Does Carmel protect a link while it is physically cut open for repair?

Yes. Carmel transmits data in a form that cannot be recorded, so even if a tap is installed during a repair window when the fiber is exposed, the device captures only optical noise rather than recoverable data.

Does Carmel detect a fiber tap, or prevent one?

Carmel does not detect or prevent taps. Instead, it renders taps ineffective by transmitting at the photonic layer in a form that cannot be recorded or reconstructed, so any intercepted signal is useless to an attacker.

Does adding Carmel mean replacing the existing DWDM equipment?

No. Carmel integrates with existing DWDM infrastructure without requiring replacement of current equipment, allowing organizations to add photonic-layer protection to their existing fiber optic networks.

How does Carmel relate to a post-quantum cryptography migration?

Carmel provides physical-layer protection that complements post-quantum cryptography. While PQC addresses cryptographic vulnerabilities, Carmel protects against harvest-now-decrypt-later attacks by making the optical signal itself unrecordable at the fiber level.

How many Carmel units does one protected link require?

A protected link requires two Carmel units: one at each endpoint of the fiber connection to transmit and receive the unrecordable optical signal.

What Are CyberRidge's Integration and Deployment Options for Unrecordable High-Speed Optical Transmission?

A breakdown of how CyberRidge's Carmel platform integrates with existing optical infrastructure, the deployment topologies it supports, and what a live field validation with Vodafone showed.

‍

Unrecordable high-speed optical transmission uses photonic-layer security to make an optical signal physically unrecordable to interception, independent of any software encryption running above it. CyberRidge's Carmel platform delivers this protection by substituting a standard transmission line card rather than adding a standalone encryption appliance or parallel QKD hardware. Integration options include point-to-point links, ring topologies, and full metro or long-haul network environments. In a field validation with Vodafone, Carmel maintained an unrecordable link across 205 kilometers of optical infrastructure incorporating existing EDFA and Raman amplifiers and flexgrid ROADMs. CyberRidge frames this as a plug-and-play deployment that reaches Post-Quantum Ready status in weeks rather than years.

‍

CyberRidge's integration and deployment options for Carmel center on three network topologies, point-to-point, ring, and full network, combined with hardware that is built to slot into infrastructure operators already run. Carmel supports standard 100GbE client interfaces and can be deployed as an alien wavelength over existing third-party DWDM systems, so operators are not forced to replace ROADMs, amplifiers, or transport equipment already in place. Deployed units can optionally be monitored and managed centrally through Trekker, CyberRidge's network management system. This combination is why deployment timelines are measured in weeks rather than the years typically associated with a full PQC migration.

‍

What Integration Means for a Physical-Layer Security Product

Carmel operates at Layer 1, the physical layer, which means integration work happens at the hardware and transport level rather than inside application code or higher-layer protocols. The unit is designed to substitute a standard transmission line card, so it occupies the same functional role the existing line card already fills rather than sitting alongside it as an additional appliance. Because it works at this level, Carmel does not require changes to routing, application encryption, or identity and access management systems running above it. That separation is also why Carmel is complementary to Post-Quantum Cryptography rather than a replacement: PQC continues to operate exactly as it does today, with Carmel adding a physical-layer protection underneath it.

‍

The Three Deployment Topologies

CyberRidge structures deployment around the shape of the network being protected. First, point-to-point deployment secures a direct link between two endpoints, typically over private fiber, and fits use cases like data center interconnects or a secure client-to-data-center connection. Second, ring topology deployment secures multi-node ring configurations over private infrastructure, with the full ring centrally supported by Trekker. Third, full network environment deployment integrates into more complex metro and long-haul optical architectures, operating in the C-band alongside alien wavelengths in multi-vendor DWDM environments, fully compatible with existing amplifiers and without disrupting other services already running on the same infrastructure.

‍

What Vodafone's Field Validation Showed

Vodafone tested Carmel in its optical network lab in Eschborn, to evaluate whether photonic-layer security could meet harvest-proof and infrastructure performance requirements on a representative long-haul topology. Carmel maintained a secure, harvest-proof link over 205 kilometers, passing through EDFA and Raman amplifiers and multiple flexgrid ROADMs. The test also included two attacker simulations: a naive optical tap, which was defeated by burying the signal below the noise floor, and a rogue-transceiver scenario simulating an attacker with access to Carmel hardware itself, which relies on the system's air-gapped, constantly changing encryption keys to remain unusable to the attacker.

Want to know more about Vodafone's proof-of-concept? Read more to see the full attacker simulations and interface compatibility.

‍

Where Integration Has Limits

Carmel protects the physical fiber layer, not the endpoints, applications, or data at rest on either side of the link. A deployment still needs a paired Carmel unit at each end of the monitored link, so topology planning has to account for that pairing rather than treating it as a single-box install. The technology also assumes a fiber-based transport path; it does not apply to purely wireless or cellular segments of a network. Organizations should treat photonic-layer integration as one component of a layered security architecture that still includes PQC, access control, and endpoint protection, not a standalone fix for network security.

‍

Deployment Options at a Glance

‍

Element	Compatibility	Why It Matters
Amplifiers	EDFA and Raman amplifiers	Confirms Carmel operates alongside the amplifier types most carriers already run, without a forklift upgrade
Wavelength selection	Flexgrid ROADMs; alien wavelength deployment over third-party DWDM systems	Lets operators add Carmel without replacing the underlying transport layer
Client interfaces	Standard 100GbE	Slots into existing workflows and equipment racks
Network management	Trekker NMS	Centralizes monitoring, lifecycle management, and alerting for every deployed Carmel unit

‍

Practical Takeaways

For a network team scoping this kind of deployment, the integration question comes down to three things: which topology fits (point-to-point, ring, or full network), whether the existing amplifiers and ROADMs match what Carmel has been validated against. Trekker is available as an optional add-on for teams that want centralized monitoring across deployed units. CyberRidge's own field validation is the clearest public evidence of how that integration performs on live, Tier-1-grade infrastructure, and it points to a deployment that adds physical-layer protection without a parallel network build.

‍

Considering where unrecordable transmission fits your network? Visit CyberRidge to discuss integration options for your topology.

‍

FAQs

Q: Does CyberRidge's Carmel require new fiber to be installed?

‍

A: No. Carmel is designed to operate over existing Standard Single Mode Fiber infrastructure, including terrestrial and submarine routes, without requiring new fiber to be laid.

‍

Q: What network equipment has Carmel been tested with?

‍

A: In its Vodafone field validation, CyberRidge reports that Carmel was integrated into a topology using both EDFA and Raman amplifiers alongside flexgrid ROADMs, mirroring a standard high-capacity optical network.

‍

Q: How long does a typical Carmel deployment take?

‍

A: Carmel deployments reach Post-Quantum Ready status in weeks rather than years, since the unit is designed as a plug-and-play substitute for an existing line card. This is a company-reported figure and will vary with network complexity.

‍

Q: Can Carmel be deployed on subsea cable routes?

‍

A: Carmel supports long-distance transmission over Standard Single Mode Fiber, including submarine links, and that the system is designed not to add latency that would affect time-sensitive services on those routes.

‍

Q: Does Carmel work with existing DWDM systems as an alien wavelength?

‍

A: Yes. Carmel can be deployed as an alien wavelength over existing third-party line systems, without needing to replace the underlying DWDM equipment.

‍

Q: What does the Trekker NMS do?

‍

A: Trekker is CyberRidge's centralized network management system for the Carmel product line, providing visibility into system components and network links, simplified setup, real-time monitoring and alerts, and AI-assisted analytics for identifying issues before they affect service.

‍

Q: Does adding Carmel introduce latency to the network?

‍

A: Carmel introduces no added latency because it processes data in-line at the speed of light without buffering or queuing packets. In the Vodafone POC, the company states this held even over a 205-kilometer link through multiple amplifiers.

‍