generating an optical profile for a PON based on one or more characteristics of network light level signals collected over a first time period and delivered over the PON to or from a plurality of optical network terminals (ONTs), the PON including an optical line terminal (OLT) optically connected to the plurality of ONTs via a plurality of optical fibers, wherein the optical profile for the PON includes a distribution of the one or more characteristics of the network light level signals collected at a plurality of times;

generating an optical profile for a customer based on one or more characteristics of customer light level signals collected over the first time period and delivered over the PON to or from an ONT for the customer, wherein the optical profile for the customer includes a distribution of the one or more characteristics of customer light level signals collected at a plurality of times;

obtaining one or more customer light level signals collected over a second time period and delivered over the PON to or from the ONT for the customer;

detecting an anomaly in the PON for the customer in response to determining that the one or more customer light level signals collected over the second time period deviate from the optical profile for the customer or the optical profile for the PON by more than a threshold amount; and

providing an indication of the anomaly to at least one of a user interface or another computing device.