Europe Is Legislating Open a Counter-Drone Market. Defence Founders Should Be Paying Attention.

The regulatory logjam that kept counter-drone technology locked inside military procurement is breaking. A cluster of developments confirmed what specialists have been watching build for months: European governments are actively transferring counter-UAS powers to civilian infrastructure operators, demand is moving from public budgets toward private ones, and the threat picture driving all of this sharpened again in October 2026.

The commercial window this opens is real, time-bounded, and specifically European.

The Legislative Trigger

Private firms and state entities across Europe that operate critical infrastructure want to strengthen their defences, with some utilities asking for authorisation to neutralise drones themselves defensenews.com. Until recently, that authority simply did not exist for most of them.

France moved first and most concretely. The update to France's Military Programming Law for 2024 to 2030 passed through the Joint Committee on June 23, 2026, the Senate adopted the bill on June 30, and the National Assembly gave final approval on July 1, 2026 mezha.net. Opponents referred the law to the Constitutional Council on July 6. On August 6, 2026, the Constitutional Council rejected that challenge, ruling that all contested provisions comply with the French Constitution loc.gov. The law entered force on August 18, 2026, adding 36 billion euros to France's defence budget through 2030 loc.gov.

The counter-drone provision is explicit. The law allows certain private operators, including airports, to use counter-drone systems defensenews.com. The legislation responded to a wave of drone incursions over critical and military sites. The French government wants to give operators of critical infrastructure such as state-owned utility EDF and state-owned railway company SNCF a catalogue of approved systems ranging from electronic jammers to interceptor drones, depending on environment and situation defensenews.com. A senior French official involved in the plans told Reuters that France wants a newly expanded list of sensitive sites deemed of vital importance equipped by 2027 defensenews.com.

Poland acted earlier. An amendment to Poland's Aviation Law was signed by the President on February 6, 2025 researchgate.net, introducing legal provisions on geographical zones for unmanned aircraft and the authority for designated security units to act against drones. Poland has gone further in practice: drone-restricted zones have been established around critical energy infrastructure, and designated security units working for operators have been authorised to destroy, disable, or take control of drones entering them usnews.com.

Germany remains more cautious procedurally, but the politics shifted. Germany is developing its own legal framework for extending counter-drone authority to infrastructure operators, and its interior ministry has stated it is reviewing how critical infrastructure operators and third parties could be legally involved in active counter-drone measures defensenews.com. In Austria, Defence Minister Klaudia Tanner stated publicly in September 2026 that the state could not protect every site on its own en.wikipedia.org.

The pattern is consistent: governments that previously monopolised lethal and semi-lethal drone countermeasures are delegating, under defined conditions, to private operators.

What Changed the Threat Calculus

The regulatory acceleration is directly tied to the threat picture hardening. Germany's military, the Bundeswehr, raised its assessment of the Russian sabotage threat to its second-highest level, warning that German forces themselves could face attacks at home, according to a classified internal analysis reported by WDR and the Sueddeutsche Zeitung defensenews.com. The reassessment was triggered by the discovery in mid-September 2026 of a crashed drone carrying a tin of high explosives near the Wunstorf air base in Lower Saxony defensenews.com. The internal document said Russia had crossed "a previously anticipated red line of harmful intent involving kinetic and/or lethal effects" against Germany and the Bundeswehr through the use of weaponised drones 1027wbow.com. A defence ministry spokesperson confirmed the assessment publicly defensenews.com.

The broader pattern behind the Wunstorf incident included drone overflights of the Arrow 3 missile defence site in Saxony-Anhalt, and a camouflaged camera found filming a strategically important railway station in Minden, Westphalia defensenews.com.

Governments are worried that hybrid warfare or a drone attack could knock out power to millions of people, as has happened frequently in Ukraine after Russian strikes usnews.com. Kristian Ruby, secretary general of European energy body Eurelectric, told Reuters it is "a theoretical, and increasingly a practical, possibility that there could be heating outages this winter due to hybrid attacks" usnews.com. Leonhard Birnbaum, chief executive of German energy firm E.ON, said in September 2026 that operators must assume some attacks will succeed, rather than plan on stopping all of them. E.ON operates around 2,720 substations across Germany usnews.com.

The Market That Is Now Opening

Interviews by Reuters with over 30 company executives, officials, and drone experts show the technology to detect and bring down drones is maturing faster than the rules on who may use it usnews.com. Those rules are now catching up, and that synchronisation creates a procurement window.

The numbers are moving sharply. The figures here require precision: these are Europe-specific projections, distinct from the global market. The European anti-drone industry is projected to grow from USD 1.24 billion in 2025 to USD 4.16 billion by 2030, at a compound annual growth rate of 27.5% during the forecast period marketsandmarkets.com. Within that European figure, the commercial segment is expected to grow at the highest CAGR of 30.9% during the forecast period marketsandmarkets.com, reflecting precisely the shift from military-only buyers toward private infrastructure operators happening in France, Austria, and Poland. For context, the separate global anti-drone market is a different and larger figure: the global anti-drone market is projected to expand from USD 4.48 billion in 2025 to USD 14.51 billion by 2030, at a CAGR of 26.5%, according to a MarketsandMarkets global report published in August 2026 globenewswire.com. Europe's 27.5% CAGR outpaces that global rate, reflecting heightened regional investment pressure.

The programme delivering the French commercial market entry point is now named and verifiable. France's Secrétariat général de la défense et de la sécurité nationale (SGDSN) has mandated Systematic Paris-Region to test, evaluate, and certify counter-drone solutions for deployment by operators of vital importance (OIV) systematic-paris-region.org. Tests take place on the runways of the Brétigny-sur-Orge test centre (La Base 217), with evaluations coordinated by Systematic and validated by the SGDSN systematic-paris-region.org. The programme is called ESCALAD. Systematic Paris-Region confirmed that evaluations launched this summer had so far catalogued three systems integrators and 17 counter-drone systems, with assessments continuing and work under way to accelerate procurement from among those solutions systematic-paris-region.org. Two evaluation campaigns are programmed for the second half of 2026 systematic-paris-region.org.

Rheinmetall has already read the room. The company stated that interest from private infrastructure operators in counter-drone systems was rising sharply, and said it was conducting workshops, site surveys, and infrastructure assessments for operators while preparing for what it described as a rapidly growing market segment defencematters.eu. When a prime with Rheinmetall's procurement access is standing up a commercial counter-drone practice, the addressable market is not a forecast. It is already forming.

The friction point that remains is liability. Without legal certainty, operators of critical infrastructure could remain reluctant to neutralise drones because bringing one down could itself cause injury or costly damage usnews.com. Two sources at energy transmission companies on NATO's eastern flank told Reuters that effective intervention still requires more assurances, and perhaps a judicial precedent, on who bears responsibility for collateral damage usnews.com. France is trying to automate the process as much as possible to reduce the liability exposure on individual operators usnews.com. This gap, between political willingness to authorise counter-drone action and legal certainty about its consequences, creates a specific commercial opportunity: the operators who move first need turnkey systems that document the decision chain, log threat assessments, and provide audit trails. Software and command-and-control layers matter here, not just hardware.

The market is undergoing a structural shift from standalone detection sensors toward fully integrated counter-UAS platforms that fuse radar, RF sensing, electro-optical and infrared imaging, AI analytics, and kinetic or non-kinetic mitigation into a single command-and-control layer marketsandmarkets.com.

For Founders

Three things are structurally different from eighteen months ago.

Buyers now have legal authority to purchase. The French update to the Military Programming Law, adopted by parliament on July 1, 2026 and cleared by the Constitutional Council on August 6, 2026 loc.gov, together with Poland's Aviation Law amendment signed in February 2025 researchgate.net, convert an implicit desire for protection into an explicit procurement mandate. Energy firms, rail operators, port authorities, and airports can now contract for counter-drone systems without needing military interoperability certification as their primary entry point. That lowers the barrier considerably for ventures that could not previously navigate defence procurement timelines.

The threat picture is no longer deniable at board level. The Bundeswehr's public classification of Russian drone-sabotage risk at its second-highest level defensenews.com gives infrastructure operator boards political cover to fund serious counter-drone programmes. Before October 2026, security directors at utilities faced internal scepticism about the scale of the threat. Relatively inexpensive drones are challenging such defences, and essential equipment such as large transformers can take years to replace, while even a successful repair can leave infrastructure out of service for months usnews.com. That argument is no longer abstract.

The software layer is underdeveloped relative to the sensor layer. Detection hardware, from radar to RF, is reasonably well supplied. Security officials and counter-drone technology firms say systems are becoming increasingly automated because operators cannot station specialist teams at every site usnews.com. What is scarce is the command-and-control software that integrates multiple sensor feeds, models threat confidence in real time, provides a legally defensible decision log, and automates appropriate responses within the authorised rules of engagement. The liability gap described by operators is not primarily a hardware problem. It is an information and accountability problem. That is where a lean, software-first defence venture can move faster than a prime.

Use the ESCALAD programme at Brétigny-sur-Orge as your entry point. The SGDSN-mandated programme run by Systematic Paris-Region is the mechanism by which counter-drone systems get onto the catalogue that French OIV operators will buy from systematic-paris-region.org. ESCALAD is open to all actors offering counter-drone solutions covering detection, interception, and neutralisation. To take part, companies submit a questionnaire and NDA downloadable from the Systematic Paris-Region programme page systematic-paris-region.org. Inclusion on that catalogue is likely to become a gateway to pan-European infrastructure customers, not just French ones. Given France's pace, other European buyers will reference it. If your system is relevant, find a way into those evaluations now.

The regulatory unlock happening across Europe in autumn 2026 is not a slow, multi-year policy process. France's parliament acted on July 1. The Constitutional Council cleared the law on August 6. It entered force on August 18. Poland has a framework signed since February 2025. The Bundeswehr upgraded its threat assessment in October 2026. The procurement activity will follow closely. Founders who are positioned in the civil critical infrastructure counter-drone space, with nationally approved systems and a clear liability-management story, are looking at a buying wave that has no precedent in this segment.