Seeing the Invisible War on GPS: Introducing AEGIS Sentinel

Every day, aircraft over the Baltic show up on screen hovering over the sea when they're actually over land. Ships in the Eastern Mediterranean report fixes that put them at inland airports. Timing receivers see their clocks jump by hundreds of nanoseconds. This used to be an edge case. Now it's a routine operating condition, and for communications and navigation teams the hard part usually isn't knowing something is wrong. It's working out what, where, and why quickly enough to act. That's why we built AEGIS Sentinel. The problem is no longer occasional The numbers tell the story: In July 2026, EASA published the fourth revision of its safety bulletin on GNSS outages and alterations. It warns that incidents are becoming more severe, more sophisticated and more disruptive, with the Baltic Sea, Eastern Europe, the Mediterranean, the Black Sea and the Middle East among the most affected areas. (Geoawesome) Finland's transport agency Traficom received 1,704 reports of GPS interference in 2025, then 421 in just January and February 2026. (CNN) Between mid-July and mid-August 2024, around 41,000 flights were spoofed. That's about 1,500 per day, up from roughly 300 per day earlier that year. (OPSGROUP Spoofing Workgroup report) Figures from IATA's 2025 safety reporting show GPS jamming up 67% and spoofing up 193% between 2023 and 2025. (MigFlug, citing IATA) Aviation isn't the only victim. GNSS supplies the position and timing behind shipping, mobile networks, power grids and financial systems. And GNSS problems often arrive alongside other failures: cut submarine cables, satellite uplink faults, and HF blackouts caused by space weather. The data about these events usually sits in different places: NOTAMs, operator reports, spectrum monitors and space-weather feeds. AEGIS Sentinel puts it all on one screen. What AEGIS Sentinel does AEGIS Sentinel is an interactive analytics dashboard built for communications and navigation experts. It runs as a single HTML file, so there's nothing to install and no server to maintain. It opens in any modern browser on desktop, tablet or phone. 1. The situation at a glance Six headline tiles show active incidents, spoofing, jamming, mean C/N₀ (signal strength), SNR (signal-to-noise) alerts and regions affected. Each one has a trend arrow comparing it with the previous period, plus a small inline trend chart. Date presets (24H / 7D / 30D / 90D or a custom range) and filters for region, issue type, platform and severity update every view live. 2. A zoomable global heat map A heat map shows where interference is concentrated, and critical active zones pulse. Scroll to zoom, drag to pan, or pinch on mobile to go from a global view down to a single strait or sea lane. 3. Signal-integrity alerting AEGIS watches C/N₀ against a defined normal band. Readings below the band point to jamming or fading. Readings above it are just as suspicious, because spoofers often transmit stronger-than-real signals. Each alert is tagged by type (Low SNR, Critical Low SNR, Suspected Spoof, Anomalous Power) and can be acknowledged individually or all at once. 4. Root-cause analysis: the part we're proudest of An alert only tells you that something happened. Your team needs to know why. Click any alert, feed card or table row and AEGIS opens a diagnostic panel with: A probable cause and confidence score. For example: "Coherent GNSS spoofing, 89%." A ranked list of competing causes, such as wideband jamming, personal privacy jammers, accidental RF interference, spoofing, meaconing, ionospheric scintillation, antenna faults and multipath. The panel shows how likely each one is. An evidence table. It covers AGC (receiver gain) changes, noise-floor rise, how evenly signal strength varies across satellites, clock-bias jumps, position error, scintillation index (S4) and the planetary K-index. For each reading it shows whether it's abnormal, which cause it points to, and whether it supports or contradicts the top cause. A per-satellite signal chart. Signal strength that is uniformly and suspiciously high across every satellite is a classic spoofing signature. When only the low-elevation satellites drop, the likely cause is obstruction, not an attacker. An onset timeline for 30 minutes either side of the event. Jamming hits abruptly, spoofing ramps up gradually, and scintillation fluctuates. Cross-checks for receiver integrity monitoring (RAIM), Galileo OSNMA authentication and Doppler-versus-IMU consistency. An estimated emitter location on a mini map, with an error circle. Related reports from other platforms in the same zone within three hours. When several platforms report at once, the cause is probably wide-area rather than a local equipment fault. Recommended actions for the most likely cause, plus a one-click copyable incident report. The same approach covers the rest of the communications picture. Satellite uplink faults are tested against rain fade, sun-transit outages, adjacent-satellite interference, transponder failure and deliberate jamming. Submarine cable faults are tested against anchor drag, trawling, seismic activity, shunt faults and possible sabotage. HF blackouts are tested against solar flares, geomagnetic storms and polar cap absorption. Terrestrial outages are tested against fibre cuts, power loss, BGP (internet routing) incidents, DDoS attacks and hardware failure. 5. Live space-weather context AEGIS pulls the NOAA SWPC planetary K-index live and feeds it straight into the diagnosis. A strong geomagnetic storm makes scintillation or HF absorption much more likely. A quiet Kp makes a natural explanation less likely, which strengthens the case for a human-made source. Built for the people who have to make the call We designed AEGIS Sentinel around one question: what does an analyst need in the first 60 seconds? A clear layout. Headline numbers come first, then trends, then location, then detail. Dark and light modes, for the operations floor and the briefing room. Exportable data. The sortable, searchable incident table exports to CSV. Honest confidence. AEGIS never presents a guess as certain. When the evidence is ambiguous, you'll see a competing cause at 30–40%, not a false 99%. A note on data The public demo version of AEGIS Sentinel uses live NOAA space-weather data together with realistic simulated incident data, because detailed interference feeds are rarely public. The diagnostic engine, visualisations and workflow are exactly what you'd use on real data. In a live deployment, AEGIS can connect to receiver data feeds, spectrum monitors, ADS-B and AIS data, and network telemetry. See it in action We've put together a full walkthrough on our YouTube channel. It covers the heat map, SNR alerting and a real-time root-cause investigation, from a spoofing alert to an estimated emitter location. ▶️ Watch the AEGIS Sentinel walkthrough on YouTube [add link] Want AEGIS Sentinel running on your own data? PAT Labs can tailor the dashboard to your sensors, regions and alert thresholds. 📩 Contact PAT Labs [add link] to book a demo. GNSS interference isn't going away. The teams that cope best won't be the ones who see the most alerts. They'll be the ones who understand them fastest.

Every day, aircraft over the Baltic show up on screen hovering over the sea when they’re actually over land. Ships in the Eastern Mediterranean report fixes that put them at inland airports. Timing receivers see their clocks jump by hundreds of nanoseconds. This used to be an edge case. Now it’s a routine operating condition, and for communications and navigation teams the hard part usually isn’t knowing something is wrong. It’s working out what, where, and why quickly enough to act.

That’s why we built AEGIS Sentinel.

Dashboard displaying global incident reports related to GPS jamming, spoofing, and signal integrity, with statistics on active incidents, spoofing events, jamming events, and regions affected.

The problem is no longer occasional

The numbers tell the story:

  • In July 2026, EASA published the fourth revision of its safety bulletin on GNSS outages and alterations. It warns that incidents are becoming more severe, more sophisticated and more disruptive, with the Baltic Sea, Eastern Europe, the Mediterranean, the Black Sea and the Middle East among the most affected areas. (Geoawesome)
  • Finland’s transport agency Traficom received 1,704 reports of GPS interference in 2025, then 421 in just January and February 2026. (CNN)
  • Between mid-July and mid-August 2024, around 41,000 flights were spoofed. That’s about 1,500 per day, up from roughly 300 per day earlier that year. (OPSGROUP Spoofing Workgroup report)
  • Figures from IATA’s 2025 safety reporting show GPS jamming up 67% and spoofing up 193% between 2023 and 2025. (MigFlug, citing IATA)

Aviation isn’t the only victim. GNSS supplies the position and timing behind shipping, mobile networks, power grids and financial systems. And GNSS problems often arrive alongside other failures: cut submarine cables, satellite uplink faults, and HF blackouts caused by space weather.

The data about these events usually sits in different places: NOTAMs, operator reports, spectrum monitors and space-weather feeds. AEGIS Sentinel puts it all on one screen.

What AEGIS Sentinel does

AEGIS Sentinel is an interactive analytics dashboard built for communications and navigation experts. It runs as a single HTML file, so there’s nothing to install and no server to maintain. It opens in any modern browser on desktop, tablet or phone.

1. The situation at a glance

Six headline tiles show active incidents, spoofing, jamming, mean C/N₀ (signal strength), SNR (signal-to-noise) alerts and regions affected. Each one has a trend arrow comparing it with the previous period, plus a small inline trend chart. Date presets (24H / 7D / 30D / 90D or a custom range) and filters for region, issue type, platform and severity update every view live.

2. A zoomable global heat map

A heat map shows where interference is concentrated, and critical active zones pulse. Scroll to zoom, drag to pan, or pinch on mobile to go from a global view down to a single strait or sea lane.

3. Signal-integrity alerting

AEGIS watches C/N₀ against a defined normal band. Readings below the band point to jamming or fading. Readings above it are just as suspicious, because spoofers often transmit stronger-than-real signals. Each alert is tagged by type (Low SNR, Critical Low SNR, Suspected Spoof, Anomalous Power) and can be acknowledged individually or all at once.

4. Root-cause analysis: the part we’re proudest of

An alert only tells you that something happened. Your team needs to know why. Click any alert, feed card or table row and AEGIS opens a diagnostic panel with:

  • A probable cause and confidence score. For example: “Coherent GNSS spoofing, 89%.”
  • A ranked list of competing causes, such as wideband jamming, personal privacy jammers, accidental RF interference, spoofing, meaconing, ionospheric scintillation, antenna faults and multipath. The panel shows how likely each one is.
  • An evidence table. It covers AGC (receiver gain) changes, noise-floor rise, how evenly signal strength varies across satellites, clock-bias jumps, position error, scintillation index (S4) and the planetary K-index. For each reading it shows whether it’s abnormal, which cause it points to, and whether it supports or contradicts the top cause.
  • A per-satellite signal chart. Signal strength that is uniformly and suspiciously high across every satellite is a classic spoofing signature. When only the low-elevation satellites drop, the likely cause is obstruction, not an attacker.
  • An onset timeline for 30 minutes either side of the event. Jamming hits abruptly, spoofing ramps up gradually, and scintillation fluctuates.
  • Cross-checks for receiver integrity monitoring (RAIM), Galileo OSNMA authentication and Doppler-versus-IMU consistency.
  • An estimated emitter location on a mini map, with an error circle.
  • Related reports from other platforms in the same zone within three hours. When several platforms report at once, the cause is probably wide-area rather than a local equipment fault.
  • Recommended actions for the most likely cause, plus a one-click copyable incident report.

The same approach covers the rest of the communications picture. Satellite uplink faults are tested against rain fade, sun-transit outages, adjacent-satellite interference, transponder failure and deliberate jamming. Submarine cable faults are tested against anchor drag, trawling, seismic activity, shunt faults and possible sabotage. HF blackouts are tested against solar flares, geomagnetic storms and polar cap absorption. Terrestrial outages are tested against fibre cuts, power loss, BGP (internet routing) incidents, DDoS attacks and hardware failure.

5. Live space-weather context

AEGIS pulls the NOAA SWPC planetary K-index live and feeds it straight into the diagnosis. A strong geomagnetic storm makes scintillation or HF absorption much more likely. A quiet Kp makes a natural explanation less likely, which strengthens the case for a human-made source.

Built for the people who have to make the call

We designed AEGIS Sentinel around one question: what does an analyst need in the first 60 seconds?

  • A clear layout. Headline numbers come first, then trends, then location, then detail.
  • Dark and light modes, for the operations floor and the briefing room.
  • Exportable data. The sortable, searchable incident table exports to CSV.
  • Honest confidence. AEGIS never presents a guess as certain. When the evidence is ambiguous, you’ll see a competing cause at 30–40%, not a false 99%.

A note on data

The public demo version of AEGIS Sentinel uses live NOAA space-weather data together with realistic simulated incident data, because detailed interference feeds are rarely public. The diagnostic engine, visualisations and workflow are exactly what you’d use on real data. In a live deployment, AEGIS can connect to receiver data feeds, spectrum monitors, ADS-B and AIS data, and network telemetry.

See it in action

We’ve put together a full walkthrough on our YouTube channel. It covers the heat map, SNR alerting and a real-time root-cause investigation, from a spoofing alert to an estimated emitter location.

▶️ Watch the AEGIS Sentinel walkthrough on YouTube

Want AEGIS Sentinel running on your own data? PAT Labs can tailor the dashboard to your sensors, regions and alert thresholds.

📩 Contact PAT Labs to book a demo.

GNSS interference isn’t going away. The teams that cope best won’t be the ones who see the most alerts. They’ll be the ones who understand them fastest.

Comments

Leave a Reply

Discover more from Pickett Applied Technologies Laboratories

Subscribe now to keep reading and get access to the full archive.

Continue reading