Systems and methods are disclosed for detecting security threats during vehicle operations. For instance, retrieving a route plan for a route of a vehicle from a database of the vehicle; identifying either a portion of the route or a portion of the route plan as a security threat based on an analysis of the route plan; and in response to identifying the portion of the route or the portion of the route plan as the security threat, transmitting an alert of the security threat.