Are the robotaxi companies quantum-safe?
Is Tesla quantum-safe?
Partly. 53 of 130 public servers under tesla.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 19, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- auth.eng.euw1.vn.cloud.tesla.com
- auth.eng.usw.vn.cloud.tesla.com
- auth.prd.euw1.vn.cloud.tesla.com
- auth.prd.usw.vn.cloud.tesla.com
- fleet-api.eng.na.vn.cloud.tesla.com
- fleet-api.prd.eu.vn.cloud.tesla.com
- fleet-api.prd.na.vn.cloud.tesla.com
- fleet-api.prd.usw.vn.cloud.tesla.com
- fleet-mcp.eng.na.vn.cloud.tesla.com
- gateway-public-telemetry-eng5a-fleet.eng.vn.cloud.tesla.com
- gateway-public-telemetry-eng5b-fleet.eng.vn.cloud.tesla.com
- gateway-public-telemetry-eng5c-fleet.eng.vn.cloud.tesla.com
- gateway-public-telemetry-eng5d-fleet.eng.vn.cloud.tesla.com
- gateway-public-telemetry-prd5a-fleet.prd.vn.cloud.tesla.com
- gateway-public-telemetry-prd5b-fleet.prd.vn.cloud.tesla.com
- gateway-public-telemetry-prd5c-fleet.prd.vn.cloud.tesla.com
- gateway-public-telemetry-prd5d-fleet.prd.vn.cloud.tesla.com
- mobile-links.eng.vn.cloud.tesla.com
- mobile-links.prd.vn.cloud.tesla.com
- mobile-ops-links.prd.vn.cloud.tesla.com
57 other servers without post-quantum key exchange
- ams13-gpgw1.tesla.com
- apf-api.eng.vn.cloud.tesla.com
- apf-api.prd.vn.cloud.tesla.com
- dal11-gpgw1.tesla.com
- dashcam.tesla.com
- dex.ops.bn.na.vn.cloud.tesla.com
- digitalassets-stage.tesla.com
- fleetview.america.fn.tesla.com
- fleetview.europe.fn.tesla.com
- fleetview.fn.tesla.com
- fleetview.prd.america.fn.tesla.com
- fleetview.prd.europe.fn.tesla.com
- gpv.tesla.com
- hnd13-gpgw1.tesla.com
- iad05-gpgw1.tesla.com
- lax32-gpgw1.tesla.com
- live-data.america.fn.tesla.com
- live-data.europe.fn.tesla.com
- live-data.fn.tesla.com
- live-data.prd.america.fn.tesla.com
- live-data.prd.europe.fn.tesla.com
- media-server-api.eng.vn.cloud.tesla.com
- media-server-api.prd.vn.cloud.tesla.com
- media-server-dev-api.eng.vn.cloud.tesla.com
- media-server-qr-dev.eng.america.vn.cloud.tesla.com
- media-server-qr.eng.america.vn.cloud.tesla.com
- media-server-qr.prd.america.vn.cloud.tesla.com
- ownerapi-alpha.prd.vn.cloud.tesla.com
- ownerapi-api.eng.euw1.vn.cloud.tesla.com
- ownerapi-api.eng.usw.vn.cloud.tesla.com
- ownerapi-api.prd.usw.vn.cloud.tesla.com
- ownerapi-signoff-stage.eng.na.vn.cloud.tesla.com
- ownerapi-signoff.eng.na.vn.cloud.tesla.com
- s3.eng.na.vn.cloud.tesla.com
- s3.prd.na.vn.cloud.tesla.com
- sentry-api.ops.na.vn.cloud.tesla.com
- serviceapp.tesla.com
- signaling-robotics.eng.usw.vn.cloud.tesla.com
- signaling-robotics.eng.vn.cloud.tesla.com
- sin05-gpgw1.tesla.com
- sjc36-gpgw1.tesla.com
- syd14-gpgw1.tesla.com
- tesla-hermes-snapshot-motors-eng.s3.eng.na.vn.cloud.tesla.com
- tesla-hermes-snapshot-motors.eng.usw.vn.cloud.tesla.com
- tesla-hermes-snapshot-motors.s3.prd.na.vn.cloud.tesla.com
- teslacmgap01.tesla.com
- teslacmgcn01.tesla.com
- teslacmgeu01.tesla.com
- teslacmgna01.tesla.com
- teslacmgus01.tesla.com
- tripx-alpha.prd.vn.cloud.tesla.com
- tripx.eng.usw.vn.cloud.tesla.com
- tripx.eng.usw2.vn.cloud.tesla.com
- tripx.prd.usw.vn.cloud.tesla.com
- tripx.prd.vn.cloud.tesla.com
- wire.tesla.com
- x3.obs.tesla.com
53 servers already protected
- accounts.tesla.com
- akamai-apigateway-vehicleextinfogw-prdsvc-st.tesla.com
- apps.tesla.com
- auth-stage.tesla.com
- auth.tesla.com
- autobidder-preprd.powerhub.energy.tesla.com
- autobidder.powerhub.energy.tesla.com
- bettertime-stage.tesla.com
- bettertime.tesla.com
- developer.tesla.com
- digitalassets-accounts.tesla.com
- digitalassets-contents.tesla.com
- digitalassets-energy.tesla.com
- digitalassets-secure.tesla.com
- digitalassets-shop.tesla.com
- digitalassets.tesla.com
- engage.tesla.com
- exp-zcp-cloud-ap-mfgsre.tesla.com
- exp-zcp-cloud-eu-itmfg-staging.tesla.com
- exp-zcp-cloud-eu-itmfg.tesla.com
- exp-zcp-cloud-na-itmfg-staging.tesla.com
- exp-zcp-cloud-na-itmfg.tesla.com
- extgithub.tesla.com
- factory.tesla.com
- fleet-auth.prd.vn.cloud.tesla.com
- humans.tesla.com
- issue-tracker-stg.tesla.com
- issue-tracker.tesla.com
- issue-trackerapi-stg.tesla.com
- issue-trackerapi.tesla.com
- link.tesla.com
- logcollector-ext.tesla.com
- mfs-reno.tesla.com
- mfs-synergy.tesla.com
- mobile.tesla.com
- partners.tesla.com
- pay.tesla.com
- powerhub.energy.tesla.com
- robotaxi-app-feedback-eng.tesla.com
- robotaxi-app-feedback-prd.tesla.com
- shop.tesla.com
- sso-dev.tesla.com
- sso.tesla.com
- static.tesla.com
- stream.tesla.com
- tesla.com
- vehicle-files.eng.euw1.vn.cloud.tesla.com
- vehicle-files.eng.usw2.vn.cloud.tesla.com
- vehicle-files.prd.euw1.vn.cloud.tesla.com
- vehicle-files.prd.usw2.vn.cloud.tesla.com
- warehouse.tesla.com
- www.engage.tesla.com
- www.tesla.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Tesla?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/tesla.com"><img src="https://latticescan.com/badge/readiness/tesla.com" alt="quantum readiness"></a>