Is Truist quantum-safe?
Partly. 174 of 206 public servers under truist.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Grade
B
Quantum-safe
84%
Servers reached
206
Fix first
0
32 other servers without post-quantum key exchange
- apigw-prep.truist.com
- apimgw-npe.truist.com
- apimgw-prep.truist.com
- careers.truist.com
- cssvcs-dev.truist.com
- cssvcs-tst.truist.com
- data.mail.ltsm.truist.com
- data.mail.sheffield.truist.com
- edge.truist.com
- ir.truist.com
- lightstreamweb.truist.com
- mft.truist.com
- mftweb-h1.truist.com
- mftweb.truist.com
- myiclfile.truist.com
- onlinecourierlogin.truist.com
- ssl1.lightstreamweb.truist.com
- ssl1.truistintvpn1.truist.com
- ssl1.truistweb.truist.com
- ssl1.truistweb2.truist.com
- ssl1.truistweb3.truist.com
- ssl2.truistweb.truist.com
- ssl2.truistweb3.truist.com
- ssl3.truistweb3.truist.com
- ssl4.truistweb3.truist.com
- stats.truist.com
- truistintvpn1.truist.com
- truistweb.truist.com
- truistweb1.truist.com
- truistweb2.truist.com
- truistweb3.truist.com
- w2.truist.com
174 servers already protected
- achcontrol-ite.truist.com
- achcontrol-prep.truist.com
- achcontrol-tdv1.truist.com
- achfraudcontrol-pite.truist.com
- api.truist.com
- api.truistassist.truist.com
- api.truistassistdev.truist.com
- api.truistassistprep.truist.com
- apiaa.truistassistqa.truist.com
- apicert.truist.com
- apie.truistassistlab.truist.com
- apiegw-npe.truist.com
- apigw-npe.truist.com
- apigw.truist.com
- apij.truistassistlab.truist.com
- apil.truistassistlab.truist.com
- apim.truistassistdev.truist.com
- apim.truistassistqa.truist.com
- apip.truistassistlab.truist.com
- apiq.truistassistlab.truist.com
- apix.truistassistlab.truist.com
- ariba-t.truist.com
- auth-ue1.mne1.oneviewadmindev.truist.com
- auth-ue1.pite.oneviewadmintest.truist.com
- auth-ue2.mne1.oneviewadmindev.truist.com
- auth-ue2.pite.oneviewadmintest.truist.com
- auth.tfc-connect-ccp-lab-ue1.truist.com
- auth.truist.com
- authc.truist.com
- authcite.truist.com
- authcmite.truist.com
- authcpite.truist.com
- authctdh.truist.com
- authenticate-tpp.truist.com
- authenticate.truist.com
- authmite.truist.com
- bank-intranet.truist.com
- bank.truist.com
- bankruptcy.lawyer.truist.com
- benefitsuat.truist.com
- c360-hss-tpp.truist.com
- c360-hss.truist.com
- cert.diasauth-test.truist.com
- commercialonlinetdh.truist.com
- commercialonlineuat.truist.com
- dev.developer.truist.com
- dev.portfolioview.truist.com
- dev1-aem-components.truist.com
- dev1-benefits.truist.com
- dev1-brand.truist.com
- dev1-content.truist.com
- dev1-interconnect.truist.com
- dev1-internal.truist.com
- dev1-www.truist.com
- dev1.commercialdev.truist.com
- dev1.diasauth-dev.truist.com
- dev2.bank-dev.truist.com
- dev2.carddesign-dev.truist.com
- dev2.commercialdev.truist.com
- developer.truist.com
- developers.truist.com
- dias-aite.bank-test.truist.com
- dias-drl.bank-stg.truist.com
- dias-mne2.bank-test.truist.com
- dias-pite.bank-test.truist.com
- dias.bank-test.truist.com
- dias.bank.truist.com
- dias.commercialtest.truist.com
- dias.lightstream-ite.truist.com
- dias.oneview.truist.com
- dias.sfg-web-ite.truist.com
- diasauth.truist.com
- diascom.ite.truist.com
- diascom.truist.com
- digitaltreasurydev.truist.com
- digitaltreasuryite.truist.com
- digitaltreasurysit.truist.com
- digitaltreasurytdh.truist.com
- digitaltreasuryuat.truist.com
- electroniclockboxdem.truist.com
- electroniclockboxdrh.truist.com
- electroniclockboxite.truist.com
- emaildynamic.truist.com
- etsgwuat.truist.com
- fedidptst.truist.com
- financialtools.truist.com
- fionline-ite.truist.com
- fionline.truist.com
- foreclosure.lawyer.truist.com
- frm-ite.truist.com
- gitlab.truist.com
- intg-aem-components.truist.com
- intg-benefits.truist.com
- intg-brand.truist.com
- intg-content.truist.com
- intg-interconnect.truist.com
- intg-internal.truist.com
- intg-www.truist.com
- itca-aem-components.truist.com
- itca-benefits.truist.com
- itca-brand.truist.com
- itca-content.truist.com
- itca-interconnect.truist.com
- itca-internal.truist.com
- itca-www.truist.com
- ite-developer.truist.com
- ite-developers.truist.com
- ite-promerit.truist.com
- ite.diasauth-test.truist.com
- lawyerportal-prep.truist.com
- lawyerportal.truist.com
- lockboxonline-test.truist.com
- media.truist.com
- merchantengage-risk.truist.com
- merchantengage-sign.truist.com
- merchantengage.truist.com
- mnt1-aem-components.truist.com
- mnt1-benefits.truist.com
- mnt1-brand.truist.com
- mnt1-content.truist.com
- mnt1-interconnect.truist.com
- mnt1-internal.truist.com
- mnt1-www.truist.com
- mts-uat.truist.com
- mts.truist.com
- onlinefx-ite-rh8.truist.com
- onlinefx-ite.truist.com
- onlinetradeservices.truist.com
- pite.bank-test.truist.com
- portfolioaccounting.truist.com
- portfolioview-ite.truist.com
- portfolioview.truist.com
- prdr-aem-components.truist.com
- prdr-benefits.truist.com
- prdr-brand.truist.com
- prdr-content.truist.com
- prdr-interconnect.truist.com
- prdr-internal.truist.com
- prdr-www.truist.com
- preview-benefits.truist.com
- preview-brand.truist.com
- preview-content.truist.com
- preview-internal.truist.com
- preview-www.truist.com
- privacycenter-mdev.truist.com
- privacycenter-mite.truist.com
- privacycenter-pdev.truist.com
- prod1.subsnaffls.truist.com
- promerit.truist.com
- qa.portfolioview.truist.com
- recovery.lawyer.truist.com
- resources.truist.com
- sfapi.truistassist.truist.com
- sfg-web.truist.com
- static.truist.com
- supplychainbuyers.truist.com
- supplychainrpp-tpp.truist.com
- supplychainrpp.truist.com
- tmpwreset-tpp.truist.com
- tpg-ite.truist.com
- treasurymanager.truist.com
- truist.com
- truistdealstest.truist.com
- wcrp-tpp.truist.com
- wcrp.truist.com
- wdpwreset-dev.truist.com
- wdpwreset-ite.truist.com
- wdpwreset-tpp.truist.com
- wdpwreset.truist.com
- webvaultite.truist.com
- webvaultweb-prep.truist.com
- webvaultweb-test.truist.com
- wssrelay-ite.truist.com
- www.truist.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Truist?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/truist.com"><img src="https://latticescan.com/badge/readiness/truist.com" alt="quantum readiness"></a>