Is State Street quantum-safe?

Partly. 33 of 174 public servers under statestreet.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 19, 2026.

Grade

Quantum-safe

19%

Servers reached

174

Fix first

Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.

api-dataintel.statestreet.com
api.statestreet.com
developer.statestreet.com
remote-bgl.statestreet.com
remote-buat-dc3.statestreet.com
remote-buat-gdc.statestreet.com
remote-buat.statestreet.com
remote-dr.statestreet.com
remote-emea.statestreet.com
remote-ge1.statestreet.com
remote-ge2.statestreet.com
remote-hk.statestreet.com
remote-hk3.statestreet.com
remote-hk4.statestreet.com
remote-in.statestreet.com
remote-jp.statestreet.com
remote-jp3.statestreet.com
remote-jp4.statestreet.com
remote-mum.statestreet.com
remote-sg1.statestreet.com
remote-us.statestreet.com
remote.statestreet.com

119 other servers without post-quantum key exchange

access-ap.statestreet.com
access-dr.statestreet.com
access-emea.statestreet.com
access-ge1.statestreet.com
access-ge2.statestreet.com
access-hk.statestreet.com
access-hk3.statestreet.com
access-hk4.statestreet.com
access-in.statestreet.com
access-in1.statestreet.com
access-in2.statestreet.com
access-jp3.statestreet.com
access-jp4.statestreet.com
access-sg1.statestreet.com
access-uat.statestreet.com
access-uk2.statestreet.com
access-us-uat.statestreet.com
access-us.statestreet.com
access-us1.statestreet.com
access-us2.statestreet.com
access-us3.statestreet.com
access.statestreet.com
addsts.statestreet.com
agr.statestreet.com
agt.statestreet.com
alphafrontier.statestreet.com
api-uat.statestreet.com
buat-truview.statestreet.com
ciam-uat.statestreet.com
ciam.statestreet.com
cloud-cashpro.statestreet.com
cloud-mybcr.statestreet.com
cloud-ssi.statestreet.com
cloud-venus.statestreet.com
clouduat-ssi.statestreet.com
cmw-new.statestreet.com
cmw-uat-new.statestreet.com
data-pulse.statestreet.com
dataintel.statestreet.com
developer-uat.statestreet.com
ecfm.statestreet.com
ecfm2.statestreet.com
ehorizon-uat.statestreet.com
ehorizon.statestreet.com
ehorizon2.statestreet.com
esp.statestreet.com
espv2.statestreet.com
fgrprdcgtm.statestreet.com
gec-clo-ua1.statestreet.com
gec.statestreet.com
grrs-uat.statestreet.com
grrs.statestreet.com
gtmprod.statestreet.com
gtmuat.statestreet.com
ifs.statestreet.com
imt-ntf-uat.statestreet.com
imt-ntf.statestreet.com
imtbot-uat.statestreet.com
imtbot.statestreet.com
insights.statestreet.com
interactions.statestreet.com
ipaybenefits.statestreet.com
iptat-prod.statestreet.com
iptat-qa.statestreet.com
iptat-uat.statestreet.com
ireports-new.statestreet.com
itpimp.statestreet.com
metrics.statestreet.com
mfttest.statestreet.com
my.statestreet.com
myg-uat.statestreet.com
myssc-buat.statestreet.com
myssc-uat.statestreet.com
myview-ua.statestreet.com
myview.statestreet.com
navportal.statestreet.com
oidc.tfe-dev.statestreet.com
paport.statestreet.com
payhub-uat.statestreet.com
payhub.statestreet.com
pda-eft.statestreet.com
pda-uat-eft.statestreet.com
pda-uat.statestreet.com
pdaeft-uat.statestreet.com
pdaeft.statestreet.com
pdaext.statestreet.com
pdaint-uat.statestreet.com
pdaint.statestreet.com
remote-uat.statestreet.com
riskservices.statestreet.com
securemail.statestreet.com
smetrics.statestreet.com
sml-uat.statestreet.com
sml.statestreet.com
statestreet.com
ta-ufo.statestreet.com
tcremote-ap.statestreet.com
tcremote-dc3.statestreet.com
tcremote-gdc.statestreet.com
tcremote-ge1.statestreet.com
tcremote-ge2.statestreet.com
tcremote-hk.statestreet.com
tcremote-hk3.statestreet.com
tcremote-hk4.statestreet.com
tcremote-in.statestreet.com
tcremote-in1.statestreet.com
tcremote-in2.statestreet.com
tcremote-jp3.statestreet.com
tcremote-jp4.statestreet.com
tcremote-sg1.statestreet.com
tcremote-uat.statestreet.com
tcremote-us.statestreet.com
tcremote.statestreet.com
txr.statestreet.com
txruat.statestreet.com
uat-agr.statestreet.com
uat-agt.statestreet.com
uat-insights.statestreet.com
www.insights.statestreet.com

33 servers already protected

bav.dev.statestreet.com
bav.statestreet.com
bav1.uat.statestreet.com
bav2.uat.statestreet.com
careers.statestreet.com
comms.statestreet.com
comms.test.statestreet.com
comms2.statestreet.com
comms2.test.statestreet.com
dev-cld-www.statestreet.com
dev-paif.im.statestreet.com
dev-www.im.statestreet.com
invest.statestreet.com
invest.uat.statestreet.com
investors.statestreet.com
marketinfo.statestreet.com
newsroom.statestreet.com
prd-paif.im.statestreet.com
prd-www.im.statestreet.com
prod-cld-www.statestreet.com
qa-cld-www.statestreet.com
qa-paif.im.statestreet.com
qa-www.im.statestreet.com
ssp-uat.statestreet.com
ssp.statestreet.com
uat-cld-www.statestreet.com
uat-paif.im.statestreet.com
uat-www.im.statestreet.com
wealth.statestreet.com
wealth.uat.statestreet.com
www.eml.statestreet.com
www.statestreet.com
www1.cfpoc.statestreet.com

What this means

NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.

Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.

Follow State Street

One email when the grade changes. Re-scanned every week.

Follow the grade

Work at State Street?

Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.

Scan your own domain

Badge

Shows the current grade and updates itself. Anyone may embed it.

<a href="https://latticescan.com/readiness/statestreet.com"><img src="https://latticescan.com/badge/readiness/statestreet.com" alt="quantum readiness"></a>