Skip to content
Knowledge

What operators can learn from the drone war

Drone lessons learned from Ukraine. Why detection, fast reporting and prepared staff achieve more than any single technology. For site operators.

Updated 6 Sep 2026Reading time about 9 minutes

The war in Ukraine has shown one simple truth since 2022. Detection, fast reporting and prepared staff achieve more than any single technology. Counter-drone defence in Ukraine lives on people who observe, report and practise. Operators in Germany can adopt these lessons without doing any defending themselves. This article is written for security providers, in-house security and operators of critical infrastructure who want to improve their drone posture.

People detect drones earlier than technology alone

Radar is poor at finding small, low-flying drones. Ukraine's answer was people. Through the reporting app ePPO, citizens mark what they see or hear. By December 2025 more than four million reports had come in, and as of 2026 the app counts around 850,000 verified users, according to the Small Wars Journal of 13 July 2026. The reports fill in where radar is blind, behind terrain, in cities or over forest.

The lesson for operators is simple. Your staff are already on site and know the terrain. If you prepare gatekeepers, patrols and shift leaders for what to look out for, you have a sensor that costs nothing. Many sightings in Ukraine begin with a sound.

The report counts in minutes

Detection without a report achieves nothing. In Ukraine a report from the app lands on the air defence situation map within two to seven seconds, Ukrinform reported on 24 November 2024. Acoustic sensor networks deliver their data to the command system in under twelve seconds, according to Militarnyi of 29 July 2024. Affected citizens get about ten minutes of warning before an overflight, writes the Small Wars Journal of 13 July 2026.

Mobile fire teams also report what happens when the chain is missing. They often hear the drone only when it is already in the target area, according to Frontliner of 6 March 2026. For operators in Germany this means: define in advance who reports, to whom, and with which details. In an acute danger that is the police on 110, for critical infrastructure additionally the Federal Office for the Protection of the Constitution, as the German civil protection agency BBK advises on its pages on hybrid threats. A report written after the shift ends is not a report.

Drones follow patterns you can document

Attacking drones do not fly randomly. The Ukrainian air force describes routes along borders and over water, flying as low as ten metres, because radar sees poorly there, according to RBC-Ukraine of 2 June 2026. By now the attackers also climb to altitudes of several kilometres, depending on what the defence can currently do, according to United24 Media. Most attacks run at night. Whoever knows these patterns can position observers and response teams along the likely paths in advance.

Sightings in Germany show patterns too. Time, altitude, approach direction and behaviour repeat at many locations. Operators who record every sighting with time, place, direction, estimated altitude and count will recognise these patterns within weeks. Exactly these fields are what the GSW network recommends for a nationwide reporting path, as Sicherheits-Berater reported on 2 September 2026.

Protection on the ground is legal and effective

Ukraine protects substations in three stages. Gabions and sandbags against shrapnel, concrete structures against drones, reinforced buildings against missiles, according to RBC-Ukraine of 20 November 2023. The principle behind it applies everywhere. What is passively protected on the ground needs no defence in the air.

For operators here, many measures remain open that need no permit. Lighting that makes sightings easier and does not blind observers. Parking areas for vehicles and cargo that are not openly visible. Fixed roofing or nets over sensitive areas as a passive barrier. Rules of conduct for staff during an approach, such as taking cover and not filming. Passive detection, documentation and reporting are legal for private operators. Jamming, taking over and shooting down are not, as DESK Sicherheit explained on 16 May 2026 on the reform of the German Aviation Security Act.

Practice beats equipment

Operators of mobile defence teams in Ukraine sometimes work with a tablet and the situation picture after just six hours of instruction, United24 Media reported on 1 July 2025. It is not the equipment that makes them capable, it is the routine. Whoever has practised the procedure often enough reports correctly, even standing alone at the gate at night.

Operators in Germany can adopt this without buying anything. One exercise per quarter with an assumed sighting is enough at the start. Who reports what to whom. Where is the phone number. Who writes the log. What happens with the find when a drone lies on the ground. The official guidance here is clear. Do not touch it, keep your distance, dial 110.

Documentation is the basis of every later measure

In Ukraine the reports are not used for the moment alone. They form a data set from which flight paths and times are derived for the future, according to the Small Wars Journal of 13 July 2026.

The same holds for operators. Every decision about lighting, patrol routes, sensors or conversations with authorities needs figures from your own site. A sighting log with fixed fields is the cheapest investment in your entire drone posture.

Cheap technology is the rule, not the exception

FPV stands for first person view. The pilot steers the drone through video goggles, as if sitting on board. Such a drone costs about 300 to 700 US dollars in series production in Ukraine, according to the Dignitas Fund of 8 April 2025. The components come mostly from the civilian market, many of them from China, reports Vector of 27 April 2026. Ukraine plans around eight million of these devices for 2026, writes CEPA of 20 April 2026. Civilian components are available, immediately deliverable and replaceable in bulk.

For detection this means two things. First, the devices are small, quiet and made of plastic, so hard for radar. Second, they fly with off-the-shelf radio and camera gear, so often with standard signals. Whoever sees drones over their site in Germany usually sees the same class of technology. Detection must therefore be designed for this class.

Civilians and authorities work together, not side by side

The Ukrainian reporting app is tied to the state identity system Diia, and the data flows to the air defence, according to the Small Wars Journal of 13 July 2026. Civilian observers deliver, authorities decide. This division of labour is the core of counter-drone defence in Ukraine, not any single device.

In Germany the division of labour is drawn the same way in law. Private actors detect, document and report. The police and the federal police intervene, according to DESK Sicherheit of 16 May 2026. Since the incident at Leipzig/Halle airport on 4 August 2026, a nationwide uniform reporting path has been demanded, reports Sicherheits-Berater of 2 September 2026. Until it comes, operators must know and maintain their own path to the police.

What this means for operators

The lessons from Ukraine can be applied in Germany without any defence technology. Prepare your staff for detection. Define a reporting chain with a number, a contact and mandatory fields. Keep a sighting log and analyse it by time, altitude and path. Check lighting, parking areas and rules of conduct on the ground. Practise the procedure regularly. Only when these basics stand is it worth talking about sensors.

Frequently asked questions

May private operators in Germany defend against drones?
No. Permitted are passive detection, documentation and a report to the police. Jamming, taking over and shooting down remain reserved for the authorities, according to DESK Sicherheit of 16 May 2026.

What belongs in a drone report?
Place, time, count, flight direction, behaviour, size and distinctive features. Plus your assessment whether people or facilities are in immediate danger. These fields are named in the GSW network's proposal of 2 September 2026.

Why is technology alone not enough?
Radar sees small, low drones poorly and does not work without gaps during mass attacks. In Ukraine, observers and sensor networks fill these gaps, according to the Small Wars Journal of 13 July 2026. Technology without a reporting chain remains a screen without consequences.

Are Ukrainian drones comparable to those in Germany?
The technology class, yes. FPV drones in Ukraine are built from off-the-shelf civilian components, according to the Dignitas Fund of 8 April 2025. Exactly this class also appears over German sites.

How fast does a report have to be?
Minutes. In Ukraine reports appear on the situation map within seconds, and citizens get around ten minutes of warning, according to Ukrinform of 24 November 2024 and the Small Wars Journal of 13 July 2026. What counts for you is that the report goes out while the sighting is still happening.

Where do critical infrastructure operators report?
In acute danger to the police on 110. If critical infrastructure is affected, additionally to the Federal Office for the Protection of the Constitution, as the BBK recommends.

Sources

Back to the overview

Inquiry

Describe your situation in a few sentences. We reply within one business day and clarify in a call whether and how we can support you.

Or call us directly
Jan Bamesberger
Geschäftsführer, Feldwache
Montag bis Freitag, 9 bis 17 Uhr