Verified services
80
QRadar
Which Polish public and banking services already use quantum-resistant encryption.
We check whether the connection to each service is resistant to a quantum computer attack, and whether the protection is provided by the service itself or by an external company intermediating the connection.
Last checked: September 2026
eGov
Public administration
55
eBanking
Online banking
21
eDelivery
Electronic delivery
4
Resistant, service handles itself
0
Quasi-resistant (an intermediary exists)
33
Not resistant (an intermediary exists)
3
Not resistant
44
How to read the results
- Resistant, service handles itself The service itself negotiates post-quantum-resistant encryption.
- Quasi-resistant (an intermediary exists) The connection is protected by an intermediary provider, such as Cloudflare, Akamai, or Imperva.
In practice: You ↔ Intermediary ↔ Target service. The connection to the intermediary is protected, but the cryptographic protection between the intermediary and the target service cannot be determined externally. - Not resistant (an intermediary exists) The service uses an intermediary provider, but the observed connection does not use post-quantum-resistant encryption.
- Not resistant The observed connection does not use post-quantum-resistant encryption.
eGov
Below are public administration services that process personal, health, or tax-related data. We check whether their connections use quantum-resistant encryption and which infrastructure providers they rely on.
Login.gov.pl
login.gov.pl
Not resistant
ePUAP
epuap.gov.pl
Not resistant
mObywatel API
api.mobywatel.gov.pl
Not resistant
Pacjent.gov.pl
pacjent.gov.pl
Not resistant
Info-Kierowca
info-kierowca.pl
Not resistant
ZUS
www.zus.pl
Not resistant
e-Deklaracje
epit.podatki.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Urząd Skarbowy
urzadskarbowy.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
KSeF
ap.ksef.mf.gov.pl
Connection via: Imperva
Not resistant (an intermediary exists)
Biznes.gov.pl
biznes.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
Konto Biznes
konto.biznes.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
CEIDG
aplikacja.ceidg.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
e-Zamówienia
ezamowienia.gov.pl
Connection via: Azure
Not resistant
KRZ
krz.ms.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
e-Sąd
e-sad.gov.pl
Not resistant
Sąd Kraków
portal.krakow.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Łódź
portal.lodz.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Wrocław
portal.wroclaw.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Poznań
portal.poznan.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Gdańsk
portal.gdansk.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Szczecin
portal.szczecin.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Katowice
portal.katowice.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Lublin
portal.lublin.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Rzeszów
portal.rzeszow.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
PRS
prs.ms.gov.pl
Not resistant
PUESC
puesc.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
MOS Cudzoziemcy
mos.cudzoziemcy.gov.pl
Not resistant
Odyseusz / MSZ
odyseusz.msz.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Rejestr BDO
rejestr-bdo.mos.gov.pl
Connection via: Akamai
Quasi-resistant (an intermediary exists)
POLON
polon.nauka.gov.pl
Not resistant
OSF / OPI
osf.opi.org.pl
Not resistant
NFOSiGW
gwd.nfosigw.gov.pl
Connection via: Azure
Not resistant (an intermediary exists)
PZ
pz.gov.pl
Not resistant
Login MF
login.mf.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Login e-Dowód
login.e-dowod.gov.pl
Not resistant
Info mObywatel
info.mobywatel.gov.pl
Connection via: Azure
Quasi-resistant (an intermediary exists)
Podatki.gov.pl
podatki.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Bramka e-Deklaracje
bramka.e-deklaracje.mf.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
KAS
kas.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
KSeF API (podatki)
api.ksef.podatki.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Wizyta API (podatki)
wizytaapi.podatki.gov.pl
Not resistant
e-Zdrowie
ezdrowie.gov.pl
Not resistant
NFZ
nfz.gov.pl
Not resistant
Szczepienia PZH
szczepienia.pzh.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Warszawa
portal.waw.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Sąd Białystok
portal.bialystok.sa.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
e-Wokanda
e-wokanda.tarnobrzeg.so.gov.pl
Not resistant
Korpus Solidarności
korpussolidarnosci.gov.pl
Not resistant
Aktywny Rodzic
aktywnyrodzic.gov.pl
Not resistant
Obywatel.gov.pl
obywatel.gov.pl
Not resistant
Empatia
empatia.gov.pl
Not resistant
gov.pl
gov.pl
Not resistant
API gov.pl
api.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
UPRP
uprp.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Szukaj w Archiwach
api.szukajwarchiwach.gov.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Public administration has started using quantum-resistant encryption, but every protected service runs it through an external supplier, mainly Imperva and Akamai, not on the organization’s own servers.
What happens between the supplier and the organization’s own servers cannot be checked from outside. A supplier-fronted result says nothing about the security behind it.
eBanking
Below are online banking services that may transmit personal and financial data. We check whether the connection uses quantum-resistant encryption and whose servers it runs on.
Bank Millennium
online.bankmillennium.pl
Not resistant
mBank
online.mbank.pl
Not resistant
Alior Bank
login.aliorbank.pl
Not resistant
ING Bank
login.ingbank.pl
Not resistant
Nest Bank
login.nestbank.pl
Connection via: Azure
Not resistant
PKO BP
ipko.pl
Not resistant
Pekao SA
pekao24.pl
Not resistant
BNP Paribas
goonline.bnpparibas.pl
Not resistant
Bank Pocztowy
online.pocztowy.pl
Not resistant
Alior Bank (system)
system.aliorbank.pl
Not resistant
Centrum24
centrum24.pl
Not resistant
iBoss24
iboss24.pl
Not resistant
Bank BPS
bankbps.pl
Connection via: Cloudflare
Quasi-resistant (an intermediary exists)
Bank BPS (online)
online.bankbps.pl
Not resistant
SGB
sgb24.pl
Not resistant
Plus Bank
plusbank24.pl
Not resistant
Credit Agricole
ca24.credit-agricole.pl
Not resistant
Citibank
citibankonline.pl
Connection via: Akamai
Not resistant (an intermediary exists)
VeloBank
secure.velobank.pl
Not resistant
DNB
ue.dnb.pl
Not resistant
NBP
nbp.pl
Connection via: Imperva
Quasi-resistant (an intermediary exists)
Most online banking services do not yet use quantum-resistant encryption. The two that do run it through an external supplier (Cloudflare, Imperva).
eDelivery
Below are electronic delivery services that may transmit official letters and documents. We check whether the connection uses quantum-resistant encryption.
Certum eDoręczenia
edoreczenia.certum.pl
Provider: Polska Wytwórnia Papierów Wartościowych S.A.
Not resistant
Envelo ERDS
erds.envelo.pl
Provider: Asseco Data Systems S.A.
Not resistant
Autenti eD
ed.autenti.com
Provider: Autenti sp. z o.o.
Connection via: Cloudflare
Quasi-resistant (an intermediary exists)
eDoPoczta
app.edopost.pl
Provider: Poczta Polska S.A.
Connection via: Google Cloud
Not resistant
Most electronic delivery services do not yet use quantum-resistant encryption.
Changelog
- Version 2.0 — August 2026
- Each monitored service undergoes additional verification to determine whether the established connection is not only post-quantum ready, but also whether an intermediary is present. In other words, whether that intermediary’s involvement “automatically” upgraded the connection to post-quantum.
- Version 1.0 — June 2026
- Each monitored service has a status of “PQ visible” or “no PQ”. Detection based on information from the TLS connection.