Your satellite is running Linux. It gets over-the-air updates. And if one of them is compromised, the exploit doesn’t stop at one spacecraft — it scales to the whole constellation.
For decades, space was the safest place to put a computer. Custom hardware, air-gapped systems, one-off software — the attack surface was tiny. That era is over. Satellites now run commercial operating systems, share software platforms across fleets, and receive remote patches in orbit. They’re networked computers first and spacecraft second, which means they inherit every vulnerability that comes with the territory.
The threats are accelerating faster than the defenses. Quantum computing will eventually break the encryption that protects satellite links today. Remote software patching — essential for long-duration missions — opens new doors for attackers every time an update goes out. And in large constellations, a single bug in shared code can ripple across hundreds of spacecraft before anyone notices.
ESA’s General Support Technology Programme (GSTP) is responding by treating cybersecurity as a foundational component rather than an afterthought. In May 2026, the agency published its (Cyber)Security Products for Space Systems Protection 2026-2028 document and convened a workshop at ESTEC bringing together industry, security experts, and mission planners. The agenda wasn’t about bolt-on fixes — it was about building security blocks that future missions can slot in from day one.
The Three Biggest Threats in Orbit
Antonios Atlasis, Head of ESA’s System Security section, identifies three threats that dominate the current landscape:
Quantum computing. Once mature, quantum machines will crack most of the public-key cryptography protecting satellite communications and ground infrastructure. “The threat of quantum computing is one of the biggest threats to security — especially for cryptography,” Atlasis says. “But it is not the only one.”
Remote patching at scale. Satellites increasingly need software updates after launch — for vulnerabilities, feature additions, configuration changes. Every update mechanism is a potential entry point. “Secure software patching is not something new, but in space we were not used to it until recently,” Atlasis notes. “Now we have a less constrained environment and the need for patching is there for every kind of system.”
Constellation-wide cascading failures. When hundreds of satellites run the same commercial off-the-shelf software, one exploit doesn’t just hit one target. It propagates. The challenge is ensuring that multiple applications — often built by different organizations — don’t introduce security risks to each other or the wider network.
From One-Off Fixes to Reusable Defense
GSTP’s approach marks a shift in how space security is conceived. Instead of each mission developing its own encryption, its own patching system, its own application isolation — all from scratch, all with their own unknown bugs — ESA wants an ecosystem of certified, off-the-shelf security components.
“Our vision is these building blocks will be developed as products by our industry, eventually making them available off-the-shelf for future missions,” Atlasis says. The May workshop was designed to match specific security products with companies that can build them, fast-tracking development in under 18 months.
Three Projects in Flight
The building-block approach isn’t theoretical. Three active GSTP projects show what it looks like in practice:
OHB Germany is developing reprogrammable navigation satellites whose onboard hardware can be securely updated in orbit — protected by post-quantum cryptography. For end users, this means navigation data stays trustworthy even as computing power advances on the attack side.
Airbus TANDI (Trust and Isolation for Applications in Satellites) applies terrestrial layered security to space for the first time, isolating applications on the same satellite computer so a breach in one can’t cascade into full mission loss.
CYSEC ARCA SATLINK Encryptor delivers a ready-to-use encryption library built to international standards, handling both link encryption and cryptographic key management over a satellite’s lifetime.
The through-line is clear: space cybersecurity is moving from custom, mission-specific fixes to standardized, reusable defenses. The threat landscape demands it, and ESA’s GSTP is building the toolkit.
The difference between a satellite and a server used to be everything. Now it’s mostly altitude.
