The Guidance Named the Category. It Did Not Write the Spec.
Something changed in defence thinking between 2024 and 2026, and it changed quickly. For years, physical hardening of fixed assets was treated as the unglamorous option — the thing you did when you could not afford sensors and interceptors. That position has reversed.
In February 2026 the US Joint Interagency Task Force 401, the body established in August 2025 to coordinate counter-drone efforts, published a short document on the physical protection of critical infrastructure. A wider handbook for non-military readers followed in July 2026. The framework is compact enough to remember: Harden, Obscure, Perimeter.
Under hardening, the guidance names structural shielding, overhead netting, tensioned cables, barriers and retractable roofs. The logic is that a physical obstacle does not need power, does not need a sensor chain, does not need an operator to make a correct decision in four seconds, and cannot be saturated. It works the same on the thousandth approach as on the first.
Publicly reported satellite imagery through 2025 and 2026 shows the same conclusion being reached independently in several places — large overhead frames appearing above fuel storage at energy and aviation sites across multiple countries. The direction of travel is not in dispute.
The guidance tells an operator what category of measure to adopt. It does not tell them what standoff distance to design for, what impact energy the barrier must absorb, or how to mount any of it above a tank that is full and running.
Why the Fuel Tank Is the Hardest Case
Of all the assets the guidance addresses, an above-ground fuel storage tank is close to the worst case for a straightforward reading of "install overhead netting." Four constraints collide.
1. It is a hazardous classified zone
Welding, cutting and grinding on or near a tank in service is hot work. Doing it properly means shutdown, product transfer, cleaning, gas-freeing, permits and gas testing throughout. For a terminal running at capacity, taking a tank out of service for weeks is frequently a larger commercial loss than the risk being mitigated.
2. The tank cannot carry the structure
A tank shell and roof are engineered for internal pressure, product head and their own weight. They are not designed as foundations for an external framework, and they are certainly not designed to receive impact loads transmitted through one. Any structure bolted or welded to the shell introduces stress concentrations, restrains thermal movement the tank was designed to accommodate freely, and creates corrosion initiation points at every attachment.
3. The roof is the weakest surface, and the one exposed
Tank shells are comparatively thick. Roof plate is thin by design — in fixed-roof tanks the roof-to-shell joint is intentionally the weakest link so that overpressure vents upward rather than rupturing the shell. That design logic is sound for internal overpressure. It also means the upper zone is the least tolerant surface to any external event.
4. Gulf environmental loads are not incidental
Any structure standing over a tank for decades in this region faces sustained wind loading with uplift on a large horizontal surface, seismic requirements depending on site classification, chloride-laden coastal air, and a daily thermal cycle that works every connection. A frame that was adequate as a temporary field measure will not survive twenty years of that without a corrosion and fatigue strategy designed in from the start.
From Category to Specification: Eight Parameters
Turning "overhead netting" into something an engineer can stamp, a procurement team can tender and an insurer can assess requires the following to be stated numerically, not descriptively.
- Standoff distanceVertical clearance between the barrier plane and the roof surface. This is the single parameter that determines whether energy is dissipated away from the asset or against it.
- Absorbed impact energyStated in kilojoules against a declared threat class, with the assumptions written down. A number without a threat class attached is marketing, not engineering.
- Mesh break loadIndependently tested, with a laboratory named and a report available. Our own chainmail mesh is tested at Corderie Dor (Chassieu, France) at a 45-tonne single-ring break load, with system energy absorption above 5,000 kJ.
- Structural independenceSeparate foundations, zero load transfer to the tank. This is what allows the protected tank to keep its original design basis and its certification intact.
- Connection methodBolted assembly throughout, so that installation involves no hot work and the tank stays in operation. On a live terminal this is usually the constraint that decides whether a project is feasible at all.
- Corrosion protection and service lifeCoating system, material specification and a stated design life. Ours is specified at 50 years for the mesh element.
- Environmental load casesWind including uplift, seismic per site classification, thermal cycling, and the accumulated fatigue those impose on connections over the design life.
- Retained accessThe structure must not block roof access for inspection, gauging, maintenance or emergency response. A protection system that prevents statutory inspection has traded one compliance problem for another.
The Comparison, Stated Plainly
This is not an argument that improvised structures are worthless. Under time pressure, an improvised frame in place next month may well beat an engineered system delivered next year. It is an argument that the two are different products with different risk profiles, and that operators should know which one they are buying.
| Parameter | Improvised cope cage | Engineered mesh canopy |
|---|---|---|
| Declared threat class | ✗ Usually none | ✓ Stated with assumptions |
| Structural calculation | ~ Ad hoc | ✓ Full load case set |
| Independent test data | ✗ Rare | ✓ Laboratory certified |
| Load transfer to tank | ✗ Often present | ✓ Zero — separate foundations |
| Hot work at installation | ✗ Typically required | ✓ None — bolted assembly |
| Tank stays in operation | ~ Case by case | ✓ Yes |
| Design service life | ~ Undefined | ✓ Specified, 50 years for mesh |
| Roof access retained | ~ Often compromised | ✓ Designed in |
| Insurable / auditable basis | ✗ Difficult | ✓ Documented |
| Speed to first installation | ✓ Fast | ~ 4–6 weeks per tank |
What Passive Protection Does Not Do
Being precise about the boundary is part of the engineering, and the absence of that precision is what makes most of this category difficult to evaluate.
- It does not detect, track, jam or intercept anything. There are no sensors and no electronics in the protective structure.
- It is not a fire suppression system. It reduces the probability and severity of an upper-zone event; it does not extinguish what does occur.
- It does not replace national air defence, which is a state function and not something a terminal operator can procure.
- It performs against declared design loads and threat classes. No serious supplier offers a blanket guarantee against every conceivable event, and an operator should treat one as a warning sign.
What it does do is work continuously, without power, without staffing and without a decision being made correctly under pressure — including against debris from a successful intercept, which is a real damage mechanism that active systems by their nature cannot address.
Eight Questions to Ask Any Supplier
These are the questions we would want asked of us, and they separate an engineered proposal from a fabrication quote in about ten minutes.
- What threat class is this designed against, and what assumptions sit behind that class?
- What energy does the system absorb, and where is the test report that establishes it?
- Which laboratory tested the mesh or barrier element, and can we see the certificate?
- Does any load reach the tank shell or roof — under dead load, wind uplift, or impact?
- Is hot work required at any stage, and does the tank need to come out of service?
- What is the design service life, and what is the corrosion protection specification behind it?
- How is roof access for inspection, gauging and emergency response retained?
- Who performs the structural calculations, and will the calculation package be delivered to us?
Frequently Asked Questions
Referenced material
- Joint Interagency Task Force 401, guidance on physical protection of critical infrastructure, February 2026.
- Joint Interagency Task Force 401, counter-UAS handbook for non-military readers, July 2026.
- Corderie Dor laboratory (Chassieu, France) — mesh break load testing, 45 tonnes single ring.
We assess your highest-risk asset and develop a protection concept with the parameters above stated numerically. No hot work. No shutdown. Confidential engagement.
Request Assessment