Verified services
58
Radar
Which Polish public and banking services already use quantum-resistant encryption.
We check whether the connection to each service is resistant to a quantum computer attack, and whether the protection is provided by the service itself or by an external company intermediating the connection.
Last checked: August 2026
eGov
Public administration
33
eBanking
Online banking
21
eDelivery
Electronic delivery
4
Resistant, service handles itself
0
Quasi-resistant (an intermediary exists)
21
Not resistant (an intermediary exists)
3
Not resistant
34
How to read the results
- Resistant, service handles itself the service itself handles encryption that resists quantum computers.
- Quasi-resistant (an intermediary exists) the connection is protected, but this comes from an intermediary provider, e.g. Cloudflare, Akamai, or Imperva.
In practice, it looks like this: You <-> Intermediary <-> Target Service. The connection between you and the intermediary is protected, but it is impossible to determine how the further connection to the actual service is protected. - Not resistant (an intermediary exists) the service uses an external provider, but that provider has not yet enabled such encryption.
- Not resistant the connection does not yet use encryption that resists quantum computers.
eGov
Below are public administration services that may handle personal, health, or tax data. We check whether the connection uses quantum-resistant encryption and whose servers it runs on.
Login.gov.pl
login.gov.pl
Not resistant
ePUAP
epuap.gov.pl
Not resistant
mObywatel API
api.mobywatel.gov.pl
Not resistant
Pacjent.gov.pl
pacjent.gov.pl
Not resistant
Info-Kierowca
info-kierowca.pl
Not resistant
ZUS
www.zus.pl
Not resistant
e-Deklaracje
epit.podatki.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Urząd Skarbowy
urzadskarbowy.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
KSeF
ap.ksef.mf.gov.pl
Connection via: Imperva
Not resistant (an intermediary exists)
Biznes.gov.pl
biznes.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
Konto Biznes
konto.biznes.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
CEIDG
aplikacja.ceidg.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
e-Zamówienia
ezamowienia.gov.pl
Connection via: Azure
Not resistant
KRZ
krz.ms.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
e-Sąd
e-sad.gov.pl
Not resistant
Sąd Kraków
portal.krakow.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Łódź
portal.lodz.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Wrocław
portal.wroclaw.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Poznań
portal.poznan.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Gdańsk
portal.gdansk.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Szczecin
portal.szczecin.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Katowice
portal.katowice.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Lublin
portal.lublin.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Rzeszów
portal.rzeszow.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
PRS
prs.ms.gov.pl
Not resistant
PUESC
puesc.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
MOS Cudzoziemcy
mos.cudzoziemcy.gov.pl
Not resistant
Odyseusz / MSZ
odyseusz.msz.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Rejestr BDO
rejestr-bdo.mos.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
POLON
polon.nauka.gov.pl
Not resistant
OSF / OPI
osf.opi.org.pl
Not resistant
NFOSiGW
gwd.nfosigw.gov.pl
Connection via: Azure
Not resistant (an intermediary exists)
PZ
pz.gov.pl
Not resistant
Public administration has started using quantum-resistant encryption, but every protected service runs it through an external supplier — mainly Imperva and Akamai — not on the organization’s own servers.
What happens between the supplier and the organization’s own servers cannot be checked from outside. A supplier-fronted result says nothing about the security behind it.
eBanking
Below are online banking services that may transmit personal and financial data. We check whether the connection uses quantum-resistant encryption and whose servers it runs on.
Bank Millennium
online.bankmillennium.pl
Not resistant
mBank
online.mbank.pl
Not resistant
Alior Bank
login.aliorbank.pl
Not resistant
ING Bank
login.ingbank.pl
Not resistant
Nest Bank
login.nestbank.pl
Connection via: Azure
Not resistant
PKO BP
ipko.pl
Not resistant
Pekao SA
pekao24.pl
Not resistant
BNP Paribas
goonline.bnpparibas.pl
Not resistant
Bank Pocztowy
online.pocztowy.pl
Not resistant
Alior Bank (system)
system.aliorbank.pl
Not resistant
Centrum24
centrum24.pl
Not resistant
iBoss24
iboss24.pl
Not resistant
Bank BPS
bankbps.pl
Connection via: Cloudflare
Quasi-resistant (an intermediary exists)
Bank BPS (online)
online.bankbps.pl
Not resistant
SGB
sgb24.pl
Not resistant
Plus Bank
plusbank24.pl
Not resistant
Credit Agricole
ca24.credit-agricole.pl
Not resistant
Citibank
citibankonline.pl
Connection via: Akamai
Not resistant (an intermediary exists)
VeloBank
secure.velobank.pl
Not resistant
DNB
ue.dnb.pl
Not resistant
NBP
nbp.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Most online banking services do not yet use quantum-resistant encryption. The two that do run it through an external supplier (Cloudflare, Imperva).
eDelivery
Below are electronic delivery services that may transmit official letters and documents. We check whether the connection uses quantum-resistant encryption.
Certum eDoręczenia
edoreczenia.certum.pl
Provider: Polska Wytwórnia Papierów Wartościowych S.A.
Not resistant
Envelo ERDS
erds.envelo.pl
Provider: Asseco Data Systems S.A.
Not resistant
Autenti eD
ed.autenti.com
Provider: Autenti sp. z o.o.
Connection via: Cloudflare
Quasi-resistant (an intermediary exists)
eDoPoczta
app.edopost.pl
Provider: Poczta Polska S.A.
Connection via: Google Cloud
Not resistant
Most electronic delivery services do not yet use quantum-resistant encryption.
Changelog
- Version 2.0 — August 2026
- Each monitored service undergoes additional verification to determine whether the established connection is not only post-quantum ready, but also whether an intermediary is present, and whether that intermediary’s involvement “automatically” upgraded the connection to post-quantum. Method inspired by https://pqprobe.com/blog/edge-attribution
- Version 1.0 — June 2026
- Each monitored service has a status of “PQ visible” or “no PQ”.