Is UBS quantum-safe?
Partly. 4 of 100 public servers under ubs.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api-gateway.ubs.com
- api-management.ubs.com
- api-portal.ubs.com
- api.ubs.com
- auth.ubs.com
- developer.ubs.com
- mobile-emea.ubs.com
- mobile-emea1.ubs.com
- mobile-emea2.ubs.com
- mobile-je.ubs.com
- mobile-je1.ubs.com
- mobile-je2.ubs.com
- mobile.ubs.com
- secure.ubs.com
82 other servers without post-quantum key exchange
- access-emea.ubs.com
- access-emea1.ubs.com
- access-emea2.ubs.com
- analytics.ubs.com
- apitest.ubs.com
- asset-wizard.ubs.com
- asset-wizard1.ubs.com
- asset-wizard2.ubs.com
- c1-asia.ubs.com
- c1-asia1.ubs.com
- c1-asia2.ubs.com
- careers.ubs.com
- connect-it.ubs.com
- connect-it1.ubs.com
- connect-it2.ubs.com
- delta-apollo-prd-01.ibb.ubs.com
- delta-apollo-prd-02.ibb.ubs.com
- delta-apollo.ibb.ubs.com
- delta-brightwell-prd-01.ibb.ubs.com
- delta-brightwell-prd-02.ibb.ubs.com
- delta-brightwell.ibb.ubs.com
- digicertweb.ubs.com
- ebanking-ch.ubs.com
- ebanking-ch1.ubs.com
- ebanking-ch2.ubs.com
- ebanking-ch3.ubs.com
- ebanking-ch4.ubs.com
- ebanking-it.ubs.com
- ebanking-it1.ubs.com
- ebanking-it2.ubs.com
- hkg-api.ubs.com
- hkg-neo.ubs.com
- id.ubs.com
- ideas.ubs.com
- isc.ubs.com
- isga.ubs.com
- jobs.ubs.com
- keyportweb.ubs.com
- keyportweb1.ubs.com
- keyportweb2.ubs.com
- kid.ubs.com
- mag.ubs.com
- my.ubs.com
- neo-radianz.ubs.com
- neo.ubs.com
- ofxch.ubs.com
- ofxch1.ubs.com
- ofxch2.ubs.com
- preprod-myhub.ubs.com
- product-docs-test.ubs.com
- product-docs.ubs.com
- qrbill.ubs.com
- quotes-global.ubs.com
- quotes-global1.ubs.com
- quotes-global2.ubs.com
- safe-ch.ubs.com
- safe-ch1.ubs.com
- safe-ch2.ubs.com
- swiskey-execds2.ibb.ubs.com
- swiskey-execds4.ibb.ubs.com
- swo1754a.ubs.com
- swo1754w.ubs.com
- tky-api.ubs.com
- tky-neo.ubs.com
- tpp-ch.ubs.com
- tpp-ch1.ubs.com
- tpp-ch2.ubs.com
- tt.ubs.com
- twint.ubs.com
- twint1.ubs.com
- twint2.ubs.com
- twint3.ubs.com
- twint4.ubs.com
- ubs.com
- ubsfileshare.ubs.com
- uk1-api.ubs.com
- uk1-neo.ubs.com
- uk2-neo.ubs.com
- us1-api.ubs.com
- us1-neo.ubs.com
- us2-api.ubs.com
- us2-neo.ubs.com
4 servers already protected
- m.ubs.com
- myhomeloan.ubs.com
- us-cashservices.ubs.com
- www.ubs.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at UBS?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/ubs.com"><img src="https://latticescan.com/badge/readiness/ubs.com" alt="quantum readiness"></a>