Is Standard Chartered quantum-safe?
Partly. 123 of 186 public servers under sc.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api-mmsp-connect.sc.com
- api-mmsp.sc.com
61 other servers without post-quantum key exchange
- arc.hkedm8mm.sc.com
- digitalpartnership.sc.com
- elink.sc.com
- hsts.sc.com
- img.hkedm8mm.sc.com
- inedmnc.sc.com
- info.sc.com
- interact-prodtw.sc.com
- jeedmact.sc.com
- job-interviews.sc.com
- legalcommercial.sc.com
- m.hk.sc.com
- m.sg.sc.com
- m2.campaignae.sc.com
- m2.campaigntw.sc.com
- m2.hk.sc.com
- m2.in.sc.com
- m2.msg.tw.sc.com
- m2.msg.vn.sc.com
- m2.sg.sc.com
- mail-content.fraudrisk-uat.sc.com
- mail-content.fraudrisk.sc.com
- mobilecontent.sc.com
- mobiletunnel.sc.com
- mstunnel.sc.com
- perspectives.sc.com
- psd-test.sc.com
- psd.sc.com
- pulse-dev.sc.com
- pulse-testing.sc.com
- pulse.sc.com
- s2bxmetals.hk.sc.com
- s2bxmetals.sc.com
- s2bxmetals.uk.sc.com
- s2bxmetals.us.sc.com
- scbameraegwb3.us.sc.com
- securemail.cloud1.sc.com
- securemail.sc.com
- smetrics.sc.com
- svc1.sc.com
- svc2.sc.com
- t.hk.sc.com
- t.sg.sc.com
- t2.campaignae.sc.com
- t2.campaigntw.sc.com
- t2.hk.sc.com
- t2.in.sc.com
- t2.msg.tw.sc.com
- t2.msg.vn.sc.com
- t2.sg.sc.com
- test-api-mmsp-connect.sc.com
- test-api-mmsp.sc.com
- test-mcp.s2bapi.sc.com
- test-open-banking.sc.com
- test.fm.sc.com
- trk.bdedmnc.sc.com
- trk.hkedm8mm.sc.com
- trk.ngedmnc.sc.com
- usub.hkedm8mm.sc.com
- web.msg.vn.sc.com
- wx.cn.sc.com
123 servers already protected
- ap.sc.com
- ap01.sc.com
- api.sc.com
- ask.sc.com
- av.sc.com
- brandcentre.sc.com
- cams.cn.sc.com
- cams.sc.com
- cardmanager.sc.com
- cms.sc.com
- cmsdev.sc.com
- cmsdr.sc.com
- cmsnr.aip.sc.com
- cmsnr.sc.com
- cmsnrdev.sc.com
- cmsnrstage.sc.com
- cmsstage.sc.com
- cnsd-wealth.cn.sc.com
- dcmdev.sc.com
- dev-mob-sme.sc.com
- dev-nr.sc.com
- dev.sc.com
- digital.sc.com
- employeesurveys.sc.com
- esptst.sc.com
- events.sc.com
- faspex.sc.com
- lending.hk.sc.com
- lending.sg.sc.com
- m.sc.com
- marketinformation.sc.com
- markets.sc.com
- mmsp.sc.com
- mobileapp.hk.sc.com
- myaccess.sc.com
- mymac.sc.com
- oat-pvbapp.sc.com
- oat.sc.com
- ob-test.sc.com
- ob.sc.com
- omf.cn.sc.com
- omf.sc.com
- openbanking.sc.com
- origination-test.sc.com
- origination.sc.com
- poc-cams.sc.com
- poc-cmsnr.sc.com
- pt-pvbapp.sc.com
- pt-s2bpay.sc.com
- pt.sc.com
- qa.sc.com
- res.hk.sc.com
- res.sg.sc.com
- res2.campaignae.sc.com
- res2.campaigntw.sc.com
- res2.hk.sc.com
- res2.in.sc.com
- res2.msg.tw.sc.com
- res2.msg.vn.sc.com
- res2.sg.sc.com
- research.sc.com
- researchqa.sc.com
- retail.cn.sc.com
- retail.sc.com
- rewards.sc.com
- s2b.sc.com
- s2bpay.sc.com
- s2bxcommodities.cn.sc.com
- s2bxmetals.sg.sc.com
- sandbox-rewards.sc.com
- sc.com
- shares.sc.com
- sit-pvbapp.sc.com
- sit.sc.com
- sme-sbl.sg.sc.com
- smsbankingalert.sc.com
- smsbinfo.sc.com
- stage-www.sc.com
- stage.sc.com
- staging-openbanking.sc.com
- staging-www.sc.com
- sts01.internal.sc.com
- surveys.sc.com
- talent.sc.com
- test-api.sc.com
- test-ask.sc.com
- test-cams.cn.sc.com
- test-cams.sc.com
- test-cardmanager.sc.com
- test-cnsd-wealth.cn.sc.com
- test-crmx.sc.com
- test-godigi.sc.com
- test-lending.hk.sc.com
- test-lending.sg.sc.com
- test-mmsp.sc.com
- test-mob-sme.sc.com
- test-monitor.cop.sc.com
- test-myaccess.sc.com
- test-ocip.cn.sc.com
- test-omf.cn.sc.com
- test-omf.sc.com
- test-pvbapp.sc.com
- test-retail.cn.sc.com
- test-retail.sc.com
- test-rewards.sc.com
- test-s2bpay.sc.com
- test-sme-sbl.sg.sc.com
- test-status.sc.com
- test-wfx-wealth.cn.sc.com
- test-wmapp.sc.com
- test-www.sc.com
- tradegodigital.sc.com
- trk.myedmnc.sc.com
- uat-mymac.sc.com
- uat-pvbapp.sc.com
- uat.sc.com
- wealth-test.sc.com
- wealth.sc.com
- weblink.fraudrisk-uat.sc.com
- weblink.fraudrisk.sc.com
- wfx-wealth.cn.sc.com
- wmapp.sc.com
- www.sc.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Standard Chartered?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/sc.com"><img src="https://latticescan.com/badge/readiness/sc.com" alt="quantum readiness"></a>