Boarding and unauthorised access remain among the most persistent threats a merchant ship faces, whether alongside a high-risk terminal, swinging at an exposed anchorage, or transiting a piracy-affected corridor. The good news for the operator is that most successful boardings exploit predictable weaknesses: an unlit deck, an unmanned gangway, a low freeboard left undefended, a crew that has never rehearsed where to muster. Ship self-protection, often called ship hardening, is the disciplined practice of closing those gaps before a threat arrives. This guide sets out the practical measures that deter and delay an intruder, explains how they fit the formal Ship Security Assessment, and shows how to keep them current as the threat picture shifts.
Ship hardening is layered, not a single barrier
No single measure stops a determined boarder. Effective protection works in layers, each one buying time and forcing the attacker to expose themselves. The recognised industry baseline is the consolidated Best Management Practices (BMP) Maritime Security guide, which replaced the earlier edition known as BMP5 in March 2025. It introduces the concept of a Vessel Hardening Plan: a documented, ship-specific scheme of physical measures identified during voyage planning and clearly marked on a deck plan so the crew can deploy them quickly.
The physical layer typically includes:
- Razor wire or concertina coil rigged along the most accessible sections of the rail, concentrating on low points of freeboard and the stern, secured so it cannot be lifted clear.
- Temporary fencing, weldmesh, or grills over openings, plus chained and padlocked external doors and hatches that are not needed for operations.
- Physical barriers to the accommodation and bridge: locked, reinforced doors on the citadel approach route, scuttles dogged down, and a controlled single point of entry.
- Foam monkey fists, electrified barriers, or anti-climb measures where a vessel's risk assessment justifies them.
Each barrier should be inspected, rigged correctly, and free of gaps where it meets a bulkhead or rail termination. A poorly rigged defence gives false confidence.
Lighting, watchkeeping and early warning
Detection is as important as the barrier itself, because a boarder spotted early can often be deterred before contact. Deck and over-side lighting removes the cover of darkness an attacker relies on at an anchorage or during a night approach, though masters must balance this against navigational and collision-avoidance requirements. Searchlights, signal projectors, and a manoeuvrable upper-deck light let a lookout illuminate a suspicious craft and signal that the ship has seen it.
Watchkeeping turns lighting into warning. In elevated-threat areas this means additional, briefed lookouts with night-vision aids and a clear means of raising the alarm, supported by radar, AIS monitoring, and routine visual sweeps of the approaches. Closed-circuit television covering the stern, gangway, and main deck extends the watch to blind spots. The aim is simple: see the threat first, sound the alarm, and give the bridge time to react and the crew time to muster.
Access control at port and anchorage
Most port and anchorage incidents are not armed assaults but opportunistic access by stowaways, thieves, or unauthorised visitors using the gangway, mooring lines, or an unsecured hull opening. Access control is the discipline that closes them off:
- A single, manned, well-lit gangway with a controlled crew and visitor log, identity checks, and a watch that challenges anyone without a reason to be aboard.
- Rat guards and, where the threat warrants, hawse-pipe covers on mooring lines to deny a climbing route.
- Searches of stores, containers, and accommodation appropriate to the security level, with cargo and storerooms locked and accounted for.
- Secured pilot ladders, accommodation ladders, and over-side equipment when not in use.
Access control scales with the International Ship and Port Facility Security (ISPS) Code security level. Level 1 is the routine minimum; Level 2 adds measures for a defined period of heightened risk; Level 3 is the exceptional response when an incident is probable or imminent. The Ship Security Plan should spell out exactly what changes at each step so the crew is not improvising.
Citadels, safe mustering and anti-boarding response
When prevention fails, the priority becomes protecting the crew. A citadel is a pre-designated, hardened compartment where the entire crew can muster, lock down, and remain in contact with the outside world while denying attackers control of the ship. To be credible it needs robust construction, independent and protected communications to a reporting centre, food, water, and a means of stopping or slowing the vessel from inside. A citadel that cannot account for every crew member, or that loses communications, is not a citadel: a single missing person can compromise the entire concept.
Active anti-boarding devices buy time before that point. Pressurised fire hoses and water cannon, foam, and self-activating deck spray systems can make the rail difficult to scale, while keeping the ship manoeuvring at speed and conducting evasive helm movements denies an approaching craft a stable boarding platform. These measures are defensive and non-lethal; their purpose is to deter, delay, and deny, not to engage. The decision to muster, retreat to the citadel, or stop the ship belongs to the master, guided by a plan the crew has rehearsed.
Drills and the Ship Security Assessment that drives them
Hardware without practice fails under pressure. Regular, realistic drills, covering citadel entry and head-count, alarm and reporting actions, repelling-boarders procedures, and search routines, are what turn a paper plan into a trained reflex. They also expose the gaps: a jammed door, a slow muster, a communications dead spot.
All of this should flow from the Ship Security Assessment (SSA), the formal evaluation required under Part A of the ISPS Code, which came into force under the Safety of Life at Sea Convention (SOLAS) chapter XI-2 on 1 July 2004. The SSA includes an on-scene security survey and, at minimum: identification of existing security measures, identification of the key shipboard operations to protect, identification of possible threats and their likelihood, and identification of weaknesses, including human factors. The Company Security Officer ensures it is carried out by suitably skilled people, and it is documented, reviewed, and retained. The SSA is the analytical foundation: it tells you which hardening measures matter on this ship, for this voyage, against this threat, and those conclusions feed the Ship Security Plan that the crew then drills.
Where Verihelm helps
Hardening decisions are only as good as the threat picture behind them. A Vessel Hardening Plan rigged for last year's risk, or an SSA that treats every anchorage as identical, leaves real gaps and wastes effort on phantom ones. Verihelm gives security officers and masters analyst-verified intelligence on the specific ports, anchorages, and transit corridors a vessel will encounter, so the assessment reflects current boarding patterns, access-control failures, and emerging threats rather than generic guidance. Reporting centres such as UK Maritime Trade Operations, the Maritime Security Centre Horn of Africa, and the Maritime Domain Awareness for Trade Gulf of Guinea remain your operational contacts at sea; Verihelm sharpens the planning that gets you there prepared. To see how location-specific intelligence strengthens an assessment, start with our port risk assessment guidance and build your hardening measures on a current, evidence-led view of the threat.