CyberRidge for Telecom Operators
Provide Premium Security for clients with sensitive data. AI-safe, Quantum-ready.
CyberRidge Carmel is a Photonic Layer Security system for carrier fiber networks. It spreads, encrypts and buries the optical signal below the noise floor, so anyone tapping the fiber sees optical noise rather than a recordable signal. Telecom operators deploy it on selected routes to offer harvest-proof connectivity to customers with long-lived sensitive data.
The only product to protect carrier traffic from a harvest
Works with the network you have
Integrates inline over multi-vendor DWDM, ROADM and amplified links without re-architecting your optical layer.
Built for carrier-grade links
100–200 Gb/s per link. Demonstrated to date over fiber lengths of 200 km and 300–400 km on complex carrier network architectures. The technology has no inherent distance limit; longer links are simply yet to be demonstrated.
A layer beneath PQC, not a replacement
Complements your PQC migration, TLS, and IPsec, adding harvest protection to those encryption controls.

How Carmel fits a carrier network
Sub-second key changes, nothing to harvest
Optical keys change multiple times per second and travel embedded in the light, never stored digitally on the link. An attacker has no lasting key to target.
Multi-vendor optical compatibility
Operates over ROADM-based networks with EDFA and Raman amplification, and coexists with adjacent WDM channels.
Zero latency
A physics-based solution that adds no latency to the link.
Takes the place of the line card
Carmel replaces the line card on the protected link, offsetting part of the hardware cost rather than adding a separate appliance layer.
Scales link by link
Start with your most sensitive routes, then expand across ring and mesh topologies under central management. Available as a CAPEX purchase or per-link subscription.
Frequently asked questions
How can telecom operators protect fiber traffic from harvest-now, decrypt-later attacks?
Harvest-now, decrypt-later attacks rely on recording encrypted traffic today and decrypting it once computing power allows. CyberRidge’s Carmel addresses this at the physical layer: the signal on the fiber is spread, encrypted and buried below the optical noise floor. Anyone tapping the link sees optical noise rather than a recordable signal.
What is photonic layer security for optical networks?
Photonic layer security (PLS) protects data-in-transit at Layer 1, the optical signal itself, rather than at the network or application layers. CyberRidge’s Carmel uses PLS to transform the transmitted light so that only a synchronized, authorized Carmel receiver can reconstruct the data.
Can optical-layer encryption run over an existing DWDM network?
Yes. CyberRidge Carmel integrates inline over multi-vendor DWDM networks, including ROADM-based architectures with EDFA and Raman amplification, and coexists with adjacent WDM channels. It has been demonstrated over fiber lengths of more than 300 km and deployed on a 150 km live carrier link.
Does physical-layer encryption affect network latency or throughput?
CyberRidge Carmel supports 100–200 Gb/s per protected link over standard Ethernet interfaces and adds zero latency to the link. Because it operates on the optical signal rather than processing packets, it avoids the overhead associated with higher-layer encryption.
How can telcos offer quantum-safe connectivity as a service?
Carriers can deploy CyberRidge Carmel on selected routes and sell protected wavelengths or secure data center interconnect as a premium tier. They can target government, finance and healthcare customers with long-lived sensitive data. Per-link subscription pricing supports a managed-service model, and Trekker NMS provides central monitoring across protected links.
Discover how photonic layer security was deployed at a tier-1 telco
