DroneShield vs. Dedrone vs. Fortem: Counter-UAS Security Comparison for Critical Infrastructure
Reach 50,000+ security professionals
Sponsor a newsletter slot and put your brand in front of CISOs, engineers, and IT decision-makers.
Drones represent a physical threat with cyber characteristics: they can carry sensors that capture data from networks and operations, they can deliver payloads that physically or electronically attack infrastructure, and their own control systems are vulnerable to GPS spoofing and RF interference. For critical infrastructure operators, the first decision is what detection capability is needed -- and what can legally be done once a threat is detected. For the broader physical-cyber security context that includes OT network protection alongside physical access controls, see this OT/ICS security best practices guide.
Detection Modalities: What Each Platform Sees
C-UAS detection uses four primary modalities, with meaningful differences in coverage, false positive rate, and integration complexity:
RF detection (passive): Monitors radio frequency spectrum for drone control signals and telemetry. Can identify specific drone models and their controllers from RF signatures. Works at range (up to 5km for some systems) and in all weather. Cannot detect drones in autonomous (pre-programmed) flight with no active RF link. Dedrone specializes in this modality; DroneShield also offers strong RF detection.
Radar: Active radar detects the physical profile and motion of a drone. Can detect autonomous drones with no RF link. Range and accuracy depend on drone size, materials, and flight profile; small consumer drones can be difficult to distinguish from birds at range. Fortem's TrueView radar and DroneShield's RadarZero are the leading commercial options.
Acoustic (passive): Microphone arrays detect the distinctive motor and propeller audio signature of drones. Short range (typically under 500m); highly dependent on ambient noise environment. Works in all weather; useful as a secondary confirmation modality. DroneShield's Acusense is the leading commercial acoustic system.
Optical (passive): Camera systems (EO/IR) identify and track drones visually. Requires visual line of sight; limited by weather, distance, and drone size. Used for classification and identification after initial detection by RF or radar. All three vendors integrate optical sensors as part of their detection stack.
Practical multi-layer approach: For critical infrastructure, the recommended architecture uses radar for initial detection and cueing (including autonomous drones), RF for identification and controller location, and optical for visual confirmation. Single-modality systems have higher false positive rates and blind spots.
DroneShield: Broad Modality Coverage with Military Pedigree
DroneShield is an Australian-listed company with the broadest modality coverage of the three vendors. Its product portfolio includes:
Detection:
- RFOne: RF spectrum analysis sensor
- RadarZero: millimeter-wave radar
- Acusense: acoustic array
- DroneSentry: integrated multi-sensor ground station (RF, radar, acoustic, optical)
Interdiction:
- DroneGun: handheld RF jammer that disrupts the drone's control link, causing it to land or return-to-home
- DroneGun Mk4: vehicle-mounted version
- RfPatrol: wearable personal RF jamming system
Customer base: DroneShield has strong military and government contracts in the US, Australia, Ukraine (battlefield C-UAS), and other NATO countries.
Private sector limitations: DroneShield's interdiction hardware (DroneGun) uses RF jamming that is federally prohibited for private sector use in the US without specific authorization. Private sector customers in the US can purchase and deploy DroneShield detection systems; interdiction hardware sales to US private sector customers require coordination with legal and export control compliance teams.
Integration: DroneShield integrates with existing video management systems (VMS), PSIM platforms, and physical security information management via APIs. It supports alert delivery to security operation centers through standard SIEM integration.
Briefings like this, every morning before 9am.
Threat intel, active CVEs, and campaign alerts, distilled for practitioners. 50,000+ subscribers. No noise.
Dedrone: RF-Focused Detection and Commercial Market Leader
Dedrone was acquired by Axon (maker of TASER and law enforcement technology) in 2024. The acquisition signals Dedrone's focus on the law enforcement and public safety market, though critical infrastructure operators remain a significant segment.
DedroneTracker: Dedrone's core product is DedroneTracker, an RF spectrum monitoring platform. It monitors 2.4 GHz, 5.8 GHz, and proprietary control frequencies and uses a drone database (updated continuously) to identify drone models and their DJI, Autel, Skydio, or FPV controller types from RF signatures.
Strengths:
- Large RF signature database; identifies a broader range of commercial drone models than competitors
- Cloud-connected analysis: signatures are updated centrally and pushed to deployed sensors
- Controller detection: can identify the location of the drone's controller (the pilot), not just the drone itself, which is critical for law enforcement response
- Integration with Axon ecosystem: for law enforcement customers, tight integration with Axon camera and evidence management systems
Limitations:
- Pure RF detection; no native radar. Autonomous drones (no RF link active) are not detected by DedroneTracker without additional sensors
- Interdiction is not part of Dedrone's commercial product; detection-only system
Integration: Dedrone integrates with PSIM platforms, security cameras, and access control systems. Its REST API allows integration with existing security operations workflows.
Fortem: Radar-Centric with Physical Interdiction
Fortem Technologies differentiates by building its platform around radar rather than RF detection, and by offering a physical interdiction system that does not rely on RF jamming.
TrueView Radar: Fortem's TrueView is a compact phased-array radar designed specifically for drone detection. It is optimized to detect small, slow-moving targets (drones) that conventional air traffic control radar misses. TrueView can track multiple targets simultaneously and feed tracking data to the SkyDome software platform.
DroneHunter: Fortem's interdiction system is a counter-drone drone: DroneHunter autonomously tracks and intercepts an unauthorized drone, then fires a net that physically captures it. This physical interception does not use RF jamming, which means it does not violate FCC regulations on RF jamming and may be legally available to private sector operators in contexts where RF jamming is prohibited.
Legal advantage for private sector: Because DroneHunter uses physical interception rather than RF jamming, it may be operable by private sector entities without the specific federal authority required for RF jamming. However, questions about airspace law (unauthorized drone interception) and property law (capturing a drone owned by a third party) must be addressed through legal analysis before deployment. The FAA has not issued comprehensive guidance on private sector physical drone interception.
SkyDome platform: Fortem's SkyDome software integrates radar, optical, and third-party sensor data into a unified airspace picture with drone identification, tracking, and alert management.
Limitations: Fortem does not offer RF detection natively; RF sensors from third parties can be integrated into SkyDome but are not Fortem's core capability. Pure radar-based detection has higher false positive rates from birds in some environments.
Legal Authority for C-UAS Interdiction
The most significant constraint on C-UAS deployment for private sector critical infrastructure operators is the legal authority gap: detection is unrestricted, but interdiction is tightly regulated.
What is legally available to all operators:
- RF detection (passive monitoring) -- no restrictions
- Radar detection (active radar requires FCC license in some frequency bands)
- Acoustic and optical detection -- no restrictions
- Alerting law enforcement or airport control -- encouraged
What requires specific federal authority:
- RF jamming (disrupting the drone's control link): requires DHS or DOD authorization under 6 USC 124n / 10 USC 130i; not available to private sector operators without a formal coordination agreement
- GPS/GNSS spoofing: same authority requirement as RF jamming
- Cyber attack on the drone's control system: same authority requirement
- Kinetic interdiction (physical destruction by shooting): subject to state laws on discharging firearms, FAA regulations on shooting at aircraft, and federal aviation safety laws
Physical interception (net capture): The legal status of DroneHunter-style physical interception varies by jurisdiction and has not been tested in court. It avoids FCC RF jamming regulations but raises FAA questions about unauthorized operation in airspace and property law questions about capturing third-party property.
Practical approach: Most private sector critical infrastructure operators deploy detection-only systems and have pre-planned procedures for contacting law enforcement and their sector ISAC when an unauthorized drone is detected. The detection data (drone model, controller location, flight path) is shared with law enforcement to support identification and legal response.
Integration with Physical Security Infrastructure
C-UAS systems function as a layer within a broader physical security architecture. Integration points:
Video Management System (VMS): All three vendors support integration with leading VMS platforms (Milestone, Genetec, Avigilon). When a drone is detected, the C-UAS system can automatically pan-tilt-zoom cameras to track it and display the feed in the security operations center.
Physical Security Information Management (PSIM): C-UAS alerts integrate with PSIM platforms (CNL, Qognify) to create unified security event management workflows that include drone incidents alongside access control and intrusion detection events.
SIEM integration: Drone detection events can be forwarded to SIEM platforms (Splunk, Microsoft Sentinel) as security events. For critical infrastructure with air-gapped OT networks, drone incidents are physical access events that may correlate with cyber incidents occurring simultaneously.
Site geofencing: All three vendors support geofence configuration: defined zones (the facility perimeter, exclusion zones around critical equipment) with configurable alert thresholds. A drone entering the facility perimeter triggers a different alert than a drone 500m away.
Deployment architecture: Sensor placement requires a site survey. RF sensors cover large areas but have angular ambiguity; radar provides precise tracking but requires careful placement to minimize ground clutter. For large facilities, a phased deployment starting with the highest-risk perimeter areas allows the organization to demonstrate value before full-site coverage.
The bottom line
DroneShield offers the broadest modality coverage and is the best choice for high-security deployments (government, military, international sites) where interdiction authority may be available. Dedrone is the best choice for commercial critical infrastructure operators who need RF detection with the largest drone signature database and the simplest integration path. Fortem is the best choice for environments where RF jamming is prohibited or legally uncertain, or where physical interception capability is a requirement. For all three, private sector operators in the US should consult legal counsel before deploying any interdiction capability; detection-only deployment with law enforcement coordination procedures is the legally safe baseline. For the OT network security controls that complement physical C-UAS deployment at industrial sites, see this OT/ICS platform comparison covering Claroty, Dragos, and Nozomi.
Frequently asked questions
Can private sector operators legally jam drones in the US?
No. RF jamming is federally prohibited for private sector operators under 47 USC 333 (Communications Act). Using a DroneGun or any RF jamming device to disable a drone requires specific federal authority granted to DHS (6 USC 124n) or DOD (10 USC 130i). Most private sector critical infrastructure operators do not have this authority. The exception is a formal DHS coordination agreement for specific critical infrastructure sites. Private sector operators should deploy detection-only systems and coordinate with law enforcement for interdiction response.
What is the range of commercial C-UAS detection systems?
Detection range varies significantly by modality and system. RF detection (Dedrone, DroneShield RFOne) can detect active drone control signals at 1-5km under favorable conditions, depending on frequency, antenna gain, and RF environment. Radar (Fortem TrueView, DroneShield RadarZero) typically detects small drones at 1-3km, depending on drone size, speed, and flight profile. Acoustic detection (DroneShield Acusense) is typically limited to under 500m and highly dependent on ambient noise. Optical detection range depends on camera resolution, sensor quality, and lighting conditions -- typically 300-1000m for drone identification.
Can C-UAS systems detect autonomous drones with no active radio link?
RF-only systems (Dedrone) cannot detect autonomous drones that fly pre-programmed missions with no active control link. Radar systems (Fortem TrueView, DroneShield RadarZero) can detect autonomous drones because radar detects the physical profile of the drone, not its radio emissions. For critical infrastructure sites where sophisticated adversaries might use pre-programmed drones to avoid RF detection, radar coverage is essential. This is a key reason why multi-modal detection (RF plus radar) provides higher assurance than RF-only deployment.
How does DroneHunter differ from RF jamming for drone interdiction?
Fortem's DroneHunter is a counter-drone drone that physically intercepts an unauthorized drone and captures it with a net. It does not use RF jamming or GPS spoofing -- it makes physical contact with the target. Because it does not use RF emissions to interfere with communications, DroneHunter does not violate FCC RF jamming regulations. However, physical interception raises separate legal questions: FAA regulations on operating drones to intercept other aircraft, and property law questions about capturing a drone owned by a third party. The legal status of DroneHunter for private sector use has not been fully tested in court.
What information does Dedrone's controller detection provide?
Dedrone's RF analysis can identify not just the drone but also the location of its ground controller -- the pilot operating the drone. By analyzing the RF direction and characteristics of the uplink (drone to controller) and downlink (controller to drone) channels, Dedrone can triangulate the controller's location and display it on a map. This is critical for law enforcement response: knowing where the pilot is located allows law enforcement to respond directly to the operator rather than trying to intercept the drone in flight.
What is the typical deployment timeline and cost for a C-UAS system?
Deployment timelines for commercial C-UAS systems range from 2-8 weeks depending on site complexity and sensor count. A basic perimeter detection deployment for a small facility (4-8 RF sensors, software platform, VMS integration) typically takes 2-3 weeks from sensor shipment. A large campus deployment with radar, RF, and optical integration across multiple buildings requires 6-8 weeks including site survey, sensor placement planning, cabling, and integration testing. Commercial C-UAS systems are typically sold as a combination of hardware purchase and annual software/subscription fees; full-campus deployments for large facilities commonly run $500,000 to several million dollars.
Sources & references
Free resources
Critical CVE Reference Card 2025–2026
25 actively exploited vulnerabilities with CVSS scores, exploit status, and patch availability. Print it, pin it, share it with your SOC team.
Ransomware Incident Response Playbook
Step-by-step 24-hour IR checklist covering detection, containment, eradication, and recovery. Built for SOC teams, IR leads, and CISOs.
Daily briefings + Google Top Stories in one step.
Enter your email and we'll subscribe you to the daily briefing and add Decryption Digest to your Google Search feed at the same time.
Founder & Cybersecurity Evangelist, Decryption Digest
Cybersecurity professional with expertise in threat intelligence, vulnerability research, and enterprise security. Covers zero-days, ransomware, and nation-state operations for 50,000+ security professionals every morning.