In November 2024 the Russian intelligence ship Yantar was caught operating three drones in Irish-controlled waters east of Dublin, near key undersea cables and energy infrastructure. In January 2025 the Arne, a Russian shadow-fleet tanker previously boarded by German federal police on sabotage suspicions, was observed by the Air Corps towing its anchor in the vicinity of the AEC-1 data cable connecting Ireland and the United States. In June 2025 the Defence Forces signed a €60 million contract with Thales, the French defence contractor, for a towed-array sonar system covering a zone 370km from the western coast, intended specifically to detect submarine activity around the cables and gas pipelines. Completion is targeted for 2027.

Ireland's defence budget for 2025 is €1.35 billion, around 0.2% of GDP, the lowest defence-to-GDP ratio in the European Union. The Defence Forces have 8,500 active personnel, the Naval Service operates eight ships, and the Air Corps does not field combat aircraft. By every conventional metric Ireland is the EU's least defended country and the most institutionally committed to formal neutrality.

These two paragraphs describe the same country, in the same year. The contradiction inside them is the actual shape of Irish defence politics in 2026, and naming it is the political move that has not been made.

What Ireland is already doing

Approximately three quarters of subsea cables in the Northern Hemisphere pass through or near Irish waters. Fourteen cables physically land on the Irish coast: four cross the Atlantic to North America, one connects to Iceland, nine connect to the United Kingdom. The Hibernia Express terminates in Cork. The Celtic Norse and AEC-1 both land at Killala Bay in County Mayo. Amazon has filed for an Ireland-to-US system that would add another transatlantic line in the late 2020s. The country sits on one of the world's two main transatlantic fibre corridors, the other being South of England.

Ireland is also the densest non-American concentration of US tech operations on the planet. Google, Meta, Microsoft, Apple, Amazon, Stripe, Salesforce, Workday and most of the major US cybersecurity firms have material EU operations there. The country has been a PESCO member since 2017. The National Cyber Security Centre exists, has grown, and has been credited by EU partners with reasonable interoperability for a country its size.

Russian sub-surface activity in Irish waters has been escalating since 2022 in step with the Ukraine war. Irish public discourse has framed each individual incident as a one-off provocation. The pattern is what the Defence Forces' sonar contract recognises but the political class has not yet articulated. A country that buys €60 million of military-grade sonar to detect a specific named adversary's submarines is not, in any operational sense, neutral.

Why the neutrality discourse has frozen this

Irish neutrality is policy, not constitutional. The triple lock (Government, Dáil, UN mandate) governs military deployment abroad, not domestic posture. The neutrality narrative serves several functions at once: it satisfies a national-historical preference, it allows successive governments to underspend on defence, and it lets the country retain the European-soft-power role that has been politically and economically useful for decades.

What it does not do is describe what the country is currently doing. Hosting NATO cyber doctrine partners, contributing PESCO funding, buying military sonar to track Russian submarines, sitting at the western terminus of the bloc's primary fibre infrastructure, and providing the data residency for a substantial fraction of EU corporate operations is a specific operational role. That role has a name in any European Combined Forces architecture worth designing. The name is cyber operations and critical infrastructure protection, particularly the transatlantic cable and data centre interface.

The reason this has not been said politically is that it cannot be said inside a frame whose central organising claim is "neutrality." Saying Ireland's defence contribution is cyber, that contribution is real, and that contribution is operationally aligned with the post-American European bloc, requires accepting that there is no neutral position to be on the side of. The architecture has already chosen Ireland. The electoral question is whether the country admits it.

Specialisation, not abandonment

The framing that has been blocked for a decade is "abandon neutrality, join NATO, spend 2% of GDP on conventional forces, deploy soldiers." That framing is unwinnable in any near-term Irish electoral cycle, and it has been wrong for the country for almost as long as it has been proposed. Ireland will not become a serious conventional military power by 2036, by 2046, or by any near-future date. The geography, demography and political culture make the conventional path a non-starter.

The framing that becomes available is specialisation. The bloc that is forming under Trump's second presidency is implicitly already a specialisation league. Belgium and the Netherlands run combined mine warfare. Norway runs high-North maritime and submarine. Sweden runs sub-Arctic submarine warfare. Finland runs mass mobilisation. Greece runs Aegean choke-point control. Each country contributes disproportionately in one domain rather than a thin slice of everything. The smaller members get political coverage and the bloc gets a coherent capability map.

Ireland's specialisation is cyber operations and transatlantic cable plus data centre defence. The framing is that the country contributes more, in the domain that matters most for the bloc's western flank, than three-quarters of European generalist members combined. The conventional Defence Forces stay small. The Naval Service expands modestly to four to six dedicated cable-protection vessels. The Air Corps remains a maritime patrol force, not a combat force. The cyber operations side scales: five to ten thousand cyber professionals trained over the decade, blended military and civilian, partly absorbed from the private tech sector that already employs that talent.

This is not abandonment of neutrality. It is acknowledgement of what neutrality has already become, repackaged as a defined operational specialisation that the political system can defend. The phrase that does the work is specialisation gain, not neutrality loss.

The structure that follows

If Ireland accepts cyber as the specialisation, the operational architecture is already mostly visible. The doctrine and policy headquarters of the bloc's cyber capability sits at Tallinn, where the NATO Cooperative Cyber Defence Centre of Excellence has been operating since 2008. The eastern operational node makes sense at Tallinn or Warsaw. The western operational node, if it is built, makes sense at Cork, with Dublin as the talent and academic gravity.

Cork has the cable landings. The Defence Forces' Naval Service base at Haulbowline sits on the same harbour. Cork Institute of Technology has run a cyber range since the early 2020s. The transatlantic cable landings into Cork mean that a defensive cyber operations centre placed there has direct fibre into the infrastructure it is protecting. The political case is simpler in Cork than in Dublin because the strategic asset is already located there.

Dublin is where the talent lives, where the academic infrastructure (DCU, UCD, TCD, Maynooth) provides the recruitment pipeline, and where the corporate cyber sector is concentrated. The split makes sense: operations in Cork, doctrine and recruitment in Dublin. Both nodes work under bloc-level command structures (combined OPCON with Tallinn for crisis response, integration with the Intelligence Fusion Centre that the bloc will build).

Funding comes through the EU SAFE facility, of which Canada is now also a beneficiary as the only non-European partner. Ireland's defence spending rises to one percent of GDP through this decade, roughly tripling in absolute terms, with the increase routed predominantly into the cyber specialisation rather than conventional forces. The triple lock survives because cyber operations are not deployments under the meaning the triple lock was designed to govern. The neutrality narrative is not destroyed; it is reframed as the principle that delivered Ireland its specialisation rather than a generalist conscript force.

The catch that nobody wants to name

There is a tail to this argument. Cable kinetics catch up to the cyber framing. If a Russian submarine cuts an Irish cable in 2027 or 2028 and the Naval Service cannot respond in time, the political coverage of "we are a cyber specialist, not a conventional force" collapses inside a single news cycle. The conventional naval expansion that the Defence Forces have been resisting for a generation becomes politically inevitable in the worst possible circumstance: forced, reactive, after the harm.

The €60 million sonar system due in 2027 is the recognition of this risk. It is not enough. Four to six dedicated cable-protection vessels, comparable to the Belgian-Dutch r-MCM platforms but specialised for cable defence rather than mine warfare, is the realistic fleet expansion needed. That is real money: somewhere between €1.5 and €2.5 billion over the decade, on top of the cyber specialisation cost. It is also, when set against the alternative of a conventional military build that costs ten times as much and delivers something Ireland does not actually need, the cheap option.

The other catch is sectoral capture. Building a cyber operations centre on top of US tech firms hosted in Ireland creates a sovereignty problem of its own. Some of those firms are themselves the surveillance counterparties the bloc is trying to avoid depending on. The line between "leverage the existing industrial concentration" and "build a defence capability inside US corporate infrastructure" needs careful drawing, and the drawing is going to be unpopular with both the firms and the Department of Enterprise. The political path through this involves explicit air-gaps, classified handling protocols and Irish state ownership of the dedicated cyber range and data infrastructure. The arrangement is workable. It is not free.

What the political system has to do

The political move that has not been made is the simple one. A senior politician, not necessarily a Minister but at least a frontbench spokesperson, says publicly that Ireland's contribution to European defence is cyber and cable protection, that this is a specialisation Ireland is uniquely positioned to lead, that the contribution is consistent with the country's neutrality tradition rather than a betrayal of it, and that the funding rises to one percent of GDP through this decade routed into that specialisation. The triple lock stays.

Once that argument is made publicly, it cannot be unmade. The opposition will protest that it is a Trojan horse for full NATO membership, but the framing as specialisation rather than alliance accession holds because it is technically accurate. The defence establishment will protest that it under-funds conventional capacity, but the conventional capacity has been under-funded for fifty years and the cyber path delivers more bloc-relevant capability per euro than any conventional alternative. The neutrality lobby will protest, but the actual neutrality position the country has held for decades is not what they think it is, and it has not been for years.

The argument that does the work is we have already chosen, we should describe what we have chosen. Specialisation gain, not neutrality loss. The window for making it is the next twelve to eighteen months, while the bloc architecture is still being assembled and roles are still being assigned. After that, the role gets assigned anyway, but Ireland has less leverage over what it looks like.

Closing

The country sits on one of the world's two main transatlantic fibre corridors, hosts the densest concentration of US tech operations outside the United States itself, has Russian submarines actively probing its cables, has just bought military sonar to find them, has been a PESCO member since 2017, and has a political class still arguing about whether to participate in European defence. The participation is happening. The architecture has chosen. What is missing is the sentence that says so.

Saying it is the political move available right now to a country that has not had a serious defence-policy debate in four decades. The sentence is not difficult. The country sits on the western node of the post-American European defence architecture. Its specialisation is cyber and cable defence. Its funding rises proportionally. Its contribution exceeds what most generalist members deliver, in the domain that matters most for the bloc's western flank.

It would help if someone said it.

This piece reflects independent analysis. The author writes in a personal capacity.