The Space Industry's 5 Billion Dollar Blind Spot

The space cybersecurity market is approaching $5 billion in 2026 and is projected to exceed $10 billion by the early 2030s. As more capital flows into the sector, established defense contractors are expanding their offerings and a growing number of startups are entering the space. Most of that investment secures the communications link, the ground segment, and launch infrastructure. What remains largely unaddressed are spacecrafts and their capabilities, specifically the security layer for the compute and data running on board.

With the space economy on track to reach $1.8 trillion by 2035, thousands of new satellites launching each year, and on-orbit data processing scaling rapidly, the gap between what data is protected versus exposed is growing rapidly, creating a large threat environment that globally needs to be addressed.

The threat environment is no longer hypothetical

The Viasat/KA-SAT attack of February 24, 2022 was the turning point. Russian operators exploited a misconfigured VPN appliance at a ground management center in Italy, deploying the AcidRain wiper malware that bricked tens of thousands of satellite modems across Europe within hours. Ukrainian military communications were disrupted at the start of the invasion. Thousands of wind turbines in Germany went offline as collateral damage. The attack was formally attributed to Russia by the U.S., UK, EU, and roughly 20 allied nations.

That attack was not an isolated event. North Korea's Lazarus, Kimsuky, and Andariel groups breached at least 83 South Korean defense contractors between 2022 and 2023, exfiltrating data from 10 of them, and have continued targeting European drone and aerospace firms through 2025. China-attributed intrusions have reached satellite command-and-control systems multiple times (Landsat-7 in 2007, Terra in 2008, NOAA in 2014), and a leaked 2023 CIA assessment indicated that China is developing cyber weapons capable of seizing control of satellites entirely.

Academic research has confirmed what the operational incidents suggest: the attack surface is structurally insecure. An October 2025 study from UC San Diego and the University of Maryland found that approximately 50% of geostationary satellite traffic remains unencrypted and interceptable with an $800 rooftop dish, including cellular backhaul, military communications, in-flight WiFi, SCADA systems, and ATM traffic. Researchers at Ruhr University Bochum analyzed three real-world satellite firmwares and found 13 vulnerabilities, two enabling full takeover, winning a distinguished paper award at IEEE S&P 2023. At DEF CON's Hack-A-Sat 4 competition in August 2023, three of five teams successfully took control of a real on-orbit satellite within two days.

GPS spoofing and jamming have escalated to an almost routine crisis. Honeywell reports that GPS interference now affects over 1,500 flights daily, and OPSGROUP documented a 500% increase in GPS interference events over a single year. Latvia recorded 820 satellite signal interference cases in 2024, compared to 26 in 2022. Maritime spoofing has reached the point where thousands of vessels are being disrupted in concentrated bursts across multiple maritime regions.

The Space ISAC reported a 118% surge in space-related cyber incidents in the first eight months of 2025 compared to 2024, with roughly 117 publicly reported incidents and a true number believed to be significantly higher.

The quantum computing threat adds another layer of urgency. Expert consensus places "Q-Day," the point at which quantum computers can break current RSA (Rivest–Shamir–Adleman) and ECC (Elliptic Curve Cryptography) encryption, at roughly 50% probability by 2035. The immediate concern is "harvest now, decrypt later," where nation-states record encrypted satellite transmissions today for future quantum decryption, and the space industry is estimated to be 5 to 10 years behind terrestrial systems in post-quantum cryptography adoption. Most operational satellite hardware cannot natively support post-quantum cryptographic algorithms, and less than 5% of enterprises globally have a post-quantum migration plan in place.

The policy and standards environment remains immature. Space is still not formally designated as U.S. critical infrastructure under NSM-22. The Satellite Cybersecurity Act has failed to pass three times since 2022. The Aerospace Corporation's SPARTA threat matrix, the space equivalent of MITRE ATT&CK, only emerged in 2022. NIST's foundational satellite cybersecurity guidance remains voluntary. A January 2025 White House report compiled from workshops with 300 participants across 125 companies concluded that space cybersecurity practices remain underdeveloped across the industry, and that on-orbit systems lack cybersecurity sensors.

The current state of space cybersecurity

The space cybersecurity ecosystem is growing, along with the talent, capital, and operations flowing into the sector. Each of the areas discussed below addresses a real and necessary piece of the space cybersecurity problem.

Communications encryption

This is the most mature and well-funded segment. SpaceX's Starshield program has over 183 military satellites in orbit with NSA-certified encryption and a $22 billion government contract backlog. A separate MILNET constellation of roughly 480 dedicated military communications satellites was announced in December 2025. The Space Development Agency's Proliferated Warfighter Space Architecture is building a mesh constellation with NSA-certified encryption across all links. Rivada Space Networks is constructing a 600-satellite LEO mesh where data never touches the public internet. Amazon Kuiper has partnered with L3Harris for military encrypted communications. The European Space Agency (ESA) is leading Eagle-1, Europe's first satellite-based quantum key distribution mission.

Satellite link and ground segment security

CYSEC offers the most comprehensive satellite link security suite in Europe. Their ARCA SATLINK is the first commercial implementation of the CCSDS Space Data Link Security protocol, providing frame-level encryption and authentication at up to 10 Gbps with FPGA acceleration, validated in orbit on ESA's OPS-SAT in 2023. Their ARCA Trusted OS provides confidential computing for ground segments using AMD SEV-SNP and Intel TDX trusted execution environments, and they have won contracts with CNES and ESA. Xage Security secured a $17 million U.S. Space Force contract to deploy zero-trust cybersecurity across Space Systems Command ground stations. General Dynamics won a $30 million contract in January 2025 specifically for encryption solutions securing U.S. satellite systems.

Zero-trust data security

SpiderOak has deployed the most advanced zero-trust software suite to fly in orbit. Their OrbitSecure platform uses no-knowledge encryption and decentralized key management via distributed ledger technology, embedding security into the data itself rather than the network layer. SpiderOak demonstrated OrbitSecure on a Ball Aerospace payload in 2023, twice on the International Space Station via Axiom Space, and in September 2025 was awarded an SDA contract to deliver the first HAIPE encryptor with zero-trust microsegmentation for the Proliferated Warfighter Space Architecture.

Post-quantum cryptographic hardware

SEALSQ embeds post-quantum cryptographic chips using NIST-standardized algorithms (CRYSTALS-Kyber and CRYSTALS-Dilithium) directly into LEO satellites operated by WISeSat. The constellation currently includes 22+ operational satellites, with a long-term vision of a 100-satellite Quantum Spatial Orbital Cloud constellation by 2033. SEALSQ also offers quantum random number generation and a hardware root-of-trust chip, making it one of the more technically comprehensive offerings in the space security market.

On-orbit intrusion detection

Deloitte launched Deloitte-1 in March 2025, a 6U CubeSat carrying Silent Shield, the first on-orbit cyber intrusion detection system. Silent Shield monitors satellite bus traffic using one-way data ingestion with onboard machine learning inference, designed so that even if the IDS itself were compromised, it could not be used to attack the host satellite. Deloitte has contracted Spire Global to build eight additional Silent Shield satellites, with the last three incorporating inter-satellite links to test lateral cyber attack movement between spacecraft.

Orbital cryptographic operations

SpaceComputer is building Space Fabric, a satellite-native security architecture that combines confidential computing, on-orbit key management with dual secure elements (where no signing key has ever existed on Earth), and a satellite-binding protocol (SEAP) that cryptographically proves computation is running on a specific satellite in orbit. Space Fabric is designed for general-purpose orbital compute and space internet use cases, with post-quantum cryptography in active development and the full architecture detailed in a peer-reviewed paper. Cryptosat operates in a more targeted niche, running nano-satellites as tamper-proof hardware security modules for Web3 and blockchain protocols, including trusted setups for Ethereum's KZG ceremony and the first Space Wallet using threshold signatures.

The $5 billion blind spot

For the space internet and orbital compute to work on the same scale as they do on Earth, they need comprehensive cybersecurity. Not just encrypted links and hardened ground stations. A full-stack security architecture that covers the hardware, the software, the key management, the execution integrity, and the physical attestation of the systems running in orbit, designed to be adaptable to any system, not just one vendor's constellation.

That architecture does not exist yet.

Consider what is happening in orbital compute right now. Starcloud (backed by In-Q-Tel, valued at roughly $2.3 billion) trained an AI model on NVIDIA H100 GPUs in space in December 2025. Axiom Space is building Orbital Data Center nodes with roughly $525 million in funding. Google's Project Suncatcher plans to fly Trillium TPUs with Planet by 2027. ADA Space in China launched 12 satellites for a computing constellation in May 2025. Companies like Aethero and EDGX are building the radiation-hardened compute hardware, delivering 100 to 550 TOPS on NVIDIA platforms, that make this entire segment possible.

The current space cybersecurity ecosystem falls short through a collective gap in coverage. The industry is securing the space internet the way the early internet was secured: in disconnected fragments, with each company solving one function while assuming someone else will handle the rest. Surely we would have learned from our past mistakes. The fragmented cybersecurity offerings for compute and internet services in orbit today are as follows:

Link encryption to protect data in transit, but no verification the integrity of computation performed on that data once it arrives.

Zero-trust access control determines who can touch the data, but does not prove that the underlying system performing the work has not been tampered with.

Post-quantum chips future-proof communications, but do not provide verifiable execution or general-purpose confidential computing in orbit.

Intrusion detection identifies anomalies after they occur, but does not prevent them or guarantee system integrity.

Ground-based confidential computing protects workloads on terrestrial infrastructure, but the trust model relies on CPU vendor attestation chains that recent research has shown can be broken through physical access to the memory bus, an attack that is inherently impossible against hardware in orbit.

What is missing is a comprehensive cybersecurity architecture for the full orbital stack: hardware and software, key management and verifiable execution, physical attestation and post-quantum readiness, built to be adaptable across systems rather than locked to a single vendor's platform.

The space internet and orbital compute are scaling without it. Every satellite constellation, orbital data center, and edge processing node being deployed without comprehensive security represents an exposed surface in a threat environment that is already demonstrating the capability and willingness to exploit it.

The $5 billion being invested in space cybersecurity today is necessary yet still insufficient. It covers the comms layer and the ground segment. It does not cover the compute layer, the space internet services layer, or the infrastructure that will connect the rest of the orbital economy. That is the blind spot, and it represents the single largest unpriced risk in the space economy.

What we are building

So how's SpaceComputer working on solving this?

SpaceComputer is a cybersecurity and infrastructure company building the trust layer for the emerging Space Internet. We focus on making high-value compute, AI workloads, cryptographic services, and mission infrastructure independently verifiable across both terrestrial and orbital environments.

Space Fabric is the security architecture at the core of that vision, and the answer to the cybersecurity gap in orbit: a satellite-native hardware and software architecture designed to provide comprehensive cybersecurity for the full orbital stack, adaptable to any system building in or relying on space. It combines hardware roots of trust, trusted execution environments, cryptographic key management, remote attestation, post-launch key generation, policy enforcement, and signed provenance into a common architecture for secure computing in orbit.

Verifiable execution through Satellite-based TEEs provides confidential computing on the satellite itself. Built on ARM TrustZone, the hardware-isolates secure and normal execution worlds on the satellite's CPU, enabling multiple customers to deploy proprietary workloads on shared orbital infrastructure where neither the operator nor other tenants can observe or tamper with their code or data. Unlike ground-based confidential computing platforms that depend on CPU vendor attestation chains vulnerable to physical memory bus attacks, Satellite-based TEEs' trust model is rooted in the physical inaccessibility of the satellite. Satellite-based TEE is what makes computation in orbit trustworthy, but it depends on the layers beneath it to prove that trust.

On-orbit key management through KMS generates, stores, and manages all cryptographic keys entirely in orbit, inside two separate secure elements (the NXP SE050 and the fully open-source Tropic Square TROPIC01) that must both co-sign every operation. All private keys are created after launch and flagged as non-exportable. No SpaceComputer signing key has ever existed on Earth. When the satellite de-orbits at end of life, every key and every secure element is physically and irreversibly destroyed during atmospheric reentry, a guarantee no terrestrial system can offer. KMS is what anchors the entire architecture's cryptographic foundation, but without proof that the satellite is where it claims to be, key management alone is insufficient.

Physical attestation through Proof of Execution Triangulation (Proof of ET) and the Satellite Execution Assurance Protocol (SEAP) closes that loop. Independent ground stations around the world each verify they are communicating with the actual satellite and endorse its identity. Once enough ground stations have signed off to meet a Byzantine-tolerant threshold, the satellite holds a Certificate of Authorization: cryptographic proof that the computation is happening on a specific satellite in orbit and not on a ground-based replica. This satellite-binding protocol is what makes Space Fabric verifiable in a way that no purely software-based or ground-based security architecture can replicate.

Post-quantum cryptography is in active development to ensure the architecture remains resilient as quantum computing matures. Current secure elements do not natively support PQC, so Space Fabric implements a hybrid migration path: hardware-bound ECC for platform binding combined with software-based post-quantum signatures (hybrid ECC + Falcon) for quantum resistance.

No single one of these capabilities is the point. The point is that they combine into a comprehensive security architecture that covers verifiable execution, key management, physical attestation, and quantum readiness as a unified system. Space Fabric is built to be adaptable across third-party systems, providing the security layer for any organization running sensitive workloads in orbit or relying on orbital infrastructure from the ground, not just SpaceComputer's own satellites. It integrates into existing architectures the same way a hardware security module or cloud TEE service would, with the added dimension that the attestation proof includes cryptographic evidence of orbital deployment.

The comms layer of space cybersecurity is well-funded and increasingly mature. The compute layer, the space internet services layer, and the trust infrastructure that the trillion-dollar orbital economy depends on are not. That is the $5 billion blind spot, and closing it is what we are building for.

SpaceComputer is building Space Fabric, a satellite-native security architecture that combines verifiable execution, on-orbit key management, cryptographic proof of orbital deployment, and post-quantum readiness into a comprehensive security layer for the space internet and orbital compute. The full paper, "Space Fabric: A Satellite-Enhanced Trusted Execution Architecture" is available here.

Visit our website.
Follow us on LinkedIn and Twitter (X).