The Guidance Named the Category. It Did Not Write the Spec.

Something changed in defence thinking between 2024 and 2026, and it changed quickly. For years, physical hardening of fixed assets was treated as the unglamorous option — the thing you did when you could not afford sensors and interceptors. That position has reversed.

On 30 January 2026 the US Joint Interagency Task Force 401, the body established in August 2025 to coordinate counter-drone efforts, published a three-page guide to the physical protection of critical infrastructure. A wider counter-UAS handbook for non-military readers followed later in the year. The framework is compact enough to remember: Harden, Obscure, Perimeter.

Under hardening, the guide names permanent or semi-permanent structural shielding, overhead netting or tensioned cables, closing retractable roofs, and lightweight wire or mesh to create flight hazards. The stated logic is that even modest obstacles deter low-cost drones and force higher-risk flight profiles — and that a physical obstacle needs no power, no sensor chain, and no operator making a correct decision in four seconds. It works the same on the thousandth approach as on the first.

Publicly reported satellite imagery through 2025 and 2026 shows the same conclusion being reached independently in several places — large overhead frames appearing above fuel storage at energy and aviation sites across multiple countries. The direction of travel is not in dispute.

What is worth noticing is how the guide ends. JIATF-401 states plainly that the document is not a comprehensive or universally applicable standard, and that its recommendations should not replace a professional assessment tailored to the specific asset and threat environment. That is not boilerplate. It is the authors marking exactly where their document stops and engineering has to begin.

The guidance tells an operator what category of measure to adopt. It does not tell them what standoff distance to design for, what impact energy the barrier must absorb, or how to mount any of it above a tank that is full and running. By its own statement, it was never meant to.

Three Pillars, and a Tank Farm Has One

HOP is built for a facility manager with a fence, a car park and surrounding public ground. Apply it honestly to a bulk fuel terminal and two of the three pillars fall away.

Obscuration assumes an asset that can be hidden or visually confused — tenting over generators, scrims across sightlines, visual clutter to break up an overhead view. A 40-metre storage tank cannot be concealed, is mapped in every public satellite dataset, and its geometry is its identity. Decoys are meaningless when the real assets are a fixed grid of identical cylinders.

Perimeter thinking assumes control over ground the operator does not own. The guide notes commercial drones are typically flown from one to three miles out, and its measures — layered outward perimeters, standoff patrols anticipating ground control stations, temporary checkpoints, training officers to spot operator behaviour — belong to police forces and national authorities. A terminal manager can secure the fence line. They cannot patrol the district.

Hardening is the one pillar that sits entirely inside the operator's own perimeter, budget and decision authority. It is the only layer they can specify, procure, install and own outright. For fuel storage, HOP is not a menu of three options — it is one option and two things to lobby the state about.

Which raises the stakes on getting the hardening right, because there is no second pillar to compensate for a weak one.

Why the Fuel Tank Is the Hardest Case

Of all the assets the guidance addresses, an above-ground fuel storage tank is close to the worst case for a straightforward reading of "install overhead netting." Four constraints collide.

1. It is a hazardous classified zone

The same constraint applies at much smaller scale to diesel storage serving data centres, hospitals and ports, where taking the backup fuel reserve out of service to protect it defeats the purpose of holding it.

Welding, cutting and grinding on or near a tank in service is hot work. Doing it properly means shutdown, product transfer, cleaning, gas-freeing, permits and gas testing throughout. For a terminal running at capacity, taking a tank out of service for weeks is frequently a larger commercial loss than the risk being mitigated.

2. The tank cannot carry the structure

A tank shell and roof are engineered for internal pressure, product head and their own weight. They are not designed as foundations for an external framework, and they are certainly not designed to receive impact loads transmitted through one. Any structure bolted or welded to the shell introduces stress concentrations, restrains thermal movement the tank was designed to accommodate freely, and creates corrosion initiation points at every attachment.

3. The roof is the weakest surface, and the one exposed

Tank shells are comparatively thick. Roof plate is thin by design — in fixed-roof tanks the roof-to-shell joint is intentionally the weakest link so that overpressure vents upward rather than rupturing the shell. That design logic is sound for internal overpressure. It also means the upper zone is the least tolerant surface to any external event.

4. Gulf environmental loads are not incidental

Any structure standing over a tank for decades in this region faces sustained wind loading with uplift on a large horizontal surface, seismic requirements depending on site classification, chloride-laden coastal air, and a daily thermal cycle that works every connection. A frame that was adequate as a temporary field measure will not survive twenty years of that without a corrosion and fatigue strategy designed in from the start.

From Category to Specification: Eight Parameters

Turning "overhead netting" into something an engineer can stamp, a procurement team can tender and an insurer can assess requires the following to be stated numerically, not descriptively.

  1. Standoff distanceVertical clearance between the barrier plane and the roof surface. This is the single parameter that determines whether energy is dissipated away from the asset or against it.
  2. Absorbed impact energyStated in kilojoules against a declared threat class, with the assumptions written down. A number without a threat class attached is marketing, not engineering.
  3. Mesh break loadIndependently tested, with a laboratory named and a report available. Our own chainmail mesh is tested at Corderie Dor (Chassieu, France) at a 45-tonne single-ring break load, with system energy absorption above 5,000 kJ.
  4. Structural independenceSeparate foundations, zero load transfer to the tank. This is what allows the protected tank to keep its original design basis and its certification intact.
  5. Connection methodBolted assembly throughout, so that installation involves no hot work and the tank stays in operation. On a live terminal this is usually the constraint that decides whether a project is feasible at all.
  6. Corrosion protection and service lifeCoating system, material specification and a stated design life. Ours is specified at 50 years for the mesh element.
  7. Environmental load casesWind including uplift, seismic per site classification, thermal cycling, and the accumulated fatigue those impose on connections over the design life.
  8. Retained accessThe structure must not block roof access for inspection, gauging, maintenance or emergency response. A protection system that prevents statutory inspection has traded one compliance problem for another.

The Comparison, Stated Plainly

This is not an argument that improvised structures are worthless. Under time pressure, an improvised frame in place next month may well beat an engineered system delivered next year. It is an argument that the two are different products with different risk profiles, and that operators should know which one they are buying.

ParameterImprovised cope cageEngineered mesh canopy
Declared threat class✗ Usually none✓ Stated with assumptions
Structural calculation~ Ad hoc✓ Full load case set
Independent test data✗ Rare✓ Laboratory certified
Load transfer to tank✗ Often present✓ Zero — separate foundations
Hot work at installation✗ Typically required✓ None — bolted assembly
Tank stays in operation~ Case by case✓ Yes
Design service life~ Undefined✓ Specified, 50 years for mesh
Roof access retained~ Often compromised✓ Designed in
Insurable / auditable basis✗ Difficult✓ Documented
Speed to first installation✓ Fast~ 4–6 weeks per tank

What Passive Protection Does Not Do

Being precise about the boundary is part of the engineering, and the absence of that precision is what makes most of this category difficult to evaluate.

What it does do is work continuously, without power, without staffing and without a decision being made correctly under pressure — including against debris from a successful intercept, which is a real damage mechanism that active systems by their nature cannot address.

Eight Questions to Ask Any Supplier

These are the questions we would want asked of us, and they separate an engineered proposal from a fabrication quote in about ten minutes.

Frequently Asked Questions

What is a cope cage on a fuel storage tank?
An improvised overhead frame — welded bar, scaffold tube or wire mesh — mounted above an asset so that an incoming munition functions at a standoff distance rather than against the surface. The term comes from field-improvised vehicle armour and has since been applied to fixed infrastructure. It describes an intent, not a standard.
What does current defence guidance recommend for critical infrastructure?
JIATF-401 published a three-page guide to physical protection of critical infrastructure on 30 January 2026, organised around Harden, Obscure, Perimeter. Hardening measures named include structural shielding, overhead netting or tensioned cables, closing retractable roofs, and lightweight wire or mesh. The guide explicitly states it is not a universally applicable standard and does not replace an assessment of the specific asset.
Why not simply weld a frame onto an existing tank?
Welding on a tank in service is hot work in a hazardous zone and normally requires shutdown and gas-freeing. The shell and roof are not designed to carry an external structure or impact loads. And every attachment creates a stress concentration and corrosion initiation point outside the tank's original design basis.
How long does an engineered system take to install?
For a 10,000 m³ tank, four to six weeks covering foundations, columns, ring beam, dome assembly and mesh installation. The tank remains in normal operation throughout, because the assembly is bolted and no hot work is involved.
Does this replace air defence?
No. It addresses residual risk at the asset, continuously and without power or operators. Active defence is a state responsibility. Passive hardening is the layer an individual operator can specify, procure and own.

Referenced material

Start With One Tank

We assess your highest-risk asset and develop a protection concept with the parameters above stated numerically. No hot work. No shutdown. Confidential engagement.

Request Assessment