Nuclear Security: What NRC Rules Demand at the Perimeter
Every U.S. nuclear power plant has to keep at least ten armed responders available inside the protected area at all times, and those responders can't be assigned other duties. That one rule tells you how seriously nuclear security is treated. It's also a good reminder that this isn't a field where you shop for a perimeter from a menu. The regulator has already written most of the menu.
So this article works as a decision guide. We'll cover what the NRC requires, what's changing, how the layers compare, and how to choose where anything else belongs.
What the NRC Requires for Nuclear Security
The core rule is 10 CFR 73.55, which governs physical protection of power reactors. It says a licensee's program must "protect against the design basis threat of radiological sabotage" and "prevent significant core damage and spent fuel sabotage." The rule then spells out how.
Here are the pieces that matter most at the perimeter.
Physical barriers. They must be "designed and constructed to protect against the design basis threat of radiological sabotage." The protected area barrier must limit access to the people, vehicles and materials needed for official duties and channel them through access control portals.
Vital areas. Vital equipment sits inside vital areas, which sit inside the protected area, so reaching it means passing "at least two physical barriers."
Isolation zone. It has to be large enough to permit "observation and assessment of activities on either side of the protected area barrier."
Detection and assessment. Alarms must show the type and location of the alarm, with visual and audible annunciation.
Lighting. The rule sets a minimum of 0.2 foot-candles, measured horizontally at ground level, in isolation zones and appropriate exterior areas.
Vehicle barriers. Plants must install and maintain a vehicle barrier system, passive and active, at an adequate stand-off distance.
Armed response. At least ten armed responders, available at all times. On an alarm, the licensee must determine the existence and level of a threat and respond to interdict and neutralize it.
Each plant also files a security plan describing how it will meet these requirements with site-specific conditions in mind.
What's Changing in Nuclear Security Rules
Two developments are worth watching.
Drone reporting. According to the NRC, in 2024 it updated its regulations to require plants to report drone sightings. The reports go to the NRC, the FAA, the FBI and local law enforcement. The NRC's position is that plants are built to withstand hurricanes, tornadoes and earthquakes, and that their security measures defend against threats up to and including the applicable design basis threats. It also notes that plant security forces don't have authority to shoot down drones or other aircraft.
Not everyone is satisfied. In the Bulletin of the Atomic Scientists, Henry Sokolski wrote that about two dozen drone overflights of U.S. reactors occurred in 2024, and argued that Congress should extend counter-drone authority beyond Energy Department sites to civilian plants. That's one analyst's view, not NRC policy, but it shows where the debate is.
A proposed rewrite. On June 26, 2026, the NRC published a proposed rule titled "Modernizing Security Requirements." It would shift parts of Part 73 "from prescriptive rules to performance-based, risk-informed criteria," replace "high assurance" with "reasonable assurance," and introduce "achievable target sets" based on site-specific analysis. The comment deadline was July 27, 2026. The notice doesn't mention drones, and it's a proposal, so requirements today are the ones in force. If you work at a licensee, your regulatory team will be tracking it.
Comparing the Layers of Nuclear Security
Here's how the main layers stack up. The first six come from the rules. The last isn't required by anyone.
Layer | What it does | NRC status | Best fit |
Barriers and isolation zone | Delays access and keeps a clear view | Required | Every site |
Detection and assessment | Alarms with type and location, plus a way to assess them | Required | Every site |
Lighting | Minimum levels in isolation zones and exterior areas | Required | Every site |
Vehicle barriers | Stand-off distance from the protected area | Required | Every site |
Armed security force | Interdicts and neutralizes threats, at least ten responders | Required | Licensees only |
Drone sighting reports | Notifies the NRC, FAA, FBI and local police | Required since 2024 | Licensees |
Managed aerial patrol and drone monitoring | Adds coverage and records outside the protected area, and detection that supports a licensee's program | Not required | Supporting sites and areas where it's authorized |
The table makes the point plainly. The top six rows aren't optional and can't be traded off against the last one.
The Drone Question
Drones sit at an awkward spot in nuclear security. They're a concern, and they're also a tool, and the rules around both are strict.
The FAA prohibits drone flights over designated national security sensitive facilities, including nuclear power plants, from the ground up to 400 feet above ground level. That covers all types and purposes of flight. Separately, the FAA has proposed a Section 2209 process that would let operators of 16 categories of critical infrastructure, nuclear reactors among them, petition for flight restrictions over their sites. It's still a proposal.
What does that mean for a security program? Two things.
First, an aerial patrol over a plant's protected area isn't something to plan around. Airspace is restricted and the licensee controls the security program.
Second, detection is a different matter. Our AirGuard service covers detection, geolocation and managed monitoring of unauthorized drones. It doesn't mitigate. At a licensed site, anything like that would have to be approved by the licensee, fit its security plan and feed its own reporting process, since the licensee carries the reporting duty.
How to Choose Your Nuclear Security Approach
Start with where you sit.
If you're a licensee. Your NRC-approved security plan comes first. Any addition goes through your licensing and security leadership. The question isn't "what's new?" It's "does this support the plan, or change it?" Anything that changes it is a regulatory conversation, not a purchase.
If you run supporting sites. Off-site warehouses, laydown and storage yards, training buildings and parking areas aren't the protected area. They need ordinary strong perimeter security, and they can be patrolled like any other facility, subject to local airspace rules.
If you're evaluating drone detection. Decide who receives the data, who reports it and who has legal authority to respond. Detection information goes to the people who can act. It doesn't go to a vendor's dashboard and stop there.
Before you commit to anything, run through these questions.
Is the area inside the protected area, or outside it?
Does the FAA restrict the airspace above it?
Does the change touch your approved security plan?
Who sees the data, and who decides what happens next?
Will it be in your records in a form your inspectors and law enforcement can use?
If you can't answer all five, you're not ready to buy. You're ready to plan.
How Nuclear Security Connects to What You Already Have
A nuclear security program is already layered, which is the whole point of the regulation. Anything we add is designed to plug into it, not replace it.
The armed security force. They keep every decision about response.
Central and secondary alarm stations. They remain the center of detection and assessment.
Barriers, lighting and vehicle barriers. Required layers keep doing their jobs.
Existing intrusion detection and video. Fixed systems keep covering the perimeter.
Drone sighting reports. Any monitoring data supports the licensee's reporting, and doesn't replace it.
Law enforcement and the FBI. They get clearer information to work with.
Supporting sites. Off-site facilities get the same managed coverage as any critical infrastructure site.
Why LandSkyAI for Nuclear Security
Security teams in this field have enough to manage with inspections, drills and paperwork. They shouldn't have to build an aviation program too. LandSkyAI runs fully managed autonomous drone and robotic security, so the aircraft, automation, pilots and reporting are handled for you. We hold BVLOS authorizations in the United States and have completed more than 100,000 drone patrols. We're hardware agnostic, and we'll tell you honestly when something isn't ours to do. At a licensed nuclear plant, much of this work belongs to the licensee and the regulator, not to us.
Working on Nuclear Security? Let's Be Specific
If you run security for a licensee, a supporting facility or a nearby site, tell us which of the three situations above is yours. We'll go through what you already have, what the rules and the airspace allow, and where, if anywhere, managed monitoring would add something.
Did you find this article useful? Are you interested in seeing us in action?
MissionControl is LandSkyAI’s ongoing town hall style webinar where you can get to know who we are, what we do, and how we’ve built our autonomous security programs. We also conduct a fully live remote drone demo, every time!
Our next event is on Wednesday, November 18th, 2026
Thank you for reading SkyBlog! Found it interesting? Hit that link 🔗 button and send to a friend! If you have questions or want to explore how these solutions apply to your environment, contact the LandSkyAI team below to start a conversation. ✌️
