker.natwest.com
- business.natwest.com
- ccp.staff.natwest.com
- clearspend.natwest.com
- customer.ccp.natwest.com
- customer.hdxccp.natwest.com
- customercouncil.natwest.com
- cx.dev.dcp.natwest.com
- dev.dcb.natwest.com
- dev.mortgages.natwest.com
- docs.broker-dev.natwest.com
- docs.broker-qa.natwest.com
- docs.nitro.natwest.com
- eoi-dev.natwest.com
- eoi-qa.natwest.com
- homeinsurance.natwest.com
- iampnf-gw01-nft.natwest.com
- iampnf-gw01-sit.natwest.com
- idp-nft.retail.natwest.com
- idp-sit.retail.natwest.com
- intermediary.natwest.com
- invest.natwest.com
- investmentrisk.natwest.com
- jobs.natwest.com
- links.myrewards.natwest.com
- mail.offers.natwest.com
- mortgages.natwest.com
- natwest.com
- nft.mortgages.natwest.com
- onlinebanking.natwest.com
- personal.natwest.com
- preprod.video.natwest.com
- res10.sdol.natwest.com
- res10.updates.natwest.com
- res11.sdol.natwest.com
- res11.updates.natwest.com
- res12.sdol.natwest.com
- res12.updates.natwest.com
- res16.sdol.natwest.com
- res16.updates.natwest.com
- res17.sdol.natwest.com
- res17.updates.natwest.com
- res9.sdol.natwest.com
- res9.updates.natwest.com
- scrive.natwest.com
- securebusiness.natwest.com
- singleaccess.natwest.com
- sso.homeinsurance.natwest.com
- sso.premier.homeinsurance.natwest.com
- sso.tracker.homeinsurance.natwest.com
- test.staff.ccp.natwest.com
- testbed-scrive.natwest.com
- uat.mortgages.natwest.com
- www.broker-dev.natwest.com
- www.business.natwest.com
- www.natwest.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at NatWest?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/natwest.com"><img src="https://latticescan.com/badge/readiness/natwest.com" alt="quantum readiness"></a>