← All Resources

What is Maritime Intelligence?

A technical reference on maritime intelligence and maritime domain awareness: AIS and its limits, dark vessel detection, vessel identity and beneficial ownership, sanctions and Port State Control risk, environmental factors, and why maritime intelligence is a multi-INT fusion problem for navies, coast guards, insurers, ports, and shippers.

What Is Maritime Intelligence?

Maritime intelligence is the practice of turning everything observable about activity at sea into a decision-ready understanding of who is out there, what they are doing, and whether you should care. The doctrinal cousin is MDA (Maritime Domain Awareness), defined as the effective understanding of anything in the maritime domain that could affect security, safety, the economy, or the environment. The breadth of that definition is the point: the same picture serves a navy hunting a sanctioned tanker, a coast guard running a rescue, an insurer pricing a hull, and a port screening an inbound vessel.

A vessel position by itself is a dot. Maritime intelligence is what surrounds that dot, identity, ownership, history, regulatory standing, environment, and behavior, fused into one assessment. That makes it a multi-INT fusion problem more than a tracking problem, which is the thread running through this whole page.


The picture starts with AIS, and its limits

Most maritime pictures begin with AIS (Automatic Identification System), the transponder system that broadcasts a vessel's identity, position, course, and speed. AIS comes in Class A (required on larger commercial and SOLAS-regulated vessels) and Class B (smaller craft), and it is received two ways: terrestrial AIS from coastal receivers near shore, and satellite AIS (S-AIS) for the open ocean where no shore station can hear it.

AIS is the backbone, and it is also where the naive picture goes wrong. AIS is self-reported and unauthenticated, which means it can be turned off, spoofed, or manipulated:

  • Going dark. A vessel switches its transponder off to disappear during the activity it does not want seen, a ship-to-ship transfer, a port call it wants to hide, a fishing incursion. A picture built only on AIS shows nothing, which is precisely the problem.
  • Spoofing and manipulation. A vessel transmits a false position, a false identity, or a cloned identity belonging to another ship. AIS data alone cannot tell you it is lying.
  • Coverage gaps. Even honest AIS has gaps from receiver range, satellite revisit timing, and message collisions in crowded waters.

The operational lesson is the same one that governs all fusion: AIS is one source, not the picture. The intelligence comes from corroborating it, or catching it lying, with everything else.


Beyond AIS: detecting the vessels that do not want to be seen

The vessels that matter most are often the ones not broadcasting. Catching them is a multi-source problem, and it is where maritime intelligence earns its name.

  • Radar. Coastal, shipborne, and over-the-horizon radar detects hulls regardless of what their transponder is doing.
  • SAR (Synthetic Aperture Radar) satellite imagery. Day, night, and through cloud, SAR detects vessels on the open ocean by their radar return. Correlating a SAR detection with no matching AIS track is a primary method for finding dark vessels.
  • EO (Electro-Optical) and infrared satellite imagery. Higher-resolution visual identification and classification of a detected vessel, when weather and revisit allow.
  • RF geolocation. Many vessels emit other RF, navigation radar, communications, even when AIS is off. Geolocating those emissions finds and characterizes a ship that is otherwise dark.
  • Acoustic sensing. Passive underwater acoustics detect and classify vessels in environments where RF and optical fail, and matter increasingly for the RF-silent and autonomous-platform gap.

The method that ties these together is correlation by absence and contradiction: a SAR or RF detection with no corresponding AIS, or an AIS track that does not match what the radar sees, is exactly the anomaly worth an analyst's attention. Fusion surfaces it; a single feed cannot.


Vessel identity and the ownership problem

Knowing a hull is there is not knowing whose it is, and in maritime intelligence the identity question is deep.

Every SOLAS vessel carries an IMO (International Maritime Organization) number, a permanent hull identifier that does not change with the ship's name or flag. Above that sits a chain that is deliberately hard to follow: the flag state (the country of registry, which can be changed, "flag hopping"), the registered owner (often a single-ship shell company), the beneficial owner (the party that actually controls and profits, frequently several layers up), the operator, and the manager. The classification society certifies the vessel's condition.

Sanctions evasion and illicit trade exploit every joint in that chain: flag hopping to shed a watched registry, identity laundering where a vessel adopts another ship's IMO or name, and shell-company ownership that obscures who is really behind a hull. Resolving a vessel to its true controlling entity is entity resolution applied to the sea, and it is the bridge between maritime intelligence and financial intelligence.


Regulatory and risk context

A track plus an identity still is not intelligence until you wrap it in the regulatory and risk picture that tells you whether the vessel is a problem.

  • Port State Control (PSC). Regional regimes such as the Paris and Tokyo MoUs inspect foreign vessels and can detain those that fail. A vessel's detention history is one of the strongest single signals of risk, for a port deciding whether to admit it and for an insurer deciding whether to cover it.
  • Sanctions exposure. Screening a vessel, its owners, and its recent port calls against sanctions lists (such as OFAC designations) surfaces the ships and networks operating outside the rules.
  • Safety and security regimes. ISM and ISPS standing, casualty history, and inspection records round out whether a vessel is well-run or a hazard.
  • IUU fishing. Illegal, Unreported, and Unregulated fishing is a maritime-intelligence problem of its own, detecting fishing activity where it is not permitted, often by exactly the dark-vessel methods above.

Environment is not a backdrop

At sea, the environment is an operational variable, not scenery. Sea state, wind, currents, bathymetry, and ice change what sensors can see, what a vessel can do, and what happens when something goes wrong. Two cases where environment is central rather than incidental:

  • Search and rescue depends on drift modeling, fusing last-known-position with currents and wind to predict where a person or vessel has moved.
  • Pollution response depends on oil spill and drift prediction, modeling where a discharge will travel so it can be intercepted.

Environmental modeling is itself a fusion input: it modifies sensor confidence, route feasibility, and risk, rather than sitting as a static overlay.


Trade intelligence and the financial layer

A vessel's position and identity tell you who and where. Its cargo and trade behavior tell you why - and whether the "why" is legitimate. Trade-level data is where maritime intelligence meets counter threat finance, and the signals are distinct from anything a sensor can see.

  • Bills of lading and cargo manifests. The declared cargo, origin, destination, and consignee. Discrepancies between declared cargo and observed behavior - a bulk carrier that loads but never offloads, a container vessel whose declared weight does not match its draft - are primary indicators of trade-based money laundering (TBML).
  • TBML (Trade-Based Money Laundering). Moving value by manipulating trade transactions: over-invoicing, under-invoicing, phantom shipments, and multiple invoicing of the same goods. TBML is among the most common and hardest-to-detect laundering methods, and the maritime domain is where much of it physically moves. Fusing a vessel's ownership, trade history, port calls, and cargo declarations against known TBML patterns is a core maritime intelligence use case. See What is Counter Threat Finance?.
  • Bunker fuel and commodity pricing. Fuel costs, bunker delivery records, and commodity spot prices provide behavioral context. A vessel that refuels at an unusual port, pays above-market rates, or uses a previously unseen bunker supplier may be operating outside normal commercial channels because its normal channels are closed by sanctions.
  • Ship-to-ship (STS) transfers. Cargo or fuel transferred at sea between vessels, often to obscure origin. STS events are legitimate and routine for lightering, but an unexplained STS in open water between a dark vessel and one with sanctions exposure is a high-priority indicator.
  • OSINT enrichment. Open-source commercial data - port call histories, fleet employment, charter fixtures, and insurance club membership - wraps around a vessel's AIS track to tell you whether its current behavior is consistent with its commercial profile or an anomaly worth investigating.

The pattern is the same as the rest of maritime intelligence: no single source answers the question alone, but fused together they surface the vessels and networks that are trying not to be seen. Trade intelligence makes maritime intelligence actionable for sanctions enforcement, counter-proliferation, and financial compliance in a way that track-only awareness never can.


War risk, insurance, and the commercial intelligence layer

War risk insurance is not just a cost of doing business at sea - it is an intelligence signal in its own right. When the Joint War Committee (JWC) designates an area as a Listed Area, standard hull war clauses activate cancellation-and-reinstatement mechanics, additional premiums reprice on a voyage-specific basis, and charterers, financiers, and flag states reassess exposure. The commercial effect can be faster and broader than the kinetic threat: insurance closed the Strait of Hormuz to most traffic before missiles did.

The intelligence value runs in both directions:

  • JWC Listed Areas as dynamic threat overlay. The JWC Listed Areas represent an institutional consensus on where the physical threat is elevated. Overlaying them on the COP alongside live vessel positions gives an operator or a compliance officer immediate visual context for which transits carry additional premium liability.
  • Additional premium as risk signal. Hull war additional premiums (AWP) typically run 0.01-0.05% of hull value for low-risk areas and can spike to 0.7-1.0% or higher during active conflict. The price itself encodes risk: watching premium movements surfaces threat escalation before it reaches the news cycle.
  • P&I club membership and coverage status. Protection and Indemnity club standing reveals whether a vessel is insured by a mainstream mutual or operating on the margins. Vessels dropped by their P&I club or operating with unknown or sanctioned-jurisdiction coverage are elevated risk indicators.
  • Charterer and financier exposure. A vessel entering a Listed Area triggers obligations up the commercial chain. Knowing which vessels in your fleet or your counterparty's fleet are transiting JWC areas is a compliance and risk-management function that runs in real time.

Route risk scoring and voyage assessment

Route planning at sea is not just navigation - it is a continuous risk assessment against threat, environment, compliance, and commercial factors. A maritime intelligence platform scores routes across multiple dimensions simultaneously:

  • Threat and security. Piracy, anti-shipping attacks, mine risk, and armed conflict. The IMO's Maritime Security Centre - Horn of Africa (MSCHOA), NATO Shipping Centre, and UKMTO report live threats. JWC Listed Areas and NAVAREA warnings provide the institutional risk floor.
  • Sea state and weather. Wave height, wind force, current, and swell from forecast models (WaveWatch III, ECMWF) scored against vessel class and cargo type. What a container vessel can transit safely a small craft cannot.
  • Regulatory and port compliance. Emission Control Areas (ECAs), MARPOL special areas, and port-specific requirements (fuel sulfur limits, ballast water management, garbage discharge) that a route must comply with or avoid.
  • Navigational hazards. Depth constraints, narrow channels, TSS (Traffic Separation Schemes), and high-traffic density zones scored against vessel draft and manoeuvrability.
  • Communications and infrastructure. SAR coverage, VTS (Vessel Traffic Service) zones, and shore-based emergency response accessibility along the route.
  • War risk and insurance. Whether the route crosses JWC Listed Areas and the estimated additional premium exposure for the transit.

The output is a per-segment score that tells an operator or a fleet manager not just "can we go this way" but "what is the cost in risk if we do."


Vessel compliance and the regulatory picture

A vessel operating at sea is subject to a layered stack of regulatory obligations that maritime intelligence monitors as a continuous compliance posture:

  • IMO statutory certificates. SOLAS (Safety of Life at Sea), MARPOL (pollution prevention), MLC (Maritime Labour Convention), and Load Line certificates must be current. Certificate status and expiry are primary PSC targeting criteria.
  • ISM Code (International Safety Management). The framework requiring operators to maintain a documented safety management system. A vessel without a valid Document of Compliance (DoC) or Safety Management Certificate (SMC) is operationally non-compliant.
  • ISPS Code (International Ship and Port Facility Security). The security regime requiring ships and port facilities to maintain security plans and respond to threat levels. A vessel's ISPS certificate status affects port access.
  • CII and EEXI (Carbon Intensity Indicator / Energy Efficiency Existing Ship Index). IMO regulations effective from January 2023 require vessels to report fuel consumption, receive annual CII ratings (A through E), and meet minimum energy-efficiency baselines. A vessel rated D for three consecutive years or E in any year must submit a corrective action plan. CII ratings are becoming a charterer and financier screening criterion.
  • EU ETS and FuelEU Maritime. European regulations requiring ships of 5000 GT or above to surrender emission allowances for verified greenhouse gas emissions on qualifying voyages. Compliance costs are increasingly priced into charter rates and influence route decisions.

Fusing these compliance indicators with live position and ownership data tells you whether a vessel is well-run, deteriorating, or operating outside the regulatory framework. For a port deciding whether to admit a ship, an insurer deciding whether to cover it, or a charterer deciding whether to hire it, the compliance picture is as important as the position.


Maritime intelligence is multi-INT fusion at sea

Step back and the structure is familiar. AIS, radar, SAR, EO, RF, and acoustics are the sensors. Registries, ownership, sanctions, and PSC records are the open-source and financial disciplines. Weather and oceanography are the environment. Maritime intelligence is the fusion of all of it into one assessed picture, which is why it maps cleanly onto the JDL/DFIG fusion stack: detect the object, resolve its identity, assess the situation it forms with other vessels and the environment, and judge the impact.

The dual-use breadth follows directly. Navies and coast guards run it for security and rescue. Marine insurers run it to price risk and screen hulls. Ports run it to vet inbound vessels. Shippers run it to manage exposure across a fleet. Fisheries enforcement runs it against IUU activity. The underlying problem, many heterogeneous maritime sources, one decision, is identical across all of them.


Where Empyrean fits

Empyrean's MARINT (Maritime Intelligence) fuses 20-plus environmental and regulatory data sources into a continuously assessed maritime picture that wraps automatically around every AIS track in the operational area. Selecting a vessel surfaces its regulatory, environmental, and threat context in place, with shipped capabilities including PSC detention screening, route risk scoring, and oil drift prediction, no separate queries or tab-switching. It runs on the same fusion pipeline and policy engine as the rest of the platform, deployable to the edge. For the capability detail, see Maritime Intelligence.


Related reading

Related topics

Maritime Intelligence FAQQuick-reference answers on maritime intelligence and maritime domain awareness: AIS and its limits, dark vessel detection, beneficial ownership, sanctions and Port State Control risk, IUU fishing, and how maritime intelligence works as multi-INT fusion.What is Counter Threat Finance?A technical reference on Counter Threat Finance (CTF): the doctrine behind DoDD 5205.14 and JP 3-25, the difference between defense CTF and financial-sector AML/CFT, how sanctions, PEPs, debarment, shell companies, and trade-based money laundering fit together, the interagency architecture, and what operational counter-threat-finance software actually requires when the money trail has to tie back to a live sensor picture.Counter Threat Finance FAQQuick-reference answers on counter threat finance (CTF), sanctions screening, beneficial ownership, OFAC SDN lists, trade-based money laundering, and the operational requirements for tying financial intelligence to a live sensor picture.What is Entity Resolution?A technical reference on Entity Resolution (ER): the problem of deciding when two records describe the same real-world entity, the deterministic, probabilistic (Fellegi-Sunter), machine-learning, and graph-based methods that solve it, why ontology and normalization come first, how ER underpins sanctions screening and beneficial-ownership resolution, and what it takes to tie resolved entities to a live operational sensor picture.Entity Resolution FAQQuick-reference answers on entity resolution, record linkage, the Fellegi-Sunter model, deterministic and probabilistic matching, blocking, graph-based resolution, and how entity resolution underpins sanctions screening and beneficial-ownership investigation.What is Space Situational Awareness?A technical reference on Space Situational Awareness (SSA) and Space Domain Awareness (SDA): orbital tracking, TLE propagation, the Space Surveillance Network, satellite characterization, counterspace threats, and why the space domain impacts every other domain you operate in.
Empyrean Defense

Want to see this in action?

Request a demo or explore the platform capabilities.