Are the robotaxi companies quantum-safe?
Is Waymo quantum-safe?
Partly. 222 of 250 public servers under waymo.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 19, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- account.business-autopush.waymo.com
- accounts.business-autopush.waymo.com
- admin.business-autopush.waymo.com
- api-v2.business-autopush.waymo.com
- api.business-autopush.waymo.com
- api2.business-autopush.waymo.com
- app.business-autopush.waymo.com
- auth.business-autopush.waymo.com
- developer.business-autopush.waymo.com
- developers.business-autopush.waymo.com
- fleet.business-autopush.waymo.com
- gateway.business-autopush.waymo.com
- gw.business-autopush.waymo.com
- login.business-autopush.waymo.com
- mobile.business-autopush.waymo.com
- ota.business-autopush.waymo.com
- partner.business-autopush.waymo.com
- partners.business-autopush.waymo.com
- pay.business-autopush.waymo.com
- payments.business-autopush.waymo.com
- portal.business-autopush.waymo.com
- remote.business-autopush.waymo.com
- secure.business-autopush.waymo.com
- sso.business-autopush.waymo.com
- telemetry.business-autopush.waymo.com
- update.business-autopush.waymo.com
- updates.business-autopush.waymo.com
- vpn.business-autopush.waymo.com
222 servers already protected
- account.business.waymo.com
- account.corp.waymo.com
- account.fleetsuite-autopush.waymo.com
- account.fleetsuite.waymo.com
- account.waymo.com
- accounts.business.waymo.com
- accounts.corp.waymo.com
- accounts.fleetsuite-autopush.waymo.com
- accounts.fleetsuite.waymo.com
- accounts.waymo.com
- admin.business.waymo.com
- admin.corp.waymo.com
- admin.fleetsuite-autopush.waymo.com
- admin.fleetsuite.waymo.com
- admin.waymo.com
- api-v2.business.waymo.com
- api-v2.corp.waymo.com
- api-v2.fleetsuite-autopush.waymo.com
- api-v2.fleetsuite.waymo.com
- api-v2.waymo.com
- api.business.waymo.com
- api.corp.waymo.com
- api.fleetsuite-autopush.waymo.com
- api.fleetsuite.waymo.com
- api.waymo.com
- api2.business.waymo.com
- api2.corp.waymo.com
- api2.fleetsuite-autopush.waymo.com
- api2.fleetsuite.waymo.com
- api2.waymo.com
- app.business.waymo.com
- app.corp.waymo.com
- app.fleetsuite-autopush.waymo.com
- app.fleetsuite.waymo.com
- app.waymo.com
- apps.waymo.com
- assets.waymo.com
- auth.business.waymo.com
- auth.corp.waymo.com
- auth.fleetsuite-autopush.waymo.com
- auth.fleetsuite.waymo.com
- auth.waymo.com
- beta.waymo.com
- blog.waymo.com
- cdn.waymo.com
- ci.corp.waymo.com
- ci.waymo.com
- cloud.waymo.com
- console.waymo.com
- data.waymo.com
- demo.waymo.com
- dev.waymo.com
- developer.business.waymo.com
- developer.corp.waymo.com
- developer.fleetsuite-autopush.waymo.com
- developer.fleetsuite.waymo.com
- developer.waymo.com
- developers.business.waymo.com
- developers.corp.waymo.com
- developers.fleetsuite-autopush.waymo.com
- developers.fleetsuite.waymo.com
- developers.waymo.com
- docs.waymo.com
- edge.waymo.com
- event.waymo.com
- events.waymo.com
- fleet.business.waymo.com
- fleet.corp.waymo.com
- fleet.fleetsuite-autopush.waymo.com
- fleet.fleetsuite.waymo.com
- fleet.waymo.com
- ftp.waymo.com
- futures.waymo.com
- gateway.business.waymo.com
- gateway.corp.waymo.com
- gateway.fleetsuite-autopush.waymo.com
- gateway.fleetsuite.waymo.com
- gateway.waymo.com
- git.waymo.com
- gitlab.waymo.com
- go.corp.waymo.com
- go.waymo.com
- grafana.waymo.com
- gw.business.waymo.com
- gw.corp.waymo.com
- gw.fleetsuite-autopush.waymo.com
- gw.fleetsuite.waymo.com
- gw.waymo.com
- help.waymo.com
- id.corp.waymo.com
- id.waymo.com
- images.waymo.com
- imap.waymo.com
- img.waymo.com
- iot.waymo.com
- jenkins.waymo.com
- jobs.waymo.com
- kibana.waymo.com
- kyc.waymo.com
- link.waymo.com
- login.business.waymo.com
- login.corp.waymo.com
- login.fleetsuite-autopush.waymo.com
- login.fleetsuite.waymo.com
- login.waymo.com
- m.corp.waymo.com
- m.waymo.com
- mail.waymo.com
- media.waymo.com
- metrics.waymo.com
- mobile.business.waymo.com
- mobile.corp.waymo.com
- mobile.fleetsuite-autopush.waymo.com
- mobile.fleetsuite.waymo.com
- mobile.waymo.com
- monitor.waymo.com
- mx.corp.waymo.com
- mx.waymo.com
- my.corp.waymo.com
- my.waymo.com
- news.waymo.com
- ns1.waymo.com
- ns2.waymo.com
- oauth.waymo.com
- open.waymo.com
- openapi.waymo.com
- ota.business.waymo.com
- ota.corp.waymo.com
- ota.fleetsuite-autopush.waymo.com
- ota.fleetsuite.waymo.com
- ota.waymo.com
- otc.waymo.com
- partner.business.waymo.com
- partner.corp.waymo.com
- partner.fleetsuite-autopush.waymo.com
- partner.fleetsuite.waymo.com
- partner.waymo.com
- partners.business.waymo.com
- partners.corp.waymo.com
- partners.fleetsuite-autopush.waymo.com
- partners.fleetsuite.waymo.com
- partners.waymo.com
- pay.business.waymo.com
- pay.corp.waymo.com
- pay.fleetsuite-autopush.waymo.com
- pay.fleetsuite.waymo.com
- pay.waymo.com
- payment.waymo.com
- payments.business.waymo.com
- payments.corp.waymo.com
- payments.fleetsuite-autopush.waymo.com
- payments.fleetsuite.waymo.com
- payments.waymo.com
- portal.business.waymo.com
- portal.corp.waymo.com
- portal.fleetsuite-autopush.waymo.com
- portal.fleetsuite.waymo.com
- portal.waymo.com
- press.waymo.com
- pro.waymo.com
- promo.waymo.com
- remote.business.waymo.com
- remote.corp.waymo.com
- remote.fleetsuite-autopush.waymo.com
- remote.fleetsuite.waymo.com
- remote.waymo.com
- sandbox.waymo.com
- secure.business.waymo.com
- secure.corp.waymo.com
- secure.fleetsuite-autopush.waymo.com
- secure.fleetsuite.waymo.com
- secure.waymo.com
- sftp.waymo.com
- shop.waymo.com
- smtp.waymo.com
- socket.waymo.com
- sso.business.waymo.com
- sso.corp.waymo.com
- sso.fleetsuite-autopush.waymo.com
- sso.fleetsuite.waymo.com
- sso.waymo.com
- stage.waymo.com
- staging.waymo.com
- stat.waymo.com
- static.waymo.com
- stats.waymo.com
- status.waymo.com
- store.waymo.com
- stream.waymo.com
- support.waymo.com
- telemetry.business.waymo.com
- telemetry.corp.waymo.com
- telemetry.fleetsuite-autopush.waymo.com
- telemetry.fleetsuite.waymo.com
- telemetry.waymo.com
- test.waymo.com
- trade.waymo.com
- trading.waymo.com
- uat.waymo.com
- update.business.waymo.com
- update.corp.waymo.com
- update.fleetsuite-autopush.waymo.com
- update.fleetsuite.waymo.com
- update.waymo.com
- updates.business.waymo.com
- updates.corp.waymo.com
- updates.fleetsuite-autopush.waymo.com
- updates.fleetsuite.waymo.com
- updates.waymo.com
- vip.waymo.com
- vpn.business.waymo.com
- vpn.corp.waymo.com
- vpn.fleetsuite-autopush.waymo.com
- vpn.fleetsuite.waymo.com
- vpn.waymo.com
- wallet.waymo.com
- waymo.com
- webmail.waymo.com
- ws.corp.waymo.com
- ws.waymo.com
- wss.waymo.com
- www.waymo.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Waymo?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/waymo.com"><img src="https://latticescan.com/badge/readiness/waymo.com" alt="quantum readiness"></a>