Maritime Intelligence FAQ
Fast answers on maritime intelligence and maritime domain awareness. For the full treatment, see What Is Maritime Intelligence?.
What is maritime intelligence?
Maritime intelligence is the practice of turning everything observable about activity at sea into a decision-ready understanding of who is out there, what they are doing, and whether you should care. It wraps a vessel position in identity, ownership, history, regulatory standing, environment, and behavior, fused into one assessment. It is a multi-INT fusion problem more than a tracking problem.
What is the difference between maritime intelligence and maritime domain awareness?
Maritime Domain Awareness (MDA) is the doctrinal term for effective understanding of anything in the maritime domain that could affect security, safety, the economy, or the environment. Maritime intelligence is the assessed product you build on top of that awareness, the answer to "what does this picture mean and what should I do." In practice the terms are often used interchangeably.
What is AIS?
AIS, the Automatic Identification System, is the transponder system that broadcasts a vessel's identity, position, course, and speed. It comes in Class A for larger regulated vessels and Class B for smaller craft, and it is received both by coastal stations (terrestrial AIS) and by satellites (satellite AIS) for the open ocean.
Why is AIS alone not enough?
Because AIS is self-reported and unauthenticated. A vessel can switch it off to go dark, transmit a false or cloned identity, or report a false position, and AIS data by itself cannot tell you it is lying. AIS also has coverage gaps from receiver range and satellite revisit. It is the backbone of the picture, not the whole picture.
What is a dark vessel and how do you detect one?
A dark vessel is one operating without broadcasting AIS, usually to hide an activity. You detect it by correlation with other sources: a Synthetic Aperture Radar (SAR) satellite detection or an RF geolocation with no matching AIS track is the classic signature of a vessel that has gone dark. Radar, electro-optical imagery, and acoustic sensing all contribute.
How does maritime intelligence find vessels that turn off their transponders?
By fusing sources that do not depend on the vessel's cooperation. SAR imagery sees hulls through cloud and darkness, RF geolocation finds vessels still emitting other signals, coastal and over-the-horizon radar detects them regardless of transponder state, and acoustics work where RF and optical do not. A detection with no corresponding AIS is the anomaly that gets flagged.
What is beneficial ownership and why does it matter at sea?
The beneficial owner is the party that actually controls and profits from a vessel, often hidden several layers above the registered owner through shell companies. It matters because sanctions evasion and illicit trade rely on obscuring who really controls a hull. Resolving a vessel to its true controlling entity is the bridge between maritime intelligence and financial intelligence.
What is flag hopping and identity laundering?
Flag hopping is changing a vessel's country of registry to shed a watched or sanctioned flag. Identity laundering is a vessel adopting another ship's IMO number or name to disguise itself. Both exploit the gap between a hull and its paperwork, which is why resolving true identity is central to maritime intelligence.
What is Port State Control and why does detention history matter?
Port State Control is the inspection of foreign vessels by the country whose port they enter, coordinated through regional regimes such as the Paris and Tokyo MoUs, with the power to detain vessels that fail. A vessel's detention history is one of the strongest single risk signals, used by ports deciding whether to admit a ship and by insurers deciding whether and how to cover it.
How does maritime intelligence support sanctions enforcement?
By screening a vessel, its owners, and its recent port calls and ship-to-ship transfers against sanctions designations, then corroborating against the vessel's actual behavior. A ship that goes dark near a sanctioned port, conducts an unexplained ship-to-ship transfer, or whose ownership resolves to a designated entity is exactly what fused maritime intelligence is built to surface.
What is IUU fishing?
IUU stands for Illegal, Unreported, and Unregulated fishing. Detecting it is a maritime-intelligence problem in its own right, identifying fishing activity where it is not permitted, frequently by the same dark-vessel detection methods used for sanctions and smuggling.
Who uses maritime intelligence besides the military?
The need is broadly dual-use. Coast guards run it for security and search and rescue. Marine insurers run it to price risk and screen hulls. Ports run it to vet inbound vessels. Shippers run it to manage fleet exposure. Fisheries enforcement runs it against IUU activity. The underlying problem, many maritime sources, one decision, is the same across all of them.
How is maritime intelligence a fusion problem?
Because the answer requires combining sources that share no common format: AIS and radar and SAR and RF and acoustics on the sensor side, registries and ownership and sanctions and Port State Control on the records side, and weather and currents on the environment side. Maritime intelligence is multi-INT fusion applied to the sea, mapping onto the same signal-to-decision fusion stack every fusion problem uses.
What is a maritime fusion center or a maritime common operating picture?
A maritime fusion center is the organizational form of cross-domain maritime awareness, a place or a system where the vessel picture, the ownership graph, the spectrum picture, the seabed geometry, and terminal telemetry are held together and assessed as one. A maritime common operating picture is the shared display and data layer that makes this possible, reconciling cooperative broadcasts against independent sensing and attaching context to every track. The purpose is to surface contradictions, such as a claimed position that radar disproves, as assessed alerts rather than facts buried in separate systems.
What is the shadow fleet, or dark fleet?
The shadow fleet, sometimes called the dark fleet, is the network of aging tankers that moves sanctioned oil outside the Western insurance and finance system using opaque ownership, frequent reflagging, false flags, and AIS manipulation. Estimates place the broader fleet at roughly 600 to 800 tankers, on the order of 10 to 15 percent of the global crude and product tanker fleet, with the beneficial ownership of a large share unknown. Beyond sanctions evasion, these vessels increasingly feature in gray-zone incidents, including suspected anchor drags over undersea cables.
How do ships spoof GPS, and why does it matter for a port?
Ships do not usually spoof their own navigation; the interference comes from powerful shore-based or ship-based transmitters that broadcast counterfeit satellite signals, causing receivers to compute confident but false positions. That false position propagates into the ship's chart display and its AIS broadcast, so a spoofed vessel may believe it is somewhere it is not while reporting that false position to everyone else. For a port, that degrades traffic management in the congested approaches where errors are least survivable, and the facility's own timing and positioning systems can be affected by the same interference.
Why are undersea cables so vulnerable to anchor dragging?
Undersea cables lie on or just beneath the seabed along the same corridors ships transit, and a dragged anchor can sever one cheaply while leaving the damage deniable as an accident. The law of the sea grants vessels broad rights of passage, so a coastal state has limited authority to stop a suspect ship, and proving that a drag was deliberate is legally difficult, as the 2025 dismissal of the Eagle S case in Finland showed. Repairs take a median of roughly 40 days, so a single incident can degrade a nation's connectivity for weeks.
What is the Houthi threat to shipping in 2026?
The Houthi movement has conducted more than a hundred attacks on merchant shipping since November 2023 using anti-ship ballistic missiles, uncrewed surface vessels, and drones, sinking several ships and killing seafarers. The group paused large-scale attacks after a Gaza ceasefire in late 2025, and major carriers began returning to the Red Sea in early 2026, but the Houthis announced a resumption in February 2026 tied to the war with Iran. The correct way to read the threat is as a campaign with a political on-off switch rather than a resolved crisis.
What is the Chinese maritime militia?
The People's Armed Forces Maritime Militia is a government-directed fleet of ostensibly civilian fishing vessels that China uses to assert maritime claims through presence, harassment, and interference, operating alongside the People's Liberation Army Navy and the China Coast Guard. Its value to Beijing is legal ambiguity, because a modified fishing boat is hard to classify as a use of force or to attribute cleanly to the state. Open-source research documented 270 incidents of harassment or interference against regional fishing crews between 2012 and 2025, nearly half of them coordinated with the China Coast Guard.
What cybersecurity rules now apply to ships and ports?
Maritime cyber risk management has been mandatory since the International Maritime Organization's Resolution MSC.428(98) took effect, requiring it as part of every shipping company's Safety Management System under the ISM Code. In the United States, the Coast Guard's cybersecurity rule for the marine transportation system, effective in July 2025, requires United States-flagged vessels and facilities regulated under the Maritime Transportation Security Act to implement approved cybersecurity plans. Newbuild vessels contracted from July 2024 also fall under classification-society requirements mandating network segmentation and equipment-level security.
What does vessel security include beyond tracking?
Vessel security includes verifying that a ship is what it claims to be, which means reconciling its AIS broadcast against independent sensing, resolving the true ownership behind its paperwork, screening its crew, and assessing its behavior against an established pattern. It also includes the ship as a cyber-physical asset, since a modern bridge is a networked operational-technology environment with exploitable systems. Tracking a vessel's position is the starting point, and the security value comes from everything correlated around that position.
How does maritime weather affect security operations?
Maritime weather is an active variable in security operations because sea state, visibility, wind, and current determine what sensors can see, what craft can operate, and where a response can reach. High sea states raise radar clutter and degrade the maritime picture, fog and rain shorten camera and infrared range, and drift models driven by wind and current determine where a spill or a disabled vessel is heading. Public data from buoy networks, wave models, and weather services makes this predictable, and folding it into the security picture is what turns separate alarms into an assessment.
Where does Empyrean fit?
Empyrean's Maritime Intelligence fuses 20-plus environmental and regulatory data sources into a continuously assessed picture that wraps automatically around every AIS track. Selecting a vessel surfaces its regulatory, environmental, and threat context in place, with shipped capabilities including Port State Control detention screening, route risk scoring, and oil drift prediction. See Maritime Intelligence.
