Eyes Beneath the Surface: China's Maritime Intelligence Architecture Deck
06/06/26
The PLA Navy's SIGINT fleet and undersea sensor networks constitute an integrated collection apparatus that Western strategists have been too slow to treat as a unified threat
By: The Security Nexus
China's maritime intelligence enterprise is not a collection of discrete programs. It is a layered system — surface ships conducting signals intelligence against allied exercises, autonomous underwater vehicles mapping the seabed and probing fiber-optic cables, and commercial port networks generating proprietary data on vessel movements and logistics — that together produce persistent, integrated ISR coverage across the Indo-Pacific. Western analysis has engaged each layer in isolation. That approach misses the architecture.
This post argues that China's maritime intelligence collection is best understood as a convergent system rather than a set of parallel capabilities: the surface, subsurface, and commercial-data layers reinforce each other operationally, and the PLA has designed them to compound rather than simply duplicate collection. The strategic implication is that the U.S. and its allies face a maritime surveillance problem that is harder to degrade than any single component suggests.
The Fleet Above: AGI Ships and Persistent SIGINT Collection
The most visible element of China's maritime intelligence apparatus is the Type 815 Auxiliary General Intelligence (AGI) ship and its successors. The PLAN operates these vessels as dedicated signals intelligence platforms — hull-mounted and above-deck antenna arrays capable of intercepting radar emissions, communications, and electronic warfare signatures from naval exercises. Their operational pattern is deliberate: position within international waters near multilateral exercises, collect against allied systems at sustained range, and transit home with a comprehensive electronic order of battle from every platform that participated.
The pattern is consistent and well-documented. In August 2022, a Type 815G — the most advanced variant, with a more capable antenna suite than earlier models — was observed monitoring the PLA's own exercises around Taiwan, a dual-use that confirmed the platform's role in assessing allied response signatures as much as PLA performance. Chinese surveillance vessels have monitored U.S.-Japan bilateral exercises in the Sea of Japan on multiple occasions, and in August 2023 a Chinese surveillance ship shadowed the first U.S.-Japan-South Korea trilateral naval exercise since the three countries normalized that format. Each instance follows the same logic: persistent presence at contested exercises produces an evolving picture of allied electronic signatures, communication protocols, and tactical formation patterns that accumulates intelligence value over time even when individual collection events appear unremarkable.
The PLAN's growing AGI fleet reflects a deliberate organizational decision. China's 2019 National Defense White Paper identified information dominance — the capacity to control the information environment in conflict — as a foundational requirement for modern warfare. Maintaining persistent peacetime SIGINT collection against allied exercises is how the PLA operationalizes that requirement before a shot is fired. Each exercise represents an investment in the targeting data and signature libraries that would matter enormously in the opening hours of a Taiwan contingency, when the difference between effective and degraded U.S. electronic warfare systems could determine whether allied strike packages reach their targets.
The intelligence value of these platforms is not speculative. The CMC's Joint Staff Department, which coordinates military intelligence activities, participates directly in foreign military liaison activities, and DOD's own assessment has confirmed that the PLA views its interactions with foreign militaries — including monitoring foreign exercises — as systematic opportunities for technical intelligence collection (USCC 2023, 418). The AGI fleet institutionalizes that collection at scale.
The Architecture Below: Underwater Sensors and Autonomous Vehicles
The surface AGI fleet, analytically prominent as it is, represents only the visible layer of a much deeper collection enterprise. Beneath it, the PLAN has invested heavily in two overlapping systems designed to extend China's maritime intelligence reach into the subsurface domain: a network of fixed underwater sensors and a growing fleet of autonomous underwater vehicles (AUVs).
The fixed sensor networks are the more mature capability. China has built two overlapping monitoring systems in the South China Sea — the "Great Underwater Wall" and the "Blue Ocean Information Network" — that use fixed acoustic sensors, intelligent buoys, and seafloor hydrophone arrays to detect, classify, and track submarine contacts transiting the region (USCC 2023, 462). DOD assessed in 2022 that the PLA Navy is "significantly improving" its anti-submarine warfare capabilities through these systems, and PLA Navy research publications have explicitly discussed integrating AUV into the Great Underwater Wall to extend its coverage and reduce detection latency (USCC 2023, 471). The goal is transparent: prevent U.S. submarines from thwarting a Taiwan invasion by ensuring the PLA knows where allied boats are before hostilities begin.
The AUV program is the dynamic complement to these fixed networks. China's underwater glider AUVs — lightweight, long-endurance platforms capable of operating far beyond China's littorals — have appeared across the Indo-Pacific, demonstrating both the technical capability for deep-water reconnaissance and the operational range to survey areas relevant to U.S. undersea warfare. Advances in these vehicles provide the PLA with the ability to conduct seafloor mapping of geomorphological features that inform submarine navigation and mine placement, to detect and classify potential adversary submarines using AI-enabled acoustic analysis, and to identify and access undersea cables (USCC 2023, 472, 484). The last capability is the most strategically significant.
China's AUVs have been explicitly designed to identify and access fiber-optic cables (USCC 2023, 473). This is not a generic intelligence threat. A concentration of fiber-optic cables north of Taiwan carries communications traffic essential to Taiwan's information infrastructure and to trans-Pacific data exchanges, including U.S. internet access for portions of the American homeland. In a conflict scenario, the ability to sever or exploit those cables — whether to disrupt Taiwanese command and control, intercept unencrypted traffic, or simply impose communications degradation on allied forces — could be operationally decisive. The USCC explicitly flagged this as an emerging threat to digital infrastructure in its 2023 report, noting that while China relies on some of these same cables for its own internet access, the PLA has proceeded to develop this capability regardless, apparently calculating that the asymmetric advantage outweighs mutual infrastructure exposure (USCC 2023, 473).
The AUV program also faces real limitations that analysts should not paper over. China's larger AUVs are constrained by a 24-hour battery life, and underwater gliders must surface to transmit data back to operators — exposing them to detection during transmission events (USCC 2023, 472). AI-enabled seafloor mapping systems are not yet mature enough to reliably identify undersea targets at the accuracy required for high-confidence operations. These are genuine technical gaps. But the program's trajectory matters as much as its current state: China is closing them through a combination of commercial technology absorption, academic partnerships, and state-sponsored espionage specifically targeting hydrophones, side-scan sonar, AUV propulsion systems, and sonobuoy technologies (USCC 2023, 473).
The Gray Zone Layer: Commercial Ports as Intelligence Platforms
The most underappreciated component of China's maritime intelligence architecture is neither military nor concealed. Chinese state-owned enterprises own or operate terminals at 96 foreign ports worldwide, and the PLA Navy has conducted port calls at over one-third of those facilities (USCC 2023, 418–419). This network is simultaneously a logistics backbone for PLAN power projection and a collection apparatus.
Isaac Kardon of the Carnegie Endowment for International Peace, testifying before the USCC in 2023, described what that collection looks like in practice: the port network generates access to "huge volumes of proprietary information about vessels and their various fuel and supply requirements, routes and destinations, cargos, personnel, and other salient details" (USCC 2023, 419). Commercial shipping data of this kind — aggregated across dozens of ports, correlated with AIS tracking, and processed by PLA intelligence analysts — produces a maritime common operating picture that rivals what dedicated surveillance platforms can generate. Firms like China Ocean Shipping Company (COSCO) and China Merchants Group have provided the PLAN with specialized maintenance and technical repair operations at ports in Djibouti, Egypt, Greece, Indonesia, Malaysia, Singapore, Spain, Sri Lanka, and Tanzania (USCC 2023, 418).
China's 2020 Science of Military Strategy — the authoritative PLA doctrinal text — explicitly identifies intelligence information support as a requirement for overseas military operations and instructs the military to leverage commercial infrastructure to meet that requirement in the absence of dedicated overseas bases (USCC 2023, 418). The commercial port network is not incidental to PLA maritime intelligence; it is a doctrinal instrument.
This layer connects directly to the surface and subsurface layers. Port calls allow PLAN hydrographic survey vessels and AGI ships to refuel and rotate crew without returning to Chinese naval bases, extending persistent collection endurance. Commercial operators in Chinese-managed ports also generate intelligence on allied naval logistics — maintenance cycles, fuel consumption patterns, supply chain vulnerabilities — that would be valuable targeting data in a conflict scenario.
The Convergence Problem
Analyzed individually, none of these layers is unprecedented. Great powers have operated signals intelligence ships since the Cold War; the Soviet Okean exercises in the 1970s demonstrated large-scale maritime surveillance at a global scale. Undersea sensor networks have been a feature of great power competition since the U.S. Sound Surveillance System (SOSUS) was deployed in the 1950s. Commercial port access as an intelligence adjunct is a standard feature of statecraft.
What is distinctive about China's maritime intelligence architecture is the convergence of all three layers under a unified doctrinal framework oriented toward a specific operational scenario: a Taiwan contingency in which the PLA must detect, degrade, and if necessary destroy allied maritime forces attempting to intervene. The Great Underwater Wall is not a general ASW capability; it is positioned to monitor the specific transit corridors U.S. submarines would use. The AGI fleet is not collecting against random allied exercises; it is building signature libraries for the specific platforms that would participate in a Taiwan defense. The commercial port network is not simply commercial; it maps the logistics infrastructure allied navies would depend on.
The U.S. intelligence community has assessed China's growing maritime ISR capabilities in each domain. What has been slower to develop is a cross-domain assessment that treats the convergent architecture as the threat. A single-domain analytical frame produces single-domain policy responses — hardening cable infrastructure, developing better AUV countermeasures, scrutinizing PLAN port calls. These are necessary measures. They are not sufficient responses to an integrated collection system whose components mutually reinforce each other.
What Underestimation Costs
The strategic warning embedded in China's maritime intelligence architecture is not that any single capability will prove decisive. It is that China has built persistent, layered, peacetime collection infrastructure against the exact scenario it may eventually need to execute — and it has done so largely in the open, using platforms that operate in international waters and enterprises that are nominally commercial.
Western navies have responded to individual incidents: monitoring exercises more carefully, reviewing port access agreements with Chinese-managed terminals, accelerating undersea domain awareness programs. These are tactical responses to what is a structural condition. The PLA has been conducting signals intelligence against allied exercises for years, accumulating an electronic order of battle that degrades the surprise value of allied systems and creates pre-built targeting packages for electronic warfare operators. The undersea infrastructure that threatens Taiwan's fiber-optic cables has been maturing for the same period. The commercial port data pipeline has operated uninterrupted.
Closing these gaps requires moving beyond incident-response to architecture-level thinking — assessing China's maritime intelligence apparatus as a system, identifying the nodes where degrading one layer disrupts the others, and building allied maritime ISR in response to the collection environment China has created rather than the environment that existed when current force structures were designed. The seabed is not a passive operating environment. China has been treating it as a collection platform for years.
Conclusion
China's maritime intelligence capability is more coherent, more persistent, and more operationally purposeful than the sum of its individually analyzed parts. The convergence of PLA-N SIGINT ships, undersea sensor networks, AI-enabled AUVs, and commercial port data systems constitutes an integrated collection architecture oriented toward a specific strategic scenario. Western analysis that treats each layer in isolation will continue to underestimate a threat that is designed to function precisely as an integrated whole.
For policymakers, the implication is structural: allied maritime security planning needs to account for the intelligence picture China has already built, not only the one it is currently building. For intelligence practitioners, the analytical requirement is convergence assessment — cross-domain analysis that maps how these layers interact and where their seams offer both vulnerability and opportunity. The eyes are already in the water. The question is whether Western strategy will treat that as a system problem before a Taiwan contingency makes it a crisis.
Sources
Fedasiuk, Ryan. 2021. "Leviathan Wakes: China's Growing Fleet of Autonomous Undersea Vehicles." Washington, DC: Center for Security and Emerging Technology, August 17.
Kardon, Isaac. 2023. Written testimony for U.S.-China Economic and Security Review Commission, Hearing on China's Military Diplomacy and Overseas Security Activities, January 26.
Kirchberger, Sarah. 2023. Written testimony for U.S.-China Economic and Security Review Commission, Hearing on China's Military Diplomacy and Security Developments in the Indo-Pacific, 2023.
PLA Academy of Military Science. 2020. Science of Military Strategy [战略学]. Beijing: Academy of Military Science Press.
Saunders, Phillip C. 2023. Written testimony for U.S.-China Economic and Security Review Commission, Hearing on China's Military Diplomacy and Overseas Security Activities, January 26.
State Council Information Office of the People's Republic of China. 2019. China's National Defense in the New Era. Beijing: State Council Information Office, July.
U.S. Department of Defense. 2022. Annual Report to Congress: Military and Security Developments Involving the People's Republic of China, 2022. Washington, DC: Office of the Secretary of Defense, November 29.
U.S.-China Economic and Security Review Commission (USCC). 2023. Annual Report to Congress. Washington, DC: U.S. Government Publishing Office, November.
