Summary
Summary
- Space systems are critical infrastructure, and attackers know it. The February 2022 attack on Viasat's KA-SAT network disrupted thousands of terminals across Europe within hours.
- Most of the attack surface sits on the ground and in the link: terminals, ground stations, control software and the encryption protecting commands and data.
- Capital is following. WISeSat.Space, which builds post-quantum-secured IoT satellite connectivity, completed its SPAC merger with Columbus Acquisition Corp. on 1 October 2026 and began trading on Nasdaq as SAIQ on 2 October.
- For buyers, the attractive assets are those that secure the ground segment, the link and the supply chain, with credentials governments and operators already trust.
01 · Research
Why space became a cyber problem
Critical services, hard-to-patch hardware.
Satellites now carry broadband, navigation, timing, earth observation and a fast-growing share of IoT traffic. That makes them part of critical infrastructure, with the attention that brings.
The defining case is still the KA-SAT attack of 24 February 2022. Attackers did not touch the satellite. They pushed destructive commands to user modems through the ground network, and thousands of terminals across Europe went offline. The lesson for the industry was that the ground segment and the link are where most of the risk lives.
02 · Research
Where the attack surface sits
Four layers, four product categories.
| Layer | Typical risk | What buyers acquire |
|---|---|---|
| User terminals | Malicious firmware, mass disablement | Secure boot, firmware signing, device identity |
| Ground stations and control | Intrusion into command systems | Network security, monitoring, zero-trust access |
| Links (uplink/downlink) | Interception, spoofing, jamming | Strong and crypto-agile encryption, anti-spoofing |
| Supply chain | Compromised components or software | Secure chips, provenance, software bills of materials |
Because a satellite can fly for a decade or more, decisions made at launch are hard to change. That is why post-quantum and crypto-agile designs are moving into new constellations now.
03 · Research
Capital is following: the WISeSat listing
A post-quantum satellite company goes public.
WISeSat.Space Holdings Corp., a subsidiary of WISeKey, completed its business combination with Columbus Acquisition Corp. on 1 October 2026 and began trading on the Nasdaq Capital Market as SAIQ on 2 October. The deal valued the equity received by WISeKey at $250m, at an implied $10.00 per share.
- What it buildsSecure IoT satellite connectivity using SEALSQ post-quantum cryptographic chips.
- Where it stands22 satellites launched, 14 operational, including post-quantum protocol testbeds launched via SpaceX.
- Where it is goingA target of 100 satellites by 2030.
It is a clear example of space and post-quantum security converging, a theme we track alongside our research on the 2029 encryption deadline.
04 · Research
What buyers look for
Trust credentials are the scarce asset.
- Operator and government referencesLive deployments with satellite operators or defence customers shorten every future sale.
- Certifications and clearancesThese take years to earn and transfer with the business, which makes them some of the most valuable assets in a deal.
- Ground-segment coverageProducts that secure terminals, stations and control software address where attacks actually land.
- Crypto-agilityDesigns that can move to post-quantum algorithms without new hardware protect long-lived assets.
For founders in this niche, the credentials you already hold are the core of the valuation. For buyers, space security is a way into long, recurring, high-trust contracts. Our acquisitions team works across both sides of these deals.
Reference
Frequently asked questions
What is space cybersecurity?
Space cybersecurity protects satellites, the ground stations and terminals that talk to them, the radio links between them and the software that controls them. Because a satellite is hard to patch once launched, much of the work focuses on secure design, strong encryption and protecting the ground segment.
What happened in the KA-SAT attack?
On 24 February 2022, at the start of Russia's full-scale invasion of Ukraine, attackers disrupted Viasat's KA-SAT satellite broadband network by pushing destructive commands to user modems on the ground. Thousands of terminals across Europe were knocked offline. It showed that attacking the ground segment can disable a satellite service without touching the satellite.
What is WISeSat.Space?
WISeSat.Space Holdings Corp. is a WISeKey subsidiary providing secure IoT satellite communications that use SEALSQ post-quantum cryptographic chips. It completed its business combination with Columbus Acquisition Corp. on 1 October 2026 and began trading on the Nasdaq Capital Market under SAIQ on 2 October 2026. The company has launched 22 satellites, with 14 operational, and plans 100 by 2030.
What do acquirers look for in space cybersecurity companies?
Proven deployments with satellite operators or governments, security clearances and certifications, products that protect the ground segment and links, crypto-agile or post-quantum designs, and contracts that renew. These credentials take years to build, which makes them valuable to buy.
Keep reading
Related analysis
Research · Cybersecurity
The 2029 Encryption Deadline: Mapping M&A and Investment in Post-Quantum Cryptography
Quantum computers that can break today’s encryption are getting closer, faster than expected. Enterprises are racing to migrate, and the quantum security supply chain is quietly consolidating. Here is the map.
Research · Cybersecurity
Harvest Now, Decrypt Later: Adding Post-Quantum Readiness to M&A Due Diligence
Encrypted data copied today could be readable within the life of the deal. That makes cryptography a diligence question now, not a 2030 problem.
News · Gaming
Sovereign Wealth Funds as Digital Acquirers: The Capital Shift Reshaping M&A in 2026
By Joash Boyton, Founder & Managing Director, Acquiry • February 2026
Explore the sector:/acquisitions//exits/
About the analyst
Joash Boyton
Founder and Managing Director, Acquiry · Melbourne, Australia · Global coverage
Joash Boyton is the Founder and Managing Director of Acquiry, a specialist M&A advisory firm focused on the acquisition and sale of businesses. He executes buy-side and sell-side mandates from USD $1M to $500M across technology, SaaS, fintech, payments, gaming, blockchain and emerging verticals, and is not limited to them. Any sector, any market.