Is Regions quantum-safe?
Partly. 140 of 223 public servers under regions.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api-associate-us-east-1-a.relationshipiq.regions.com
- api-associate-us-east-1-b.relationshipiq.regions.com
- api-associate-us-east-2-a.relationshipiq.regions.com
- api-associate-us-east-2-b.relationshipiq.regions.com
- api-client-us-east-1-a.relationshipiq.regions.com
- api-client-us-east-1-b.relationshipiq.regions.com
- api-client-us-east-2-a.relationshipiq.regions.com
- api-client-us-east-2-b.relationshipiq.regions.com
- api-us-east-1-a.demographics.regions.com
- api-us-east-1-a.relationshipiq.regions.com
- api-us-east-1-b.demographics.regions.com
- api-us-east-1-b.relationshipiq.regions.com
- api-us-east-1.relationshipiq.regions.com
- api-us-east-2-a.demographics.regions.com
- api-us-east-2-a.relationshipiq.regions.com
- api-us-east-2-b.demographics.regions.com
- api-us-east-2-b.relationshipiq.regions.com
- api-us-east-2.relationshipiq.regions.com
- api-wmivs-us-east-1-a.wmivs.regions.com
- api-wmivs-us-east-1-b.wmivs.regions.com
- api-wmpor-us-east-1-a.portal.wmpor.regions.com
- api-wmpor-us-east-1-b.portal.wmpor.regions.com
- api-wmtm-us-east-1-a.wmtm.regions.com
- api-wmtm-us-east-1-b.wmtm.regions.com
- api.businessapply.regions.com
- api.demographics.regions.com
- api.idea.regions.com
- api.portal.wmpor.regions.com
- api.relationshipiq.regions.com
- api.wmivs.regions.com
- api.wmops.regions.com
- api.wmtm.regions.com
- developer.regions.com
50 other servers without post-quantum key exchange
- appdemo.rhif.regions.com
- application.rhif.regions.com
- brandvault.regions.com
- businessvisa.regions.com
- cambriaapp.rhif.regions.com
- campaigns.regions.com
- centralboiler.rhif.regions.com
- click.fi.regions.com
- click.mail.regions.com
- cloud.fi.regions.com
- cloud.mail.regions.com
- contributions.regions.com
- ctre.regions.com
- eap-api.regions.com
- egiasales.rhif.regions.com
- embeds.rhif.regions.com
- esc-api.regions.com
- excess401k.regions.com
- fdp-rdx-proxy-v1.api.regions.com
- fms.rhif.regions.com
- fx.regions.com
- lenderapp.rhif.regions.com
- lockbox-api.regions.com
- lockbox-mgmt.regions.com
- maintenance.rhif.regions.com
- metrics.regions.com
- mfa.regions.com
- olbauth.regions.com
- partnerportal.rhif.regions.com
- rdomregpx.regions.com
- rdomstatpx.regions.com
- regionscommercialfed.regions.com
- regionssecuremail.regions.com
- relationshiprewards.regions.com
- reviews.rhif.regions.com
- rewards.regions.com
- securedata.regions.com
- servicing.rhif.regions.com
- smetrics.regions.com
- snap.regions.com
- spam.regions.com
- surveys.regions.com
- tlstest.regions.com
- tm.regions.com
- training.rhif.regions.com
- view.fi.regions.com
- view.mail.regions.com
- viewpoint.regions.com
- woodmaster.rhif.regions.com
- www.businessvisa.regions.com
140 servers already protected
- ablink.regions.com
- annuitynet.regions.com
- apply.regions.com
- applynow.regions.com
- appvx-splnk-hec-dr.regions.com
- appvx-splnk-hec-prod.regions.com
- arc.regions.com
- argo-sys-proxy.api.regions.com
- avant.regions.com
- awsc-splnk-hec-dr.regions.com
- awsc-splnk-hec-prod.regions.com
- bcn.regions.com
- behavioral1.regions.com
- behavioral2.regions.com
- behavioral3.regions.com
- behavioral4.regions.com
- behavioral5.regions.com
- behavioral6.regions.com
- blocked-notification.regions.com
- businessapply.regions.com
- careers.regions.com
- checkimage.regions.com
- ciam.api.regions.com
- claimsview.regions.com
- claimsviewdr.regions.com
- consent.regions.com
- consumer-loan.api.regions.com
- cpdt-splnk-hec-dr.regions.com
- cpdt-splnk-hec-prod.regions.com
- demographics.regions.com
- dlo.regions.com
- dpo-api.regions.com
- dpo.regions.com
- empowerapi-proxy.regions.com
- end-textbanking.api.regions.com
- end.regions.com
- espanol.regions.com
- expresstrade.regions.com
- expresstradedr.regions.com
- fasterpayments.regions.com
- fdp-adx-proxy-v1.api.regions.com
- flexid.regions.com
- fsc-crm-api.regions.com
- harn-splnk-hec-dr.regions.com
- harn-splnk-hec-prod.regions.com
- homeimprovement.rhif.regions.com
- ignite.api.regions.com
- image.email.regions.com
- image.mail.regions.com
- intersect.regions.com
- ir.regions.com
- itreasury.regions.com
- itreasurydemo.regions.com
- itreasuryelearning.regions.com
- jointhebank-api.regions.com
- jointhebank.regions.com
- lending.regions.com
- loans-api-gateway.regions.com
- loanstatus.regions.com
- lockbox.regions.com
- login-beta.regions.com
- login.regions.com
- logindirect.regions.com
- m.regions.com
- m3.regions.com
- m5.regions.com
- mailgun.regions.com
- mkt-ras-proxy-v6.api.regions.com
- mobileauth-a.regions.com
- mobileauth-b.regions.com
- mobileauth.regions.com
- myfeed.regions.com
- myiptoregions.regions.com
- nc-middleware-dr.regions.com
- nc-middleware.regions.com
- nc-ui-dr.regions.com
- nc-ui.regions.com
- newitreasurydemo.regions.com
- offers.regions.com
- offertracker.regions.com
- olbauth-a.regions.com
- olbauth-b.regions.com
- onepass.regions.com
- onepassauth-a.regions.com
- onepassauth-b.regions.com
- onepassauth.regions.com
- onepassdr.regions.com
- onlinebanking-dr.regions.com
- onlinebanking.regions.com
- onyxsecurityhec.regions.com
- origination.regions.com
- payeebuilder.regions.com
- portal.wmpor.regions.com
- qdm.regions.com
- qdmdr.regions.com
- quickdeposit.regions.com
- quickdepositb.regions.com
- rdib.regions.com
- rdice.regions.com
- rdoauth-a.regions.com
- rdoauth-b.regions.com
- rdoauth.regions.com
- realestate.regions.com
- regions.com
- regionsbusiness.regions.com
- regionsconsumer.regions.com
- regionswealth.regions.com
- relationshipiq.regions.com
- rhif.regions.com
- rmdapx.regions.com
- rooba-dev.regions.com
- rooba-qa.regions.com
- rooba-test.regions.com
- rooba.regions.com
- roobma.regions.com
- rsend-dev.regions.com
- rsend-dr.regions.com
- rsend-qa.regions.com
- rsend-test.regions.com
- rsend.regions.com
- securecenter.regions.com
- securepay-dr.regions.com
- securepay.regions.com
- selfservice.regions.com
- services.intersect.regions.com
- sfdc.regions.com
- sscp-exp-api.regions.com
- tmapi-auth-v1.api.regions.com
- tmapi-erp.api.regions.com
- www-a.regions.com
- www-b.regions.com
- www.regions.com
- yl-ivrservice.api.regions.com
- yl-loanservice.api.regions.com
- yourpix-dr.regions.com
- yourpix.regions.com
- yourpixstudio-dr.regions.com
- yourpixstudio.regions.com
- zsc-splnk-hec-dr.regions.com
- zsc-splnk-hec-prod.regions.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Regions?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/regions.com"><img src="https://latticescan.com/badge/readiness/regions.com" alt="quantum readiness"></a>