Is PNC quantum-safe?
Partly. 68 of 82 public servers under pnc.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
14 other servers without post-quantum key exchange
- analytics.pnc.com
- click.e.pnc.com
- cloud.e.pnc.com
- cwp.pnc.com
- ftk-gf1.pnc.com
- ftk-gf2.pnc.com
- ftk.pnc.com
- media.pnc.com
- pages.e.pnc.com
- pncfirst-auth.pnc.com
- pncfirst-ocp.pnc.com
- pncfirst.pnc.com
- tools.pnc.com
- view.e.pnc.com
68 servers already protected
- api-gw-ift-qa.pnc.com
- api-gw-sse-qa.pnc.com
- api-mtls-gw-lto.pnc.com
- api.pnc.com
- apilink-app-aox.pnc.com
- apilink-app-mbl.pnc.com
- apps-loc.pnc.com
- apps.pnc.com
- auth.pnc.com
- cap-cb-qa.pnc.com
- cap-cb-test-qa.pnc.com
- cap-qa.pnc.com
- cap-wb-qa.pnc.com
- cap-wb-test-qa.pnc.com
- capitalmarkets.pnc.com
- careers.pnc.com
- cashunlimited.pnc.com
- cib-auth-qa.pnc.com
- cib-web-qa.pnc.com
- cib-web-test-qa.pnc.com
- cib-web.pnc.com
- cldguide.pnc.com
- developer.pnc.com
- forms.pnc.com
- ihub.pnc.com
- kyc.pnc.com
- links-qa.pnc.com
- links.pnc.com
- locator.pnc.com
- login.pnc.com
- m.pnc.com
- mlgipauth-qa.pnc.com
- mobile-qa.pnc.com
- mobile.pnc.com
- payment.pnc.com
- pinacle.pnc.com
- playlist.pnc.com
- pnc.com
- pncalts-qa.pnc.com
- pncalts.pnc.com
- pncfirst-qa.pnc.com
- pncpaid-qa.pnc.com
- pncpaid.pnc.com
- pncpaid2-qa.pnc.com
- pncpoints.pnc.com
- portal.pnc.com
- rdw3ast-1-qa.pnc.com
- rdw3ast-2-qa.pnc.com
- rdw3ast2-1-qa.pnc.com
- rdw3ast2-2-qa.pnc.com
- rdw3ast2.pnc.com
- secure-api-mobile.pnc.com
- secure-api-qa.pnc.com
- secure-api.pnc.com
- secure-qa.apply.pnc.com
- secure-qa.shop.pnc.com
- secure.apply.pnc.com
- secure.idscan.pnc.com
- secure.pnc.com
- secure.shop.pnc.com
- servicelinkqa.pnc.com
- statements-qa.pnc.com
- statements.pnc.com
- treasury-mobile.pnc.com
- voyager.pnc.com
- wealthtools-qa.pnc.com
- webqa.pncpoints.pnc.com
- www.pnc.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at PNC?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/pnc.com"><img src="https://latticescan.com/badge/readiness/pnc.com" alt="quantum readiness"></a>