Drone mitigation is the act of stopping an unmanned aircraft: jamming its control link, taking over its flight controls, capturing it, or destroying it. For years, that authority belonged almost exclusively to four federal departments, and everyone else, including state police and prison systems, could only watch. That changed three weeks ago. On July 1, 2026, the Department of Justice and the Department of Homeland Security put into effect an Interim Final Rule implementing the SAFER SKIES Act, creating the first concrete pathway for state, local, Tribal, and territorial agencies to become certified for counter-drone operations, up to and including mitigation.
If you run security for a correctional facility, a police department, a stadium, or critical infrastructure, this rule is the operational roadmap you have been waiting for. It defines exactly who can mitigate drones, what training they need, which technologies they may use, and, just as important, what everyone without certification can legally do instead. This guide walks through all of it: what mitigation actually covers, who holds the authority today, how the new two-tier certification works, and the prerequisite that every mitigation program depends on. We build drone detection systems that serve as that foundation, so we will be direct about where detection ends and mitigation begins.
Counter-drone operations follow a chain: detect, track, identify, mitigate. The first three are sensing activities. They tell you a drone is present, where it is, and ideally what it is and who is flying it. Mitigation is the fourth step, the only one that physically interferes with the aircraft, and the only one that federal law tightly restricts. Our overview of counter-unmanned aircraft systems covers the full chain. This guide focuses on the last link.
Mitigation technologies fall into four families, each with different risk profiles and legal treatment:
RF jamming: overpowering the drone's control link so it lands, hovers, or returns home. Indiscriminate by nature, which is why the FCC bans it for private use.
Cyber-takeover: exploiting the drone's protocol to seize control and land it at a chosen spot. Precise, but only works on known protocols.
Physical capture: net-carrying interceptor drones that catch the target intact, preserving it for forensics.
Kinetic and directed energy: projectiles, missiles, and lasers. Effective and almost entirely military.
For a full comparison of each technology, who makes it, and what it costs, see our guide to anti-drone weapons. The short version for this discussion: every one of these tools physically interferes with an aircraft in the national airspace, which is why the law treats mitigation completely differently from detection.
As of this writing, lawful drone mitigation authority in the United States belongs to two groups.
The federal four. The Departments of Defense, Energy, Justice, and Homeland Security hold longstanding statutory authority to mitigate drone threats to covered facilities and assets. This is the authority that protects military bases, national security events, and federal facilities.
SLTT agencies certified under the SAFER SKIES Act. The Act, signed into law December 18, 2025 as part of the FY2026 NDAA, extends counter-drone authority to state, local, Tribal, and territorial law enforcement and correctional agencies for the first time, but only after federal training, certification, and program requirements are met. Our SAFER SKIES Act explainer covers the statute itself. The July 2026 rule is what makes it operational.
Everyone else: no mitigation authority, period. Private companies, stadiums, utilities, hospitals, universities, and individual property owners cannot legally jam, capture, or shoot down a drone under any circumstances. Shooting at an aircraft is a federal crime, and the FCC prohibits jammer use by private parties outright. If your organization is not a law enforcement or correctional agency, the legal path runs through detection, documentation, and coordination with the agencies that hold the authority, exactly the approach in our guide to legally responding to drones over your property.
The Interim Final Rule, codified at 6 CFR Part 124 and 28 CFR Part 124, establishes a two-tier certification system administered through the FBI's National Counter-UAS Training Center (NCUTC), which is the only authorized certifying body. Training from any other source does not count.
Tier 1: Detection and Warning. Completed online, with certification issued automatically once the assessment is passed. Tier 1 authorizes an agency to operate detection, tracking, and identification technology and to issue warnings. This is the accessible entry point, and the rule's authors expect it to scale fast: roughly 1,500 agencies are projected to certify at the detection tier within the first two years.
Tier 2: Mitigation. Requires in-person training at the NCUTC, and no mitigation operations may begin until personnel hold the certification. Capacity is limited, and only about 150 agencies are expected to reach the mitigation tier in the same period. Mitigation authority is the exception, not the default.
The rule also creates two equipment lists. The Authorized Technologies List defines approved categories of counter-drone technology. The Authorized Systems List will name specific products that pass a multi-agency review by DOJ, DHS, DoD, FAA, FCC, and NTIA; once products are listed for a category, agencies must buy from the list. And because many mitigation tools touch regulated spectrum, the FCC issued a companion order on July 2 granting 180 days of Special Temporary Authority for qualifying agencies to operate counter-drone systems that implicate spectrum rules. Agencies also self-certify an implementation policy covering command responsibility and program governance, with the NCUTC retaining audit and suspension authority. Public comments on the rule are open through September 4, 2026.
Here is the part of the mitigation conversation that gets skipped in every product brochure. The SAFER SKIES framework does not authorize an agency to stop any drone it dislikes. It authorizes action against a credible threat, and establishing a credible threat requires data: what aircraft is in the airspace, where it is, how it is behaving, and what it has done before. That determination is a detection function. An agency cannot exercise Tier 2 authority without the Tier 1 capability underneath it.
The dependency is also physical. A jammer needs to know where to point. A cyber-takeover system needs the drone's protocol identified. An interceptor needs a live track to fly against. Every mitigation technology consumes targeting data that only a detection and tracking system produces. And after the engagement, the rule's oversight structure demands documentation: what was detected, why it was judged a threat, what action was taken. That evidentiary record is generated by the detection platform, not the weapon. This is why we tell every agency the same thing, whatever their ambitions for mitigation authority: build the detection layer first. It is the legal predicate, the targeting source, and the compliance record in one.
If your organization will never hold SAFER SKIES certification, the rule still changes your situation for the better, because the agencies you call are gaining real authority to act. The legally sound program for a private facility looks like this:
Deploy detection. Detection, tracking, and identification are lawful for any organization, no certification required. The FEMA Counter-UAS Grant Program funds detection equipment at 100 percent federal cost share for eligible public agencies.
Document everything. Time-stamped detections, flight paths, repeat-visitor patterns, and operator locations turn a complaint into a case file that law enforcement can act on.
Build the relationship before the incident. Identify which local agency is pursuing SAFER SKIES certification and establish the handoff protocol now. When a certified agency responds to your facility, your detection data becomes their credible-threat determination.
Know your escalation rights. FAA complaints for rule violations, police reports under state privacy and harassment statutes, and, for critical infrastructure, the FAA's new process for requesting drone flight restrictions over fixed sites.
For correctional systems specifically, the calculus is different: prisons are inside the SAFER SKIES perimeter. A state DOC can pursue certification directly, and the contraband-delivery problem that drives detection deployments at correctional facilities is precisely the threat profile the Act was written for.
For SLTT law enforcement and correctional agencies, the practical sequence looks like this:
1. Complete Tier 1 online certification. It is online, automatic upon passing, and immediately authorizes detection and warning operations. There is no reason to wait.
2. Enroll early for Tier 2. In-person NCUTC capacity is the bottleneck. Agencies that want mitigation authority in 2027 should be requesting seats now.
3. Draft the implementation policy. The rule requires an agency-level governing document covering command responsibility and program integration before operations begin.
4. Deploy the detection layer. Fund it through FEMA C-UAS where eligible, and choose a platform whose records and reporting meet the rule's oversight requirements.
5. Watch the Authorized Systems List. Until products are listed, agencies may use any product in an approved category with proper certification and manufacturer training. Once the list publishes for a category, procurement must follow it. Our counter-drone vendor landscape maps the companies likely to appear on it.
The July 2026 rule is a genuine turning point. For the first time, a sheriff's office, a state police force, or a corrections department has a defined federal path to counter-drone authority, and roughly 1,500 agencies are expected to take the first step within two years. But the structure of the rule teaches the same lesson the technology does: mitigation sits at the top of a stack, and everything below it, detection, tracking, identification, documentation, is what makes it lawful and effective. The 150 agencies that reach Tier 2 will all have built Tier 1 first.
We believe the organizations that get this right start where the law and the physics both point: with complete awareness of their airspace. Whether your endpoint is full mitigation authority or a documented handoff to the agency that holds it, the first procurement is the same. Detect first. Everything else follows.
Building the detection foundation for a SAFER SKIES program, or the documentation trail for law enforcement handoff? Talk to our team about a site survey and compliance-ready reporting.
Related reading:
SAFER SKIES Act Explained: Counter-Drone Authority for Law Enforcement
Anti-Drone Weapons: Jammers, Nets, Interceptors, and Directed Energy Compared