Is Nordea quantum-safe?
Partly. 76 of 97 public servers under nordea.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- remote.nordea.com
20 other servers without post-quantum key exchange
- analytics.nordea.com
- careers.nordea.com
- cb.nis.nordea.com
- click.nam.nordea.com
- cloud.nam.nordea.com
- cls.test.nordea.com
- epayment.nordea.com
- fxcards.nordea.com
- girolink.test02.nordea.com
- girolink.testint.nordea.com
- hh.nis.nordea.com
- link.nordea.com
- nordea.com
- open.nordea.com
- remote.preprod.nordea.com
- remotevhh01.nordea.com
- remotevhh02.nordea.com
- remotevoe01.nordea.com
- remotevoe02.nordea.com
- view.nam.nordea.com
76 servers already protected
- admin.nd.test01.nordea.com
- api-v2.nd.test01.nordea.com
- api.nd.test01.nordea.com
- api2.nd.test01.nordea.com
- app.businesscard.nordea.com
- app.nd.test01.nordea.com
- apps.nd.test01.nordea.com
- assets.nd.test01.nordea.com
- auth.nd.test01.nordea.com
- beta.nd.test01.nordea.com
- blog.nd.test01.nordea.com
- brand.nordea.com
- cct.nordea.com
- cdn.nd.test01.nordea.com
- ci.nd.test01.nordea.com
- cloud.nd.test01.nordea.com
- content.nordea.com
- data.nd.test01.nordea.com
- demo-app.nordea.com
- demo.nd.test01.nordea.com
- dev.nd.test01.nordea.com
- docs.nd.test01.nordea.com
- edge.nd.test01.nordea.com
- event.nd.test01.nordea.com
- events.nd.test01.nordea.com
- fleet.nd.test01.nordea.com
- ftp.nd.test01.nordea.com
- git.nd.test01.nordea.com
- gitlab.nd.test01.nordea.com
- go.nd.test01.nordea.com
- gw.nd.test01.nordea.com
- help.nd.test01.nordea.com
- id.nd.test01.nordea.com
- images.nd.test01.nordea.com
- imap.nd.test01.nordea.com
- img.nd.test01.nordea.com
- iot.nd.test01.nordea.com
- jobs.nd.test01.nordea.com
- kyc.nd.test01.nordea.com
- kyc.nordea.com
- link.nd.test01.nordea.com
- login.nd.test01.nordea.com
- m.nd.test01.nordea.com
- mail.nd.test01.nordea.com
- media.nd.test01.nordea.com
- mx.nd.test01.nordea.com
- my.nd.test01.nordea.com
- ndwem.preprod.nordea.com
- news.nd.test01.nordea.com
- ns1.nd.test01.nordea.com
- ns2.nd.test01.nordea.com
- oauth.nd.test01.nordea.com
- open.nd.test01.nordea.com
- ota.nd.test01.nordea.com
- otc.nd.test01.nordea.com
- pay.nd.test01.nordea.com
- press.nd.test01.nordea.com
- pro.nd.test01.nordea.com
- promo.nd.test01.nordea.com
- sftp.nd.test01.nordea.com
- shop.nd.test01.nordea.com
- smtp.nd.test01.nordea.com
- sso.nd.test01.nordea.com
- stage.nd.test01.nordea.com
- stat.nd.test01.nordea.com
- stats.nd.test01.nordea.com
- store.nd.test01.nordea.com
- test.nd.test01.nordea.com
- trade.nd.test01.nordea.com
- uat.nd.test01.nordea.com
- vip.nd.test01.nordea.com
- vpn.nd.test01.nordea.com
- ws.nd.test01.nordea.com
- wss.nd.test01.nordea.com
- www.nd.test01.nordea.com
- www.nordea.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Nordea?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/nordea.com"><img src="https://latticescan.com/badge/readiness/nordea.com" alt="quantum readiness"></a>