The Complete Guide to Submarine Cable Security in 2026

Submarine cables are the invisible backbone of the global economy. The 400+ undersea cable systems currently in operation carry an estimated 95% of all intercontinental internet traffic and underpin more than $10 trillion in daily financial transactions. Despite their critical importance, most cable operators had virtually no real-time threat visibility until very recently.

When a cable is cut — whether by an anchor, a fishing trawl, a deliberate act of sabotage, or a seismic event — the consequences ripple outward almost immediately. Traffic reroutes across satellite links and competing cable systems, latency spikes, and in regions with limited redundancy, entire countries can be partially isolated from the global internet. Insurance costs, repair vessel mobilization, and regulatory reporting can cost operators $10–50 million per major incident.

The good news: the technology now exists to detect, classify, and respond to threats before they become catastrophic incidents. This guide explains how.

The Threat Landscape

Not all submarine cable threats look the same. Understanding the specific failure modes — and their relative frequency — is essential for designing an effective protection strategy.

Anchor Drag

Anchor drag accounts for an estimated 60–70% of all submarine cable faults. As commercial vessel sizes have grown over the past two decades, anchor weights have increased accordingly — modern anchors can weigh 30 tonnes or more. When a vessel drags anchor across a cable corridor during a storm or while maneuvering in port, the cable can be severed within seconds. Detection depends almost entirely on whether the vessel was broadcasting AIS data at the time — and many are not.

Bottom Trawling by Fishing Vessels

Commercial fishing vessels using bottom trawl nets are the second most common source of cable damage, particularly in waters shallower than 200 meters. Cables in these zones are typically buried to a depth of 1–3 meters, but trawl gear can penetrate to 1 meter or more in soft sediment. AIS transponder coverage for smaller fishing vessels is legally inconsistent across jurisdictions, making tracking challenging.

Intentional Sabotage

The geopolitical threat to submarine cable infrastructure has grown substantially since 2022. Intelligence agencies in multiple NATO countries have publicly attributed cable damage events to state-sponsored actors, and undersea cable systems near active conflict zones face elevated risk. Sabotage is particularly difficult to distinguish from accidental damage without multi-source forensic data — which is precisely why fusion-based monitoring platforms are gaining traction with government cable operators.

Natural Disasters

Earthquakes, undersea landslides, and severe hurricanes can simultaneously damage multiple cable systems along a route. The 2006 Hengchun earthquake severed seven cables in the South China Sea, causing significant internet disruption across Southeast Asia. Because these events typically damage multiple systems simultaneously, the impact on regional connectivity can be severe even when individual cable operators have redundancy built into their network design.

Shark Bites

While often cited with amusement, shark bites are a documented cause of cable damage, particularly in the Pacific. The electrical signals in some older cables produce electromagnetic fields that appear to attract certain shark species. Modern cables include armored sheathing specifically designed to resist animal attack, but older segments remain vulnerable. This is a low-frequency threat — but a real one.

Current Protection Methods

The cable industry has developed a layered set of physical and legal protections over the past 50 years. These measures significantly reduce risk but were designed for a threat environment that has now materially changed.

Cable Burial

In shallow water (typically 0–200 meters depth), cables are buried 1–3 meters below the seabed using a jet-plow or mechanical cutter trench. Burial protects against fishing trawls and most anchors, but the protection is not absolute — burial surveys degrade over time as sediment shifts, and repeat burial is expensive. In deeper water, cables rest directly on the seabed, relying on remote location and depth for natural protection.

Route Planning

New cable systems are designed to avoid the most congested shipping lanes, major fishing grounds, and known seismic fault zones wherever the geography permits. Route selection is one of the most cost-effective risk reduction tools available, but it cannot eliminate risk — cables must eventually make landfall, and nearshore sections remain the most vulnerable regardless of routing decisions.

Cable Protection Zones

Many jurisdictions have established legal exclusion zones around cable infrastructure that prohibit anchoring, bottom trawling, and certain types of construction activity. The legal frameworks vary significantly by country — some are rigorously enforced, others exist only on paper. The UN Convention on the Law of the Sea (UNCLOS) provides baseline protections but relies on flag state enforcement, which is inconsistent.

Patrol Vessels and Maritime Surveillance

Some cable operators contract patrol vessels to monitor high-risk corridor segments. This is effective but expensive and cannot provide continuous coverage of an entire cable route. Traditional maritime surveillance — coast guard patrol, VHF radio monitoring — provides important deterrence in port approaches but limited coverage in open water.

Next-Generation Monitoring Technology

The past five years have seen a step-change in the technology available for submarine cable security monitoring. Rather than relying on any single sensor, modern platforms fuse data from multiple independent sources to create a continuously updated threat picture for each cable corridor.

Distributed Acoustic Sensing (DAS)

DAS technology converts the fiber optic cable itself into a continuous vibration sensor. By analyzing the backscattering of laser pulses injected into the fiber, DAS systems can detect and localize acoustic events — propeller noise, anchor impacts, seismic activity, even footsteps on nearby infrastructure — with meter-level spatial resolution across spans of up to 100 kilometers per interrogator unit. DAS is increasingly being deployed on new cable systems as a built-in feature, and retrofit interrogators can be added to existing cable landing stations.

AIS Vessel Tracking

The Automatic Identification System (AIS) provides real-time position, speed, heading, and vessel identity data for the majority of commercial vessels over 300 gross tonnes. By correlating AIS data against cable corridor geofences in real time, operators can identify vessels with potential to threaten cable infrastructure before an incident occurs — not after. Advanced behavioral analytics can flag vessels displaying anomalous patterns: loitering over cable routes, unusual speed changes, or disabled transponders.

Synthetic Aperture Radar (SAR) Satellite Imagery

SAR satellites operate in all weather conditions and at night, making them uniquely valuable for maritime surveillance. Modern commercial SAR constellations can provide revisit times of hours for specific cable corridors, enabling detection of vessels that are deliberately operating with AIS transponders disabled — what the industry calls "dark vessels." SAR-derived vessel tracks can be fused with AIS data to identify discrepancies that indicate intentional concealment.

Autonomous Drones

Both aerial and underwater autonomous drones are increasingly being integrated into cable protection programs for two primary purposes: pre-incident survey (verifying that a vessel of concern is actually posing a risk) and post-incident evidence collection (documenting cable damage before the seabed disturbs and before repair vessels arrive). Drone deployment timelines have dropped from hours to minutes in some deployments.

AI-Powered Threat Scoring

No human analyst can synthesize data streams from dozens of independent sensor sources at the speed required for effective early warning. AI threat-scoring systems process multi-sensor inputs in near real-time, assign probability-weighted risk scores to individual vessels and environmental events, and surface only the highest-priority alerts for human review. The best implementations explain their reasoning — showing operators exactly which data points contributed to a high-risk classification.

How Sentinel OS Protects Submarine Cables

Sentinel OS was designed from the ground up for the specific operational requirements of submarine cable protection. Rather than adapting a general-purpose security platform to a maritime use case, the architecture addresses every phase of the detect-assess-respond cycle.

The core detection engine applies a 7-factor threat scoring algorithm to every vessel and environmental event: proximity to cable centerline, vessel class and behavior, historical incident correlation, weather amplification factors, time-of-day patterns, AIS continuity, and cross-referenced dark vessel indicators. Each score is computed in under 500 milliseconds.

When a threat score exceeds operator-configured thresholds, Sentinel automatically creates an incident record, notifies the on-call operator via the real-time dashboard, and — for enrolled drone assets — can trigger an autonomous launch for visual verification. The complete alert-to-drone-visual timeline averages under 8 minutes in current deployments.

All incident records are structured for regulatory compliance from the moment of creation, including timestamped sensor data, chain-of-custody documentation, and exportable evidence packages compatible with UNCLOS reporting requirements and ITU incident notification formats. The developer API allows operators to push incident data directly into their existing operations management systems.

For organizations evaluating coverage and cost, the Sentinel OS pricing page details the per-corridor and enterprise tier structure.

Case Study: Alaska Communications Cable Protection

One of the most technically challenging cable protection deployments in North America is in Homer, Alaska — a commercial fishing hub with heavy vessel traffic, extreme weather, and limited coast guard patrol coverage relative to the length of cable corridor that requires monitoring.

Alaska Communications deployed Sentinel OS across their nearshore cable corridor in late 2025, integrating AIS data from the local VHF receiver network, DAS data from the cable landing station interrogator, and NOAA weather station telemetry from buoys positioned throughout Cook Inlet. The data fusion layer correlates these three independent streams in real time.

Within the first 60 days of operation, the system detected an anchor drag event by a 240-foot commercial fishing vessel that had drifted into the cable corridor during a storm with 35-knot winds. The AIS track showed the vessel dragging toward the cable centerline at 0.4 knots. DAS simultaneously registered a distinct acoustic signature consistent with anchor chain contact with the seabed. Sentinel created an incident record and issued an automated notification to the US Coast Guard Sector Anchorage with vessel MMSI, GPS coordinates, heading, and the DAS event timestamp.

The vessel was contacted by Coast Guard via VHF radio within 11 minutes of the initial alert and repositioned before making contact with the cable. No cable damage occurred. The entire event was documented with sensor data and is now used as a training case for operator alert response procedures.

The Alaska deployment illustrates a core principle of next-generation cable security: the most valuable thing a monitoring platform can deliver is not detection after a cable is cut — it is the operational intelligence to intervene before the cut happens.

The Path Forward

Submarine cable security is entering a new era. The combination of DAS fiber sensing, real-time AIS monitoring, SAR satellite coverage, and AI-powered threat scoring makes continuous, automated protection of cable corridors operationally and economically viable for the first time. The remaining barrier is largely organizational — operators accustomed to reactive incident response must shift to a proactive threat management mindset.

The cables that keep the global internet running are too important to protect with physical burial and legal frameworks alone. The technology to do substantially better exists today, and the cost of a single major cable incident now exceeds the multi-year cost of deploying a continuous monitoring platform by a significant margin.

If you are evaluating cable protection options for a new or existing deployment, the best next step is a corridor-specific threat assessment. Sentinel OS provides these as part of our onboarding process — we analyze your cable route, identify the highest-risk segments, and configure the monitoring platform before go-live.