Is Santander quantum-safe?
Partly. 42 of 49 public servers under santander.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
7 other servers without post-quantum key exchange
- acvpn.santander.com
- acvpn2.santander.com
- envio.santander.com
- portalappsgt.santander.com
- securemail.santander.com
- vpnpagonxt.santander.com
- vpnpagonxtweu.santander.com
42 servers already protected
- admin-branchlocator.santander.com
- apis.hq.santander.com
- areaenaccion.santander.com
- areaenaccionfafhe.santander.com
- audify.santander.com
- back-branchlocator.santander.com
- bajasaccionistas.santander.com
- branchlocator.santander.com
- caceis.apis.pre.santander.com
- careers.santander.com
- cdn.encuestas.santander.com
- dev.santander.com
- dominios.santander.com
- east-us-internetclient.cards.apis.pre.santander.com
- east-us-internetclient.cards.apis.santander.com
- east-us-internetsandbox.cards.apis.pre.santander.com
- east-us-internetsandbox.cards.apis.santander.com
- east-us-sandbox.caceis.apis.pre.santander.com
- east-us.caceis.apis.pre.santander.com
- east-us.uruguay.apis.pre.santander.com
- east-us.uruguay.apis.santander.com
- encuestas.santander.com
- encuestasaccionistas.santander.com
- internetclient.ark.apis.pre.santander.com
- internetclient.ark.apis.santander.com
- internetclient.cards.apis.pre.santander.com
- internetclient.cards.apis.santander.com
- internetclient.dev.onetrade.santander.com
- internetclient.onetrade.santander.com
- internetclient.pre.onetrade.santander.com
- internetsandbox.cards.apis.pre.santander.com
- internetsandbox.cards.apis.santander.com
- moebius.santander.com
- oauth.hq.santander.com
- portalctx.santander.com
- pre.santander.com
- sandbox.caceis.apis.pre.santander.com
- santander.com
- waf.dev.santander.com
- waf.pre.santander.com
- waf.pro.santander.com
- www.santander.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Santander?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/santander.com"><img src="https://latticescan.com/badge/readiness/santander.com" alt="quantum readiness"></a>