A floating city of guests, payments and secrets. Keep it safe.
Six thousand guests, two thousand crew, a casino, a hospital and a bridge, all on one hull and one satellite link. Nesicon Insight shows what moves across that network, proves it to regulators, and stops the data your guests trusted you with from leaking.
For a cruise line, a breach is a guest-trust event broadcast worldwide.
Passenger data, card payments and medical records make cruise ships the most data-rich vessels afloat. Attackers have noticed.
Six thousand guests bring twelve thousand devices.
Every cabin corridor is a Wi-Fi network carrying phones, tablets and smart TVs, right next to the key-card locks and the crew tablets that run the hotel. It is the busiest network on the ship and the easiest to join.
Why it matters: GDPR and NIS2 ask the same thing: know what is on that network and keep it away from the systems that run the ship.
The booking lives in the cabin.
Folio, passport details, dietary needs, room service, the balcony door lock: all of it moves between the cabin portal, the hotel system and head office over one satellite link. A single leaked travel-agent portal exposed 27,000 agent logins at a major line.
Why it matters: A guest can prove you leaked their data. Nesicon lets you prove exactly what did, and did not, leave the ship.
Cards, cash and a thousand terminals.
Slot machines, bar terminals and the cashier cage all handle card data. PCI DSS requires that data to stay inside a defined, monitored network on every sailing, and your assessor will ask for proof.
Why it matters: Nesicon spots a card number travelling outside the payment zone the moment it happens and gives your assessor evidence from the wire.
The most sensitive data on board.
The ship's hospital holds health records, insurance numbers and passport details. Under GDPR they are special-category data; US state law calls it medical information. Both carry the highest penalties.
Why it matters: Nesicon detects medical records moving where they should not, including into email, cloud tools and public AI.
A passenger ship is still a ship.
Navigation, propulsion, fire and safety systems answer to the IMO and class, exactly like a tanker. Since 2021 cyber risk is part of the Safety Management System, and new builds contracted from July 2024 must be cyber-resilient by design.
Why it matters: Port State Control can detain a ship whose safety system ignores cyber risk.
The rules a cruise line must meet, in plain language.
Cruise lines answer to maritime regulators for the ship and to privacy and payment regulators for the guests. Nesicon Insight covers both sides with one sensor.
This is where Nesicon sits.
A small appliance on a mirror port of the core switch sees the traffic between guest, crew, payment, medical and ship-operation networks, reads it, and alerts the moment something crosses a line it should not.
Why it matters: Nothing is installed on guest devices or ship systems. Findings reach head office over the satellite link.
What Nesicon Insight does on a cruise ship.
Passive sensors on the ship and in head office. Nothing installed on guest devices or bridge systems. One view across the fleet.
Built for ships that never stop: no downtime, no agents on guest devices, bandwidth-light.
A sensor on the core switch
The appliance listens on a mirror port and sees the traffic between guest, crew, payment, medical and ship-operation networks without touching any of them.
Guest privacy by design
Nesicon looks for regulated identifiers such as card numbers, passport numbers and health records. It records that they crossed, where to, and the evidence, not the guests' browsing.
Findings travel light
Only compact findings reach head office over the satellite link. The fleet console shows every ship side by side.
Optional agent for crew and office machines
Adds vulnerability scanning, hardening checks and ransomware early warning on the PCs that run the business.
The passive sensor reads unencrypted traffic and binary ship and payment protocols. Encrypted traffic is seen by destination and volume unless you enable the optional proxy mode on managed devices.
Nesicon Insight supports compliance; it is not a certificate. Your flag state, class society, acquirer and data-protection authority remain the authority.
See it on one of your ships.
Tell us about your fleet and we will come back within one working day.
Write to us at
info@nesicon.comWe answer in English and Greek. Nesicon Insight is developed in Greece and deployed worldwide.