Skip to content
    FR

    Yacht Network Installation, Wi-Fi & CybersecurityManaged onboard networks, segregated crew and guest Wi-Fi, firewalls and IMO cyber-risk compliance.

    A yacht network carries guests’ streaming, the crew’s operations, CCTV, automation and, increasingly, navigation data. It has to be fast everywhere on board, properly separated, and defensible in front of an owner, an insurer or a flag-state auditor. We design, secure and document it.

    Request a security auditDiscuss your installation

    • Guests online, bridge protected

      Separate networks for owner, guests, crew and vessel systems, with priority where it matters.

    • No more dead zones

      Wi-Fi surveyed and tuned from the sun deck to the crew mess and the tender garage.

    • Audit-ready documentation

      Inventory, diagrams, policies and evidence prepared for IMO cyber-risk requirements and insurers.

    • One partner, 24/7

      Network, Wi-Fi and security handled by the same team, reachable around the clock.

    What we do

    Network design and refresh

    Most problems on board come from networks that grew one device at a time. During a refit or yard period we rebuild the core properly: structured cabling, managed switching, a clean rack and VLANs that reflect how the yacht actually operates.

    • Structured cabling, switching and rack refresh
    • VLAN design: owner, guest, crew, vessel systems, AV, CCTV and automation
    • Kerio Control and Cisco equipment configured and documented
    • IP addressing plan and DNS that the next ETO can read

    Managed Wi-Fi with crew and guest segregation

    A heat-map survey tells us where the access points should be. A managed Wi-Fi platform such as Ruckus then gives every group its own network, with roaming across decks, bandwidth limits and a simple guest onboarding.

    • Wi-Fi survey, heat map and access-point placement
    • Ruckus managed Wi-Fi with seamless roaming between decks
    • Separate owner, guest and crew Wi-Fi with per-group bandwidth rules
    • Guest onboarding without exposing the ship network

    Firewall, VPN and remote-access hardening

    Remote access is the usual way in for attackers. We review every exposed port and rule, enforce VPN and multi-factor authentication, and make sure logging exists before an incident, not after.

    • Firewall rule review on Kerio Control and Cisco
    • VPN and multi-factor authentication for crew and contractors
    • Closing of exposed remote-access ports and unused services
    • Endpoint protection and logging

    IMO cyber-risk management (ISM Code)

    IMO Resolution MSC.428(98) requires cyber risk to be addressed in the Safety Management System of ISM-managed vessels, following the MSC-FAL.1/Circ.3 guidelines. We handle the technical and documentary side so the captain and manager arrive at the audit prepared.

    • Asset inventory and cyber-risk assessment of onboard IT and OT systems
    • Network segregation evidence, access policies and crew procedures
    • Incident response and recovery plan
    • Documentation ready for the SMS and for flag and class audits

    We prepare the technical measures and documentation. Certification decisions remain with the flag state and the classification society.

    Monitoring and 24/7 support

    Security is not a one-off. We monitor the network, keep firmware current and stay reachable 24/7 so a problem at 03:00 in the Caribbean is handled, not discovered at breakfast.

    • 24/7 remote support by phone, email and WhatsApp
    • Proactive monitoring, patching and configuration backups
    • Periodic reviews before charter season and after refits

    Brand names on this site describe the equipment we work on. They do not imply any official partnership, certification or affiliation with the manufacturers.

    FAQ

    Questions captains ask us

    Does the IMO cyber-risk requirement apply to my yacht?

    The ISM Code, and with it IMO Resolution MSC.428(98) on cyber risk, applies to commercially operated yachts of 500 GT and above. Private yachts are not obliged, but owners, managers and insurers increasingly ask for the same standard. We adapt the scope to your flag, class and operation.

    Can guests have fast Wi-Fi without ever reaching the ship network?

    Yes. Guests get their own network with its own bandwidth rules and a simple onboarding. Owner, crew and vessel systems such as navigation, CCTV and automation sit on separate segments with firewall rules between them.

    What does a cybersecurity audit on a yacht look like?

    We inventory the equipment, scan for exposed services, review firewall and remote-access rules, check how networks are separated and how access is managed, and deliver a written report with prioritised fixes. It can be done remotely or on board.

    How do you handle crew personal devices?

    Crew phones and laptops go on a dedicated crew network with its own rules, separate from vessel systems. We also help write simple, realistic procedures for crew, which is part of what the IMO guidelines expect.

    How do you protect digital privacy on a superyacht’s Wi-Fi?

    Guests get their own network, isolated from the owner, crew and vessel systems, with client isolation so devices cannot see each other. Guest traffic is not inspected or logged beyond what the firewall needs to operate, remote access to the network is limited to named people with VPN and multi-factor authentication, and default passwords on access points, routers and cameras are replaced. For owners who want more, we add a VPN exit so the yacht’s internet traffic is not tied to the port or the satellite provider.

    How do you secure a yacht’s onboard network against cyber threats?

    Four layers: a firewall with reviewed rules and no exposed remote-access ports; separate networks for owner, guests, crew and vessel systems such as navigation, CCTV and automation; up-to-date firmware and endpoint protection on crew computers; and monitoring with logs, so an incident is seen and handled. Everything is documented so the next captain or ETO knows what is in place.

    What does a reliable yacht connectivity setup look like?

    Two or three internet links that fail over automatically: Starlink as the primary link, 4G/5G near the coast, and VSAT as a backup on larger yachts, all managed by one router such as a Peplink. Behind it, a properly segmented network and a managed Wi-Fi with full coverage. The result is that guests stream, the crew works and the bridge keeps priority, without anyone touching a setting.

    Contact

    Get in touch

    Tell us about the yacht and what you need. Onboard across the Côte d’Azur, from Saint-Tropez to Monaco. 24/7 remote support worldwide.

    Request a network and security audit

    No newsletter, no spam. Your details are only used to answer your request.

    Email

    info@yachtlink.io

    Phone

    +33 7 56 96 96 93

    WhatsApp

    +33 7 56 96 96 93

    Base

    Côte d’Azur, France