- Learn
- Align
- Perform
- Review
LearnDrones in Corporate Security, part 5 of 69 min read
Article 5 — The Adversary Has Drones Too: What Hostile Aerial Threats Mean for Executive Protection
By J Damien Scott, Trusted Advisor
A hostile aerial threat is a drone used against people, sites, or operations for surveillance, intimidation, espionage, target development, or attack. The same accessibility that makes small drones useful to corporate security teams makes them available to criminal groups, proxies, and insurgents. This article sets out the three categories of hostile drone activity, the kinetic and non-kinetic threat pathways, why hostile drones are hard to defend against, and what changes for executive protection planning.
What a hostile aerial threat means
A hostile aerial threat is any drone or other small uncrewed aircraft used against people, sites, or operations for surveillance, intimidation, espionage, target development, or attack. The threat is not the aircraft itself. It is what the operator intends and what the platform enables: observation from angles ground security does not cover, warning time compressed to minutes, and in some markets the direct delivery of an explosive payload.
The first four articles in this series have focused on how corporate security teams can use drones to improve awareness, movement planning, site security, and protective intelligence. Article 5 is the necessary pivot. In high-risk markets, drone adoption cannot be discussed only from the perspective of friendly capability. The same accessibility that makes small drones useful to corporate teams also makes them available to hostile actors, criminal groups, proxies, insurgents, and opportunists. That means the most consequential drone lesson for executive protection is not only what friendly drones can do, but what hostile drones can already do cheaply, persistently, and with growing tactical creativity.
This matters because many corporate people, sites, and routines in fragile environments are soft or semi-soft targets. Executives move through exposed arrival and departure points. Compounds often prioritize horizontal perimeter security more than overhead vulnerability. Project sites, logistics nodes, and temporary residences may be visible from nearby terrain or accessible from stand-off launch points. Even when the intent is not immediate attack, hostile drone use can still support surveillance, intimidation, target development, corporate espionage, and testing of defensive response. In practical terms, the aerial layer expands the adversary's options while compressing the defender's warning time.
“The aerial layer expands the adversary's options while compressing the defender's warning time.”
Three categories: nuisance, criminal, and conflict-linked
Not every drone near a corporate site is a hostile platform, and not every unauthorized flight represents the same level of risk. That distinction is important because poor classification leads to poor response. Executive protection teams should think in terms of at least three broad categories.
The first is the nuisance or low-concern drone. This may involve hobbyist activity, careless overflight, unauthorized photography, or poorly controlled commercial use nearby. Such activity can still create privacy and safety concerns, but it does not necessarily indicate targeting.
The second is the criminal or opportunistic drone. This category may involve scouting for theft, surveillance of routines, intimidation, contraband support, or reconnaissance linked to kidnapping, extortion, or facility intrusion. Here the drone is not merely intrusive. It is part of a preparatory or opportunistic threat pattern.
The third is the conflict-linked or hostile-actor drone. This is the most serious category. In active-conflict and some post-conflict environments, non-state armed groups and other hostile actors have demonstrated the ability to use commercial drones for ISR, bomb-drop attacks, one-way strike concepts, attempted assassinations, and indirect-fire spotting. Corporate teams do not need to assume that every operating area contains this level of threat, but they do need to recognize that in some markets the capability is no longer theoretical.
This layered framing helps decision-makers avoid two mistakes. One is complacency, where repeated low-grade drone sightings normalize aerial exposure. The other is overreaction, where every unauthorized flight is treated as evidence of an imminent strike. Executive protection requires a risk model that can distinguish nuisance, criminal, and conflict-linked threats while still treating each as potentially relevant to a wider pattern.
Kinetic threat pathways: the attack problem
The most alarming hostile use case is kinetic effect. Recent research from the Combating Terrorism Center at West Point documents how non-state actors have used commercial drones for bomb-drop attacks, kamikaze missions, and attempted assassination activity, while also highlighting the sharp rise in armed UAV incidents over time. The Association of the United States Army has likewise examined how terrorists may adapt drone technology for future attack models because of its accessibility, flexibility, and low operating cost. These findings matter to executive protection because they show that small drones are no longer limited to observation alone.
For corporate settings, the most relevant kinetic pathways include lightly protected outdoor gatherings, compounds with exposed internal courtyards, temporary sites with limited overhead cover, and vehicles halted during arrivals, departures, or route disruption. A drone does not need a large payload to create serious consequences. Even a modest explosive or improvised payload can produce injury, panic, fragmentation risk, reputational damage, and immediate operational disruption.
Another pathway is the one-way or kamikaze concept, in which the drone itself becomes the delivery mechanism. Corporate actors are not the most common targets in available literature, but that should not create false reassurance. The more important lesson is that a small, cheap, expendable aircraft can be repurposed creatively and launched from outside the defensive footprint. That changes the assumptions behind venue planning, movement timing, and compound hardening.
A third kinetic concern is indirect-fire support. A hostile drone may not attack directly at all. It may instead observe a site, correct fire, adjust aim, or confirm the effect of another weapon system. In a conflict-linked environment, that possibility matters because it turns overhead observation into part of a wider attack chain rather than a stand-alone event.
Non-kinetic threat pathways: often more likely, still highly consequential
For many corporate organizations, the more probable near-term threat is non-kinetic. A drone used for surveillance, pattern collection, intimidation, or espionage may never drop a payload, yet it can still create severe protective problems. This is especially true for executive protection because the mission depends heavily on controlling predictability, preserving discretion, and limiting the adversary's ability to learn routines.
One major pathway is surveillance of executive life and movement. A drone can observe arrival patterns, convoy compositions, guard procedures, rooftop exposure, residence layouts, access routes, and transfer points from angles that ground surveillance may not reach easily. Repeated collection can reveal patterns that make later targeting easier even if the drone's immediate activity appears passive.
A second pathway is corporate espionage. ASIS Security Management has highlighted the growth of drone-assisted espionage against organizations, emphasizing that drones can support stand-off collection against facilities, personnel, and operational processes while countermeasures often lag behind the threat. In fragile environments, this matters not only for intellectual property. It can expose logistics routines, security procedures, project tempo, leadership presence, and site vulnerabilities.
A third pathway is intimidation and coercive presence. Persistent aerial observation over a compound, event site, or executive residence can unsettle personnel, communicate reach, and test whether the organization can detect or respond effectively. Even without direct attack, that kind of pressure can alter behavior, reduce confidence, and signal that the target is being watched.
A fourth pathway is proximity-based cyber or technical intrusion. While not every actor can execute it, drones can in some cases carry devices that support proximity to networks, sensors, or other technical targets. For executive protection leaders, the key point is not to assume a specific technical method. It is to recognize that the drone may be serving as an access platform rather than only a camera.
Why hostile drones are hard to defend against
Part of the challenge is economic. Hostile drones are often cheap, replaceable, and easy to acquire. Defensive systems, by contrast, are frequently more expensive, more regulated, and more complex to employ. West Point research underscores this asymmetry directly, noting the widening gap between low-cost hostile capability and costly defensive response. That imbalance matters greatly for private-sector organizations, which often face tighter legal authorities and lower tolerance for disruption than state or military actors.
Part of the challenge is operational. Small drones can be launched from stand-off positions, flown briefly, and recovered or abandoned with limited attribution. They may exploit urban clutter, short dwell times, or routine background noise. In some cases, the aircraft is less important than the uncertainty it creates. Security teams may see or hear something overhead without knowing immediately whether it is harmless, suspicious, or part of a more serious sequence.
Part of the challenge is legal. Many private organizations cannot lawfully jam, spoof, disable, or kinetically defeat a drone on their own authority, even when the threat is concerning. That means the practical corporate response often relies more on detection, rapid reporting, protective adaptation, movement discipline, and coordination with authorized partners than on direct neutralization. In other words, the corporate sector often has to manage hostile drones procedurally before it can manage them physically.
What this means for executive protection planning
For executive protection teams, hostile drone risk should change planning assumptions in several concrete ways. First, outdoor events and exposed gatherings need renewed scrutiny. A site that appears secure against ground intrusion may still be highly visible or vulnerable from above. Event planners should therefore ask not only who can approach the venue, but who can observe, film, intimidate, or potentially attack it from the surrounding airspace.
Second, arrival and departure phases deserve special attention. These moments already concentrate exposure because vehicles slow, routes narrow, and principals move through transitional spaces. A hostile drone can exploit that compression by observing timing, confirming presence, or in the worst case supporting a strike or another form of attack. Even when no direct action occurs, the drone may still be part of reconnaissance that makes future attacks more feasible.
Third, residences and temporary accommodation should be reassessed for rooftop and overhead exposure. Traditional residential security often focuses on gates, walls, access control, and neighborhood dynamics. Those remain important, but a hostile drone can expose layouts, routines, and protected spaces that were once harder to view from outside the property boundary.
Fourth, teams should assume that adversary reconnaissance from above is increasingly plausible. That does not mean every movement or site is under active aerial collection. It means planners should stop treating the overhead layer as a niche concern and instead incorporate it into route design, venue assessment, site posture, reporting thresholds, and post-incident review.
The questions decision-makers should now ask
The practical value of this analysis lies in the questions it forces leadership to confront. A principal, venue, route, or project site should now be examined not only from the ground perspective, but also from the air. Can a drone observe the key transition points? Are there likely stand-off launch areas nearby? What would the team do if unauthorized aerial observation appeared ten minutes before movement? How would personnel distinguish nuisance activity from targeting indicators? What information could a drone collect about routines, procedures, or site geometry that would matter to a hostile actor?
Principal movement: can a drone observe route timing, convoy composition, or vulnerable choke points? If so, reduce pattern exposure, vary timing, and build drone-related reporting triggers into movement planning.
Venue security: can the venue be surveilled or approached from above in ways ground security does not cover? If so, add overhead vulnerability review to site surveys and arrival-departure planning.
Residences and compounds: what can be seen from above, and from where could a drone launch nearby? Reassess privacy, rooftop exposure, inner-compound clustering, and nearby terrain.
Project sites and logistics nodes: could a drone support espionage, target development, or incident correction? If so, strengthen reporting, anomaly detection, and partner coordination for suspicious aerial activity.
Incident response: if a drone appears, what classification and escalation path exists? Define thresholds for observation, sheltering, postponement, external notification, and evidence capture.
Closing perspective
Article 5 marks the point in this series where drones must be understood not only as tools, but as threats. For corporate executive protection in active-conflict and post-conflict environments, that shift is essential. Friendly drones may improve route awareness and protective intelligence, but hostile drones can observe, intimidate, collect intelligence, enable attack chains, and in some cases deliver kinetic effects directly. The same technology that increases defensive awareness can also increase adversary reach.
That is why the most important leadership adjustment is conceptual. Security teams should stop treating hostile drones as an exceptional or purely military concern. In some operating environments, they are now part of the corporate threat landscape. The right response is not panic or technology enthusiasm. It is sober planning, better classification, clearer procedures, and the assumption that executive protection must now account for observation and threat from above.
References
Dulligan, Freeman, Phoenix, and Davis. The Rising Threat of Non-State Actor Commercial Drone Use: Emerging Capabilities and Threats. Combating Terrorism Center at West Point, 2025.
Gates, Megan. A Rising Threat: Using Drones to Conduct Corporate Espionage. ASIS Security Management, 2025.
Chávez and Swed. The Role of Drones in Future Terrorist Attacks. Association of the United States Army, 2020.
UNIDIR. The Use of Uncrewed Aerial Systems by Non-State Armed Groups in Africa. United Nations Institute for Disarmament Research, 2024.
Originally published on LinkedIn. Read it there
Field Notes · by email
One email when a new article publishes. Nothing else.
Field notes on converged security from J Damien Scott, Trusted Advisor: the article, its summary, and the phase it belongs to. No digests, no offers, no third party reading over your shoulder.
Email delivery is being set up. The feed carries every article the day it publishes. About Field Notes
Related reading
More from Learn
Learn · April 2026
Article 1 — Why Drones Now Matter to Corporate Executive Protection in Conflict-Affected Markets
Drone technology has moved from a military novelty to a standard operational tool in conflict-affected environments. For corporate executive protection programs operating in fragile markets, this shift changes the geometry of exposure in ways that traditional ground-focused security architectures were not designed to address.
8 min readPerform · April 2026
Article 2 — Aerial Advance Work: Using Drones for Route Reconnaissance, Venue Assessment, and Movement Overwatch
Aerial advance work is not a replacement for ground-level advance work. It is a complement that addresses the specific limitations of ground-based reconnaissance: the inability to see over obstacles, the time required to physically check extended routes, and the difficulty of maintaining continuous situational awareness during a movement.
9 min readLearn · April 2026
Article 3 — Drones as a Protective Intelligence Layer: Pattern-of-Life, Anomaly Detection, and Threat Mapping
The most durable value of drone integration in corporate security is not the dramatic intervention. It is the quiet, systematic collection of pattern-of-life data that makes the operating environment legible. This article examines how drones function as a protective intelligence layer when integrated with disciplined analytic processes.
9 min read