Index
Are the robotaxi companies quantum-safe?
A car sold today is still on the road in the 2040s, talking to its maker’s servers the whole time. We scanned every public server of eight self-driving companies for the defence against a future quantum computer: post-quantum key exchange. Of 287 servers, 123 have it. Not one company protects every server. Each still has connections whose traffic could be recorded today and decrypted later.
| Grade | Company | Post-quantum servers | Older TLS 1.2 |
|---|---|---|---|
| B | Waymo waymo.com 2 servers without post-quantum key exchange
| 6/8 | 2 |
| B | Mobileye mobileye.com 35 servers without post-quantum key exchange
| 45/80 | 2 |
| B | Motional motional.com 8 servers without post-quantum key exchange
| 14/22 | 8 |
| C | Tesla tesla.com 76 servers without post-quantum key exchange
| 42/118 | 9 |
| C | Zoox zoox.com 23 servers without post-quantum key exchange
| 12/35 | 3 |
| C | WeRide weride.ai 10 servers without post-quantum key exchange
| 2/12 | 1 |
| C | Pony.ai pony.ai 8 servers without post-quantum key exchange
| 2/10 | 7 |
| D | Baidu Apollo apollo.auto 2 servers without post-quantum key exchange
| 0/2 | 2 |
What was checked. Every hostname each company has ever had a public certificate for, taken from Certificate Transparency logs, kept only where it still resolves to a public address, then tested with post-quantum-only TLS 1.3 handshakes. A server that completes one supports hybrid ML-KEM key exchange, the protection against harvest now, decrypt later. Highlighted names are login, API, VPN, fleet, gateway and developer hosts. A hostname shows what a server is called, not what traffic it carries.
What was not.The cars. A vehicle’s own cryptography, above all the key that signs its software updates, cannot be read from outside. This index rates the public servers a fleet and its riders depend on.
Snapshot from October 6, 2026. The live report for each domain on this site samples up to twelve endpoints; this index covers every reachable public server, so its counts are larger. Method: how grades are produced.
Run a fleet, build cars, or insure them? Fleet Watch gives you this scan privately, every week, for your own domains and your suppliers, with an alert when anything gets worse.
See Fleet Watch