One of Europe’s most tightly regulated aviation security environments is being forced to adapt to hybrid threats, weaponised drones and a growing need for real-time coordination between public authorities, airport operators and private security providers.

More than 207 million passengers travelled through Germany’s main commercial airports in 2025. During the same year, the German air navigation service provider DFS controlled 3.071 million aircraft movements in German airspace. Behind those figures is a complex security architecture in which federal and state authorities, airport operators, airlines, logistics companies, technology suppliers and private security providers must work together every day.
For international observers, the German system can appear unusually fragmented. Responsibility is divided between the federal government, Germany’s 16 states, airport operators, airlines and several specialised authorities. Private contractors conduct a large share of operational security work, but usually under public supervision and within tightly defined legal frameworks.
Until recently, much of the public discussion focused on passenger checkpoints, queues and the introduction of more advanced screening equipment. That perspective is now too narrow. Aviation security begins with background checks on airport employees and extends through access control, apron surveillance, cargo security, aircraft protection, airport supplies, cybersecurity and perimeter protection.
The events of 2026 have pushed another issue firmly to the top of the agenda: the protection of airports and other critical infrastructure against unmanned aircraft. The discovery of a drone equipped with an explosive device and detonator close to a runway at Leipzig/Halle Airport in early August marked a significant escalation in the threat picture described by German authorities and security associations. What was often treated as a problem involving careless recreational pilots, unauthorised photography or operational disruption must now also be considered a potential attack scenario.
Germany therefore faces a dual challenge. It must maintain the reliability of an established and heavily regulated screening system while building a new, connected defensive architecture around airports, their perimeters and the low-altitude airspace above them. The underlying principle remains the same: no single control point, sensor or organisation can provide complete protection. Resilience is created through overlapping layers of law, technology, trained personnel, physical security and clearly rehearsed response procedures.

Aviation security is not the same as aviation safety

A distinction that is familiar to aviation professionals but often lost in public debate is the difference between safety and security.
Aviation safety is concerned primarily with the prevention of accidents, technical failures and operational errors. Aviation security addresses intentional and unlawful interference. This includes terrorism, sabotage, aircraft hijacking, the introduction of prohibited items and unauthorised access to restricted airport areas.
Germany’s Aviation Security Act, known as the Luftsicherheitsgesetz or LuftSiG, provides the national legal basis for protecting civil aviation against such acts. It operates within the wider European aviation security framework. Regulation (EC) No 300/2008 establishes common basic standards across the European Union, while Implementing Regulation (EU) 2015/1998 sets out more detailed requirements for passenger and baggage screening, staff training, security equipment, air cargo, mail, airport supplies and in-flight supplies.
These European rules provide a common baseline, but their implementation remains national. Germany’s federal structure means that responsibilities are not concentrated in a single airport security authority. Instead, functions are distributed among the Federal Police, state aviation security authorities, the Federal Aviation Office, airport operators, airlines and private security companies.
For foreign companies or investors entering the German aviation market, this division matters. A technical solution that is accepted at one airport is not automatically deployed through the same organisational process at another. European performance and certification requirements remain consistent, but procurement, operational supervision, training structures and local decision-making can differ by site and by federal state.

A system of shared responsibility

The practical division of aviation security duties is governed primarily by Sections 5, 8, 9 and 9a of the German Aviation Security Act.
Passenger and baggage screening
Section 5 provides the basis for screening passengers, baggage and other persons or objects entering security-restricted areas. At 13 German airports, the Federal Police holds the statutory responsibility for protecting civil aviation against unlawful interference.
The screening officers seen by passengers are frequently employed by private security companies. They work on behalf of, and under the supervision of, the Federal Police. Their duties are complemented by armed protective measures, patrols in restricted areas and additional precautions for flights or facilities assessed as being at particular risk.
At other German airports, responsibility lies with the aviation security authority of the relevant federal state. This is one of the most important features of the German model: identical European and national security standards may be delivered through different administrative structures.
The arrangement allows regional implementation, but it can complicate the development of uniform operational concepts. That issue becomes particularly important when rapidly evolving threats such as drones require common detection thresholds, reporting formats and intervention procedures across multiple jurisdictions.

Responsibilities of airport operators

Section 8 places extensive duties on airport operators. They must protect airport installations, buildings and operational areas against unauthorised access and attack. Measures include the separation of the airside area from publicly accessible zones, access and vehicle controls, the screening of staff and goods, and organisational precautions for sensitive facilities.
In operational terms, the airport security perimeter does not end at the passenger checkpoint. Gates, service roads, construction areas, supplier entrances, aprons, aircraft stands, fuel facilities, technical rooms and transitions between public and restricted zones must all form part of a coherent security plan.
This wider perimeter is increasingly important. An attacker does not necessarily need to pass through a passenger screening lane. Disruption can be caused by interference with power supplies, baggage systems, communications, access-control infrastructure or operational technology. A drone may cross barriers that were designed to stop people and vehicles rather than small airborne platforms.

Responsibilities of airlines

Section 9 addresses the security obligations of air carriers. Airlines must protect the areas and aircraft placed under their control and ensure that baggage, cargo, mail, in-flight supplies and other goods are handled in accordance with the applicable rules.
Typical measures include aircraft guarding, security searches, document checks, protection during ground handling and controls covering the transfer of goods. Traceability is central. From the moment an item is accepted until it is loaded, the operator must be able to demonstrate how its security status was established and preserved.

The secure supply chain

Section 9a regulates participants in the secure aviation supply chain. These include regulated agents, known consignors, hauliers and regulated suppliers. The German Federal Aviation Office, the Luftfahrt-Bundesamt or LBA, is responsible for approving and supervising several of these entities.
Cargo that has not yet achieved secure status must be screened using an approved method before loading and must subsequently be protected against unauthorised interference.
This means that air-cargo security does not begin at the airport. It extends to manufacturers, warehouses, logistics companies, transport providers and other partners far beyond the airport boundary. For Germany’s major cargo hubs, this external network is a critical part of aviation security rather than a secondary compliance issue.

Screening technology has advanced — but technology alone does not create security

Passenger checkpoints have undergone substantial technical modernisation. Modern X-ray and computed-tomography systems can create three-dimensional images of baggage, allowing operators to examine suspicious objects from different angles.
These systems are complemented by explosive trace detectors, walk-through and handheld metal detectors, liquid explosive detection systems, shoe scanners and other specialised devices. The available market now includes equipment for analysing liquids, detecting letter bombs and inspecting footwear for metallic objects or explosive traces.
The development is significant, but equipment remains one part of a broader process. A detection system produces an image, a measurement or an alarm. Whether that output becomes a reliable security decision depends on the quality of training, operating procedures, concentration, communication and supervision.
For that reason, realistic training is becoming increasingly important. German providers have invested in their own academies and practical training environments. The German Protection and Security Service, for example, has described the use of a CTiX screening system at its training centre to prepare staff for modern baggage-screening operations. FraSec similarly positions continuous training based on national and international standards as a core function of its academy.
German and European rules require initial instruction, recurrent training and documented proof of competence. Qualification is therefore not treated as a one-off entry requirement. It is a continuous security process that must evolve alongside technology and threat patterns.

Security and passenger service are not opposites

Security and passenger throughput are often presented as competing objectives. Airports are expected to detect dangerous items reliably while moving passengers through checkpoints without unpredictable delays.
In practice, poor service design can itself create security problems. Congested screening areas, unclear procedures, badly managed queues and contradictory passenger information increase pressure on staff and travellers. They can obstruct observation, complicate emergency access and make unusual behaviour more difficult to identify.
Professional queue management, forward-looking staff deployment, clear passenger communication and better preparation of hand baggage can improve both security and operational performance. Efficient processes do not have to reduce the thoroughness of screening. They can remove avoidable disruption and allow personnel to concentrate on genuinely security-relevant anomalies.
This development is reflected in the service portfolios of specialist contractors. In addition to passenger and baggage screening, providers increasingly offer passenger-flow management, assistance services, baggage handling support, parking management and other operational functions.
The critical point is integration. Passenger service must not be developed as a separate layer with little connection to the security organisation. Information about unusual crowd movements, abandoned baggage, blocked escape routes or disruption at checkpoints must reach the relevant security function quickly.

Private companies are a central part of the German model

Private security providers are not peripheral contractors within Germany’s aviation security system. They perform a substantial share of day-to-day operations, although their activities remain regulated and, in many areas, subject to direct public supervision.
Their tasks extend far beyond physical searches and X-ray image evaluation. The market includes several broad fields of activity.
Passenger and baggage screening covers travellers, cabin baggage and checked baggage, including secondary searches and explosive-trace testing. Companies such as Securitas Aviation describe portfolios spanning the operational areas covered by Sections 5, 8, 9 and 9a of the Aviation Security Act.
Access and vehicle controls involve checking employees, airline crews, suppliers, vehicles and goods before they enter sensitive areas. Providers also carry out boarding-pass and identity checks and protect transition points between public areas and the airside environment.
Apron and facility protection includes patrols, construction-site security, surveillance of operational areas, guarding parked aircraft and escorting external contractors. KÖTTER Aviation Security, for example, lists services ranging from apron protection and aircraft searches to controls of vehicles, persons, goods, cargo and mail.
Cargo security and consultancy cover screening services as well as support with security programmes, approval procedures and secure-supply-chain arrangements. Providers may assist businesses seeking recognition as known consignors or regulated agents.
Control-room and intervention services are relevant for airport-adjacent buildings, logistics areas and technical infrastructure. The German market includes certified alarm-receiving and service centres, mobile patrols and intervention units capable of supporting round-the-clock operations.
Training has also become a strategic business field. Specialist academies and certified training centres must cover legal requirements, new screening technology, changing methods of attack and behaviour under exceptional conditions.
The role of the contractor is therefore changing. Companies are no longer simply supplying personnel for individual checkpoints. They increasingly operate complete process sections within a highly regulated security system. The source report describes this broad private-sector contribution as a defining element of Germany’s aviation security architecture.

New threats are developing outside the checkpoint

The classic aviation security model is built around preventing dangerous items from reaching an aircraft. That objective remains essential, but an attacker no longer needs to defeat a passenger checkpoint to disrupt aviation.
Potential targets include IT networks, power supplies, baggage-handling equipment, fuel infrastructure, access systems, ground-handling operations and communications. Intruders may attempt to reach the airside area through fences, building sites or service entrances. Employees with legitimate access can be recruited, coerced or exploited for reconnaissance.
Germany tightened its Aviation Security Act in 2026 following repeated unauthorised entries into airport areas. Since 17 March 2026, deliberate unauthorised entry onto the airside area can be prosecuted as a criminal offence rather than being treated solely as an administrative violation.
The amendment reflects renewed attention to physical perimeter security. Yet fences and cameras alone are insufficient. Effective protection requires detection, rapid visual or technical verification, patrol capacity and a coordinated intervention procedure.
The security model must also account for insider risk. Background checks and access badges remain important, but they do not eliminate the possibility of compromised employees or misuse of legitimate credentials. Operators need clear access rights, event logging, rapid revocation procedures and the capacity to identify abnormal activity without creating uncontrolled surveillance systems.
At the same time, airport information technology and operational technology are becoming more closely connected. A cyberattack against an access-control server, baggage system or communications network may produce direct physical and operational consequences. The distinction between physical and digital security is therefore becoming less useful at the point of incident response.

Drones: from operational nuisance to security threat

The most rapidly developing part of the threat picture involves unmanned aircraft.
DFS recorded 225 drone-related disruptions in German airspace in 2025, up from 161 in 2024. DFS has suggested that part of the increase may be due to improved detection capabilities available to Federal Police units, meaning that more incidents are being identified rather than necessarily reflecting the full scale of growth in actual flights.
Not every drone sighting is malicious. Many incidents are likely to involve recreational users who misunderstand the rules, misjudge distances or deliberately ignore flight restrictions without intending to attack an airport.
For air traffic control, however, motivation is initially secondary. Once an unidentified object enters the vicinity of a runway or a protected flight path, it must be treated as a possible collision hazard.
The operational consequences can be substantial. Following a possible drone sighting at Munich Airport on 30 May 2026, approximately 20 inbound aircraft were diverted. Such decisions are expensive and disruptive, but the potential consequences of a collision leave airport and air-traffic authorities little room to take risks.
The threat spectrum can be divided into six broad scenarios.
Unintentional endangerment: A recreational or camera drone enters controlled airspace without any intention to cause an attack.
Deliberate disruption: A drone is used to suspend take-offs and landings, occupy emergency resources or cause economic damage.
Reconnaissance: Cameras, thermal imagers or other sensors collect information about security measures, aircraft movements, police activity or critical infrastructure.
Diversion: A visible drone draws security and police resources to one area while an intrusion or attack is prepared elsewhere.
Transport or delivery: A drone carries objects across fences, gates or controlled access points.
Direct attack: The drone itself carries explosives, incendiary material or another dangerous payload.
The final two scenarios fundamentally alter the risk assessment. They turn the drone from a disruption or observation platform into a means of bypassing conventional physical security.

Leipzig/Halle changes the assessment

During the night of 4 to 5 August 2026, a drone fitted with an explosive device and detonator was found near a runway at Leipzig/Halle Airport. Specialist officers rendered the device safe. Flight operations were temporarily interrupted, aircraft were diverted and Germany’s Federal Public Prosecutor General took over the investigation because of the seriousness of the case.
Federal Interior Minister Alexander Dobrindt described the incident as representing a new level of danger and referred to a possible hybrid attack scenario. At the time covered by the source report, responsibility and the precise intended target had not been conclusively established.
That uncertainty is important. A premature attribution to a particular state or non-state actor would not be supported by the available information. The security implications, however, are already clear.
Airports must no longer prepare only for drones whose presence creates a collision risk or interrupts operations. They must consider unmanned aircraft as potentially precise, remotely deployed carriers for an explosive or incendiary device.
Small drones can fly at low altitude, manoeuvre around obstacles and be launched at some distance from the target. Their size shortens detection and response times. Attackers may also adapt components, flight patterns or control systems to exploit known gaps in detection equipment.
This creates a difficult combination of operational, legal and technical questions. Authorities must determine whether an object is actually a drone, where it is heading, whether it is carrying a payload and which countermeasure can be used without creating an additional danger to aircraft, passengers, employees or nearby residents.

Germany has expanded its state counter-drone structures

Germany began reorganising its state counter-drone capabilities at the end of 2025.
A specialised Federal Police counter-drone unit entered service on 2 December 2025. A Joint Counter-Drone Centre involving federal and state authorities followed on 17 December. Its purpose is to consolidate information, support a common threat picture and improve strategic coordination between the Federal Police, the Federal Criminal Police Office, the Bundeswehr and state police forces.
According to the German government information cited in the report, the Federal Police unit is intended initially to employ around 130 personnel at several locations. A total of €100 million was allocated for its establishment and equipment. Sensitive locations, including international commercial airports, are also expected to receive detection and countermeasure systems.
The Second Act Amending the Aviation Security Act entered into force on 17 March 2026. It expanded the circumstances in which the armed forces may support the police. Under tightly restricted conditions and as a last resort, the Bundeswehr may use direct coercive measures against drones if the responsible police authorities cannot manage the danger, or can do so only with considerable difficulty.
The legal amendment expands the available state response, but it does not automatically resolve the operational problem. A drone incident requires several questions to be answered within minutes, and sometimes seconds:

• Is the object genuinely a drone?
• Where is it flying, and in which direction?
• Is a payload visible or technically detectable?
• Does it pose an immediate danger to an aircraft, runway or critical facility?
• Which authority has legal and operational responsibility?
• Which countermeasure is proportionate and safe?
• Can the aircraft, communications link and possible operator be identified in a form that supports a later criminal investigation?

Electronic jamming is not sufficient in every situation. A pre-programmed or autonomous platform may continue its route without a continuous radio link. Physical interception can cause the drone to crash uncontrollably or trigger a hazardous payload. The apparently simple instruction to “bring down the drone” therefore conceals a complex risk decision.

Counter-drone defence is a process, not a product

An effective counter-drone system requires a multi-stage operational chain.
The first stage is detection. Depending on the site, radar, radio-frequency sensors, optical cameras, thermal imaging and acoustic sensors may be combined. No single technology reliably covers every aircraft type, weather condition, flight profile and airport environment.
The second stage is verification. Birds, helicopters, authorised operational drones, reflections and other objects must not automatically be classified as hostile aircraft. Verification must nevertheless happen quickly enough to preserve a meaningful response window.
The third stage is assessment. Operators and authorities examine flight direction, altitude, speed, behaviour, possible payload and the asset at risk. This assessment must be shared immediately with air traffic control, the airport operations centre, the Federal Police or relevant state police force and the airport’s operational management.
Only then comes intervention. Measures may range from suspending individual flight movements and searching for the pilot to electronic or physical countermeasures. After the event, evidence must be secured, sensor data consolidated and decisions reviewed.
Counter-drone protection is therefore not a standalone piece of equipment. It is a command-and-control process connecting sensors, communications, legal assessment, operational authority, intervention and post-incident investigation.
This is particularly relevant to airport procurement. Buying a detection sensor without developing staffing, verification procedures, maintenance plans and escalation routes may generate alarms without producing an effective protective capability.

German security associations demand clearer rules

The serious incident at Leipzig/Halle prompted a joint intervention by two major German industry associations: the Bundesverband der Sicherheitswirtschaft, or BDSW, representing the wider security industry, and the Bundesverband der Luftsicherheitsunternehmen, or BDLS, representing aviation security companies.
Both associations described the incident as a clear warning to policymakers and as evidence that attacks involving unmanned aircraft have created a new challenge for critical-infrastructure protection.
“We are facing a new security-policy reality,” said Cornelius Toussaint, Vice-President of the BDSW and Chair of its Drone Committee. “Drones are now tools for espionage, sabotage and crime, and the existing legal framework is not sufficient to address this threat effectively.”
The associations argue that technologies for detecting, identifying and, where necessary, neutralising drones are already available. In their view, deployment is frequently restricted by absent, incomplete or unclear legal authority.
They also identify a lack of nationally uniform minimum standards. Germany currently has no single binding framework defining the level of drone detection and defence expected from every critical-infrastructure operator. This is especially significant in a federal system in which police responsibilities and operational structures can differ between the national level and the individual states.

Five demands directed at federal and state governments

BDSW and BDLS have called on the federal government and the German states to establish a clear and nationally consistent framework without delay.
First, they want binding minimum standards for drone detection and defence at critical-infrastructure sites. They argue that these requirements should be integrated in particular into Germany’s planned KRITIS-Dachgesetz, or Critical Infrastructure Umbrella Act.
“KRITIS” is the German abbreviation commonly used for critical infrastructure. The proposed umbrella legislation is intended to create cross-sector requirements for the physical resilience of essential services. For international readers, its significance lies in the attempt to move beyond sector-specific rules and create a more consistent national baseline for operators.
Second, the associations want operator responsibility to be defined clearly. Airport and infrastructure operators need to know what equipment, risk analysis, staffing and response arrangements they are legally expected to provide.
Third, they call for legally secure powers to intercept or neutralise dangerous drones. Detection without the ability to escalate a confirmed threat leaves a potentially critical operational gap.
Fourth, they propose stronger national coordination between operators, public authorities and the private security industry.
Fifth, they want the introduction of new detection and countermeasure technologies to be accelerated.
European requirements for the resilience of critical entities are also increasing the responsibility of operators to identify and manage drone risks systematically. From the associations’ perspective, mandatory risk assessments must be accompanied by legislation that permits the resulting technical and organisational measures to be implemented in practice.

Private security providers want a formal role in the defence architecture

BDSW and BDLS argue that a comprehensive national protection system cannot be delivered by specialist police units alone.
Toussaint points to more than 30,000 critical-infrastructure operators with an estimated 150,000 sites in Germany. “Without the systematic integration of the security industry, there will be no comprehensive protection,” he said.
The scale is central to the associations’ argument. State counter-drone specialists cannot be permanently present at every airport, energy installation, logistics centre, industrial plant, military site or other sensitive facility.
Private security companies, by contrast, already operate continuously at many of these locations. They protect airports, industrial plants, energy suppliers, logistics hubs, Bundeswehr facilities and other critical infrastructure. According to the associations, their members possess trained personnel, established command structures, technical systems and operational experience.
With appropriate legal authorisation, they believe private providers could assume defined duties in drone detection and, within clearly regulated limits, support counter-drone intervention.
Their permanent presence offers a practical advantage. Existing control rooms, patrol structures, alarm-management processes and intervention teams could be expanded to include drone-related tasks. A trained private operator could verify sensor alerts, assess basic flight behaviour, notify the responsible police authority and activate pre-agreed protection measures before a state specialist unit arrives.
This would not transfer sovereign responsibility for counter-drone action wholesale to private companies. Both associations emphasise that drone defence remains a responsibility of the state as a whole. Police and other security authorities would still need to work closely with operators and contractors, particularly where coercive measures or criminal investigations are involved.
The proposed model is therefore tiered. Prevention, detection, verification and initial assessment may be performed at site level. Higher-risk intervention and the use of legally sensitive countermeasures would remain subject to clear authority, qualification and command arrangements.

No room for improvised responses

The Leipzig/Halle incident also demonstrates the danger of relying on ad hoc action by untrained staff.
A serious drone situation may involve an unknown flight path, an unclear payload and only a short time before the device reaches a runway, aircraft or technical installation. An incorrect intervention can worsen the danger. A drone carrying explosives must not simply be approached, moved or forced down without specialist assessment.
Detection, threat evaluation and any legally permitted intervention therefore belong in the hands of qualified personnel working within a defined command structure.
The private security industry maintains that it can contribute the personnel and operational capacity required, but only if training, certification, technical standards and powers are clearly regulated. That qualification is important. Existing experience in guarding or passenger screening does not automatically make a person a counter-drone specialist.
Additional competence is required in interpreting radar or radio-frequency alerts, identifying flight behaviour, assessing visible payloads, producing reliable reports and working with air traffic control, police and explosive-ordnance specialists.

What German airports need next

The developing threat picture points to several practical priorities.

Nationally consistent minimum standards

Technology will not solve the problem if intervention thresholds, reporting routes and operator duties remain inconsistent or unclear.
Airports and other critical-infrastructure sites need binding minimum requirements for detection, verification, documentation and escalation. These standards should align the proposed Critical Infrastructure Umbrella Act with aviation security legislation and the respective responsibilities of federal and state authorities.
Minimum standards should not force every site to buy identical equipment. A major international hub and a smaller regional airport have different risk profiles. The objective should be a consistent performance and response baseline rather than a single hardware specification.

A common operating picture

Data from drone-detection systems, video surveillance, access control, airport operations and air traffic control must be brought together in a common operational view.
Separate control rooms and isolated software platforms lengthen response times. They also make it more difficult to identify a coordinated incident. A drone may be used as a distraction while someone approaches a perimeter fence, tests an access point or interferes with a technical system.
The wider security value lies in correlation. A radar detection gains significance when it coincides with a radio-frequency alert, an unusual vehicle movement and a camera image from a sensitive area. Without integration, each signal may remain below the threshold for action.

Defined alarm and decision chains

Different scenarios require clear thresholds.
When is a sighting considered credible? Who verifies it? At what point are arrivals suspended? Who can order the evacuation of an area? When are specialist police or explosive-ordnance teams requested? Which measures can an airport operator or private contractor initiate independently?
These decisions cannot be invented during the incident. They must be documented, assigned to named functions and exercised regularly.

Integration of ground and airspace security

A drone incident should automatically increase attention at fences, vehicle entrances, supplier access points and technical operating areas.
This does not mean that every drone alert is part of a sophisticated attack. It means that security organisations should not assume it is an isolated aviation problem until the available information supports that conclusion.
A common operating procedure should consider the possibility of diversion, reconnaissance and multi-vector attack.

Protection against hostile reconnaissance

Not every drone is intended to strike immediately.
Images of police positions, thermal profiles of buildings, staffing patterns, aircraft movements or ground-handling routines may support later sabotage. Repeated flight paths and recurring observations should therefore be analysed over time and compared with other security information.
A purely event-based system may close each incident once the drone disappears. An intelligence-led approach asks whether the event forms part of a wider pattern.

Continuous joint exercises

Airport security staff, fire services, control rooms, air traffic control, police, airlines and explosive-ordnance units must train together.
Exercises should cover more than a simple sighting. Scenarios should include crashed aircraft, suspicious payloads, multiple simultaneous drones, loss of communications, autonomous flight, attempted diversion and the use of a drone to cover a ground intrusion.
Joint training exposes gaps that individual organisations may not see. These may include incompatible terminology, unclear authority, missing telephone numbers, delays in sharing images or uncertainty over who records the event for later investigation.

Lifecycle planning instead of one-off procurement

Drone and counter-drone technology develops rapidly.
Procurement must therefore cover software updates, sensor upgrades, maintenance, new threat libraries, training and periodic effectiveness testing. A system that performs well when commissioned may develop major detection gaps a few years later as commercial drone designs and operating methods change.
A lifecycle approach also reduces the risk of expensive equipment becoming an isolated demonstration system rather than an operational capability.

People remain the decisive security factor

Despite the growing importance of detection and automation, aviation security still depends on people who recognise anomalies, interpret information correctly and act under pressure.
Germany needs aviation security officers, control-room operators, technicians, instructors, cybersecurity specialists, explosives experts, threat analysts and counter-drone personnel. Many of these functions must be staffed continuously and performed under demanding concentration requirements.
The source report notes that training and staff development have become increasingly central to provider strategies. FraSec, for example, describes an eight-week qualification programme for career changers followed by an official examination. I-SEC emphasises recurrent training in certified facilities.
Counter-drone protection adds another layer of competence. Personnel must be able to validate sensor information, understand flight profiles, recognise potential payload indicators, provide accurate information to public authorities and operate within coordinated intervention chains.
Where private providers are already permanently present at airports and other critical-infrastructure sites, they may be well positioned to assume some of these duties. The prerequisites, however, are unambiguous: formal training, certification, suitable equipment, quality assurance and a legally defined role.
This also affects procurement. Public authorities and operators cannot assess aviation security contracts solely on the basis of the lowest short-term price. Training quality, staff retention, management capability, reserve staffing, technical competence and documented process performance are directly relevant to security outcomes.
A workforce with high turnover, inadequate supervision or little time for recurrent instruction can undermine even advanced technical systems. Conversely, well-trained personnel can identify weak signals and procedural failures that automation misses.
Germany is moving towards a networked resilience model
Germany has a dense body of regulation, established public institutions, specialised contractors and advanced screening technology. The system manages millions of passenger journeys and thousands of daily aircraft movements.
Its strength lies in layered protection and formal accountability. Its difficulty lies in the number of organisations that must coordinate across federal, state, public and private boundaries.

The current threat environment requires that architecture to evolve. Passenger screening remains a core function, but it is no longer the only centre of gravity. Secure supply chains, vetted personnel, resilient IT, perimeter protection, integrated control rooms and surveillance of low-altitude airspace are becoming equally important elements of airport protection.
The Leipzig/Halle incident makes that development impossible to ignore. Unmanned systems can disrupt operations and gather intelligence, but they may also carry an attack device. Aviation security cannot answer that threat with one sensor, one control room or one isolated public authority.

Germany needs a coordinated system capable of recognising threats early, consolidating information in real time and enabling clear decisions. Passenger service, operational performance and security should not be treated as competing interests. A well-run airport protects people precisely because its procedures remain understandable, stable and controllable under pressure.
For BDSW and BDLS, Leipzig/Halle must become a turning point rather than an exceptional case that is gradually forgotten. Their argument is that the technologies and much of the operational expertise already exist. What remains incomplete is the national framework that connects equipment, operators, public authorities and qualified private providers.
That framework will need consistent standards, clear responsibility, legally secure powers and a scalable division of labour. It must also preserve public control over coercive action and prevent counter-drone activity from becoming a patchwork of uncoordinated local responses.
Germany’s aviation security debate is therefore no longer only about what happens at the checkpoint. It is becoming a broader discussion about national resilience: how a federal state protects distributed critical infrastructure against threats that move rapidly across physical, digital and jurisdictional boundaries.
The next stage will be judged not by the number of sensors installed, but by whether Germany can turn detection into verified information, verified information into a lawful decision and that decision into a fast, proportionate and effective response.

Sources and technical foundations

• German Federal Police: Information on the Federal Police’s aviation security responsibilities, its role at German airports and the development of the new counter-drone structures.
• DFS Deutsche Flugsicherung
• 2025 German air-traffic review, including 3.071 million controlled aircraft movements and 225 drone-related disruptions, compared with 161 in 2024.
• Federal Statistical Office of Germany: 2025 aviation statistics showing approximately 207.2 million passengers at Germany’s main commercial airports.
• European Union aviation security legislation: Regulation (EC) No 300/2008 on common rules in the field of civil aviation security and Implementing Regulation (EU) 2015/1998 containing detailed measures for the implementation of the common basic standards.
• German Federal Aviation Office: Information on the secure air-cargo supply chain, regulated agents, known consignors and the approval and supervision of participating companies.
• Leipzig/Halle drone incident: Reporting cited in the source document from Reuters, Tagesschau and MDR concerning the discovery and safe disposal of a drone equipped with an explosive device and detonator, and the subsequent involvement of the Federal Public Prosecutor General on 5 and 6 August 2026.
• DSW and BDLS joint statement, 6 August 2026: “Security associations call for decisive action and rapid legislation for effective counter-drone defence.” The statement sets out demands for national minimum standards, clearly defined operator responsibility, legally secure countermeasure powers, national coordination and the systematic inclusion of qualified private security providers.
• Market and service overview: Company and capability profiles from the Who is Who der Luftsicherheit, DSD 2/2026, including Securitas Aviation, DSW, KÖTTER Aviation Security, CEIA, All Service, FraSec and I-SEC.

The report’s central conclusion reflects the attached German source: the country’s established aviation security system remains highly capable, but it must expand beyond the checkpoint and develop into an integrated resilience architecture linking supply chains, personnel, IT systems, airport perimeters, control rooms and low-altitude airspace.

[DCM]