"Does this jet have Wi-Fi?" is the wrong first question. The right ones are which system it carries, what that system actually delivers in the air, and who else on board can see your traffic. The answers change materially between a light jet and an ultra-long-range aircraft — here is what to expect, and how to secure it, by class.
Charter guides love to compare private jets on legroom, galley service and how many people fit around the table. What they almost never cover honestly is connectivity — and connectivity is where the actual risk sits for a principal who spends three hours over the Atlantic reviewing a term sheet, approving a wire, or replying to counsel on an active negotiation.
The system installed on the aircraft is not a footnote. It determines the realistic bandwidth available at cruise altitude, whether the connection holds over open ocean or drops the moment you clear the coastline, and — the part almost no charter operator will walk you through — how exposed your traffic is to anyone else sharing that cabin network. This briefing breaks connectivity and security down by aircraft class, the way it actually varies in practice, not by marketing copy.
Nearly every system installed on a business jet today falls into one of four categories. Knowing which one is on your aircraft tells you more about your actual in-flight experience than the tail number ever will.
Light jets (Phenom 300, Citation CJ series, Learjet 75) frequently fly with no cabin Wi-Fi at all, or with an entry-level ATG system as an aftermarket add. These aircraft are built for short domestic legs, so the equation makes sense operationally — but it means a "quick flight" with a live deal on the table can leave a principal with no connectivity for the duration, or a cellular-grade connection that would embarrass a regional airport lounge.
Midsize and super-midsize jets (Citation Latitude, Challenger 350, Praetor 600) are where cabin Wi-Fi becomes closer to standard. Most fly with Gogo AVANCE L5 or Ku-band systems as factory or common retrofit options, delivering workable email, messaging and light browsing at 10-40 Mbps shared across the cabin — adequate for a handful of passengers doing ordinary business, but a video call with multiple participants will visibly strain it.
Ultra-long-range and heavy jets (Global 6000/7500, Gulfstream G650/G700, Falcon 8X) are the aircraft where the connectivity conversation gets serious, because these are exactly the aircraft flying transoceanic legs where a dropped connection actually costs something. Viasat Ka-band via Honeywell JetWave has been the long-haul standard here for years, and Starlink Aviation is now being installed as a retrofit and factory option across this segment specifically because it holds bandwidth over open ocean where legacy Ku-band systems visibly degrade.
The pattern that matters: airframe size correlates with connectivity investment, but it is never guaranteed. A used super-midsize jet can carry a five-year-old Ku-band box its previous owner never upgraded, and a well-specified light jet can carry a surprisingly capable retrofit. Ask for the actual system and installation date before you assume anything from the aircraft type alone.
| Aircraft class | Typical Wi-Fi system | Realistic speed | Security recommendation |
|---|---|---|---|
| Light jet | None, or ATG (Gogo AVANCE-class) | 0-10 Mbps, no coverage over water | Assume no connectivity; carry offline documents, brief a VPN plan before wheels-up |
| Midsize / super-midsize | Gogo AVANCE L5, Ku-band | 10-40 Mbps shared | Router-level VPN, separate guest SSID, defer large file transfers to the ground |
| Super-midsize / heavy (older retrofit) | Viasat Ka-band (Honeywell JetWave) | 20-100 Mbps depending on beam load | Managed firewall appliance, device-level VPN, disable file sharing fleet-wide |
| Ultra-long-range / heavy (current retrofit) | Starlink Aviation (LEO) | 100-200+ Mbps | Same managed setup as above — higher speed does not reduce exposure, it raises the value of what crosses the network |
The instinct is to treat bandwidth as the whole story — get the fastest system installed and the connectivity problem is solved. It is not. A Starlink Aviation connection running at 150 Mbps and a five-year-old Ku-band box running at 15 Mbps share the same default weakness: most cabin routers, factory and aftermarket alike, put every device on one flat network behind one shared password, with no segmentation and no traffic inspection between the principal's laptop and a guest's phone or a crew member's tablet.
That matters more on a private jet than it does at a hotel, precisely because of what tends to happen on a private jet. Term sheets get marked up mid-flight. Wire instructions get confirmed by email. Legal counsel gets a document that should never leave a privileged channel. A cabin network with no segmentation means any compromised or careless device on board — a guest's phone with a malicious app, a charter operator's shared crew tablet — sits on the same broadcast domain as the principal's work. Public or unsecured cabin Wi-Fi at 40,000 feet carries exactly the same interception and man-in-the-middle risk as public Wi-Fi anywhere else; altitude does not add encryption.
The fix is not exotic. A dedicated travel router or small firewall appliance placed between the satcom modem and the cabin distributes the connection through a properly configured network instead of the factory default — separate SSIDs for principal devices, guests and crew, a router-level VPN with a kill switch so nothing routes unencrypted if the tunnel drops, and file/printer sharing disabled on every device before boarding. For aircraft flying regularly with sensitive business aboard, a managed setup adds continuous monitoring and the ability to remotely lock down a device the moment it is reported lost or compromised — useful when the nearest IT support is a phone call to the ground, not a walk down the hall.
Whether you fly a fractional share, a jet card, or your own tail number, we assess the installed connectivity system, configure segmented and VPN-protected cabin networks, and hand crew a setup they can operate without a technician on board. Remote, discreet, under NDA.
Secure Your Aircraft's NetworkIndependent guidance. Where we recommend partner hardware or connectivity providers, an arrangement may exist — it never changes our recommendation or your outcome.
Avionics, crew communication systems and cabin management interfaces increasingly share infrastructure with passenger connectivity. Obsidian Helm's cybersecurity practice treats the aircraft as one environment — not a Wi-Fi password and a hope.
Personal CybersecurityNo. Light jets often fly with no cabin Wi-Fi at all or a slow ATG (air-to-ground) system, midsize and super-midsize aircraft typically carry Ku-band or Gogo AVANCE systems, and ultra-long-range jets increasingly carry Ka-band systems like Viasat/Honeywell JetWave or Starlink Aviation. The aircraft's antenna and connectivity package, not the airframe brand, determines what you actually get.
In most real-world cabin use, yes — Starlink Aviation regularly delivers 100-200+ Mbps versus roughly 10-40 Mbps for Ku-band Gogo AVANCE systems and 20-100 Mbps for Viasat Ka-band, depending on beam congestion and route. Speed is not the same as security, however — a fast connection with no VPN and a shared cabin router is still an open network.
Not by default. Most factory and aftermarket cabin routers use a single shared password for every passenger and every device, with no segmentation between the principal's laptop and a guest's phone, and no VPN or traffic inspection. It is closer to hotel Wi-Fi than to a home network — usable, but not something that should carry deal terms, legal documents or financial instructions unprotected.
At minimum: a dedicated travel router or firewall appliance between the satcom modem and the cabin network, a device-level or router-level VPN with a kill switch, a separate guest SSID isolated from the principal's devices, and disabled file/printer sharing on every device that connects. A managed setup adds monitoring and remote lockdown if a device is lost or compromised mid-trip.
