LatticeScan

Are the banks quantum-safe?

Is Regions quantum-safe?

Partly. 140 of 223 public servers under regions.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.

Grade
B
Quantum-safe
63%
Servers reached
223
Fix first
33

Fix first

Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.

  • api-associate-us-east-1-a.relationshipiq.regions.com
  • api-associate-us-east-1-b.relationshipiq.regions.com
  • api-associate-us-east-2-a.relationshipiq.regions.com
  • api-associate-us-east-2-b.relationshipiq.regions.com
  • api-client-us-east-1-a.relationshipiq.regions.com
  • api-client-us-east-1-b.relationshipiq.regions.com
  • api-client-us-east-2-a.relationshipiq.regions.com
  • api-client-us-east-2-b.relationshipiq.regions.com
  • api-us-east-1-a.demographics.regions.com
  • api-us-east-1-a.relationshipiq.regions.com
  • api-us-east-1-b.demographics.regions.com
  • api-us-east-1-b.relationshipiq.regions.com
  • api-us-east-1.relationshipiq.regions.com
  • api-us-east-2-a.demographics.regions.com
  • api-us-east-2-a.relationshipiq.regions.com
  • api-us-east-2-b.demographics.regions.com
  • api-us-east-2-b.relationshipiq.regions.com
  • api-us-east-2.relationshipiq.regions.com
  • api-wmivs-us-east-1-a.wmivs.regions.com
  • api-wmivs-us-east-1-b.wmivs.regions.com
  • api-wmpor-us-east-1-a.portal.wmpor.regions.com
  • api-wmpor-us-east-1-b.portal.wmpor.regions.com
  • api-wmtm-us-east-1-a.wmtm.regions.com
  • api-wmtm-us-east-1-b.wmtm.regions.com
  • api.businessapply.regions.com
  • api.demographics.regions.com
  • api.idea.regions.com
  • api.portal.wmpor.regions.com
  • api.relationshipiq.regions.com
  • api.wmivs.regions.com
  • api.wmops.regions.com
  • api.wmtm.regions.com
  • developer.regions.com
50 other servers without post-quantum key exchange
  • appdemo.rhif.regions.com
  • application.rhif.regions.com
  • brandvault.regions.com
  • businessvisa.regions.com
  • cambriaapp.rhif.regions.com
  • campaigns.regions.com
  • centralboiler.rhif.regions.com
  • click.fi.regions.com
  • click.mail.regions.com
  • cloud.fi.regions.com
  • cloud.mail.regions.com
  • contributions.regions.com
  • ctre.regions.com
  • eap-api.regions.com
  • egiasales.rhif.regions.com
  • embeds.rhif.regions.com
  • esc-api.regions.com
  • excess401k.regions.com
  • fdp-rdx-proxy-v1.api.regions.com
  • fms.rhif.regions.com
  • fx.regions.com
  • lenderapp.rhif.regions.com
  • lockbox-api.regions.com
  • lockbox-mgmt.regions.com
  • maintenance.rhif.regions.com
  • metrics.regions.com
  • mfa.regions.com
  • olbauth.regions.com
  • partnerportal.rhif.regions.com
  • rdomregpx.regions.com
  • rdomstatpx.regions.com
  • regionscommercialfed.regions.com
  • regionssecuremail.regions.com
  • relationshiprewards.regions.com
  • reviews.rhif.regions.com
  • rewards.regions.com
  • securedata.regions.com
  • servicing.rhif.regions.com
  • smetrics.regions.com
  • snap.regions.com
  • spam.regions.com
  • surveys.regions.com
  • tlstest.regions.com
  • tm.regions.com
  • training.rhif.regions.com
  • view.fi.regions.com
  • view.mail.regions.com
  • viewpoint.regions.com
  • woodmaster.rhif.regions.com
  • www.businessvisa.regions.com
140 servers already protected
  • ablink.regions.com
  • annuitynet.regions.com
  • apply.regions.com
  • applynow.regions.com
  • appvx-splnk-hec-dr.regions.com
  • appvx-splnk-hec-prod.regions.com
  • arc.regions.com
  • argo-sys-proxy.api.regions.com
  • avant.regions.com
  • awsc-splnk-hec-dr.regions.com
  • awsc-splnk-hec-prod.regions.com
  • bcn.regions.com
  • behavioral1.regions.com
  • behavioral2.regions.com
  • behavioral3.regions.com
  • behavioral4.regions.com
  • behavioral5.regions.com
  • behavioral6.regions.com
  • blocked-notification.regions.com
  • businessapply.regions.com
  • careers.regions.com
  • checkimage.regions.com
  • ciam.api.regions.com
  • claimsview.regions.com
  • claimsviewdr.regions.com
  • consent.regions.com
  • consumer-loan.api.regions.com
  • cpdt-splnk-hec-dr.regions.com
  • cpdt-splnk-hec-prod.regions.com
  • demographics.regions.com
  • dlo.regions.com
  • dpo-api.regions.com
  • dpo.regions.com
  • empowerapi-proxy.regions.com
  • end-textbanking.api.regions.com
  • end.regions.com
  • espanol.regions.com
  • expresstrade.regions.com
  • expresstradedr.regions.com
  • fasterpayments.regions.com
  • fdp-adx-proxy-v1.api.regions.com
  • flexid.regions.com
  • fsc-crm-api.regions.com
  • harn-splnk-hec-dr.regions.com
  • harn-splnk-hec-prod.regions.com
  • homeimprovement.rhif.regions.com
  • ignite.api.regions.com
  • image.email.regions.com
  • image.mail.regions.com
  • intersect.regions.com
  • ir.regions.com
  • itreasury.regions.com
  • itreasurydemo.regions.com
  • itreasuryelearning.regions.com
  • jointhebank-api.regions.com
  • jointhebank.regions.com
  • lending.regions.com
  • loans-api-gateway.regions.com
  • loanstatus.regions.com
  • lockbox.regions.com
  • login-beta.regions.com
  • login.regions.com
  • logindirect.regions.com
  • m.regions.com
  • m3.regions.com
  • m5.regions.com
  • mailgun.regions.com
  • mkt-ras-proxy-v6.api.regions.com
  • mobileauth-a.regions.com
  • mobileauth-b.regions.com
  • mobileauth.regions.com
  • myfeed.regions.com
  • myiptoregions.regions.com
  • nc-middleware-dr.regions.com
  • nc-middleware.regions.com
  • nc-ui-dr.regions.com
  • nc-ui.regions.com
  • newitreasurydemo.regions.com
  • offers.regions.com
  • offertracker.regions.com
  • olbauth-a.regions.com
  • olbauth-b.regions.com
  • onepass.regions.com
  • onepassauth-a.regions.com
  • onepassauth-b.regions.com
  • onepassauth.regions.com
  • onepassdr.regions.com
  • onlinebanking-dr.regions.com
  • onlinebanking.regions.com
  • onyxsecurityhec.regions.com
  • origination.regions.com
  • payeebuilder.regions.com
  • portal.wmpor.regions.com
  • qdm.regions.com
  • qdmdr.regions.com
  • quickdeposit.regions.com
  • quickdepositb.regions.com
  • rdib.regions.com
  • rdice.regions.com
  • rdoauth-a.regions.com
  • rdoauth-b.regions.com
  • rdoauth.regions.com
  • realestate.regions.com
  • regions.com
  • regionsbusiness.regions.com
  • regionsconsumer.regions.com
  • regionswealth.regions.com
  • relationshipiq.regions.com
  • rhif.regions.com
  • rmdapx.regions.com
  • rooba-dev.regions.com
  • rooba-qa.regions.com
  • rooba-test.regions.com
  • rooba.regions.com
  • roobma.regions.com
  • rsend-dev.regions.com
  • rsend-dr.regions.com
  • rsend-qa.regions.com
  • rsend-test.regions.com
  • rsend.regions.com
  • securecenter.regions.com
  • securepay-dr.regions.com
  • securepay.regions.com
  • selfservice.regions.com
  • services.intersect.regions.com
  • sfdc.regions.com
  • sscp-exp-api.regions.com
  • tmapi-auth-v1.api.regions.com
  • tmapi-erp.api.regions.com
  • www-a.regions.com
  • www-b.regions.com
  • www.regions.com
  • yl-ivrservice.api.regions.com
  • yl-loanservice.api.regions.com
  • yourpix-dr.regions.com
  • yourpix.regions.com
  • yourpixstudio-dr.regions.com
  • yourpixstudio.regions.com
  • zsc-splnk-hec-dr.regions.com
  • zsc-splnk-hec-prod.regions.com

What this means

NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.

Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.

Follow Regions

One email when the grade changes. Re-scanned every week.

Follow the grade

Work at Regions?

Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.

Scan your own domain

Badge

Shows the current grade and updates itself. Anyone may embed it.

quantum readiness of regions.com
<a href="https://latticescan.com/readiness/regions.com"><img src="https://latticescan.com/badge/readiness/regions.com" alt="quantum readiness"></a>