Request a briefing

Design guide

Autonomous perimeter security, designed properly

A practical guide to designing autonomous perimeter security for substations, ports, pipelines and data centers: layers, sensor choice, operator ratios and response.

Why perimeters fail

Most perimeter security failures are not failures of detection hardware. They are failures of design: too many alarms for operators to assess, sensors placed where installation was easy rather than where threats approach, and response plans that assume someone will be available to drive out and look.

Critical-infrastructure operators feel this most acutely. A utility may own hundreds of substations, a pipeline company thousands of kilometres of right-of-way, a port several kilometres of quay line. None of these can be guarded post by post, and conventional fence-mounted sensors generate so many nuisance alarms that operators learn to ignore them.

Autonomous perimeter security addresses this by changing the unit of work from alarm to decision. Machines detect, track, identify and present a situation; people decide what to do about it.

The four-layer model

We design perimeters in four layers. Each layer filters what reaches the next, so the human at the end sees only what matters.

  1. Detect wide. Long-range sensors — ground surveillance radar, thermal imaging, fiber-optic fence sensing — cover the approaches and the boundary. They are tuned for sensitivity, not precision, and they will see deer, weather and debris as well as people.
  2. Track and classify. Software fuses detections from multiple sensors into tracks, discards obvious nuisances, and classifies what remains: person, vehicle, animal, small drone.
  3. Identify close. For tracks that matter, an elevated sensor moves close enough to see clearly. This is where redeployable sentries such as Kestrel earn their place: they perch near the track and give the operator a stable, high-resolution view without anyone leaving the control room.
  4. Decide and respond. The operator receives a single decision with context — what was detected, where it is going, and recommended actions — and chooses: dismiss, warn via voice and light, dispatch a response team, or notify police.

Choosing sensors for the detection layer

Ground surveillance radar is the backbone of wide-area detection. It works day and night, in rain and fog, and covers 360 degrees from a single point. Modern solid-state units detect walking people at one to two kilometres and vehicles beyond that. Radar is the primary sensor on our Bulwark masts.

Thermal cameras provide excellent detection at night and are essential for classification, but each covers only a narrow field of view and is affected by heavy rain and thermal crossover at dawn and dusk.

Fence sensors — vibration, taut-wire or fiber-optic — tell you exactly where someone touched the boundary, but not who or why, and they generate nuisance alarms in wind.

Visible cameras remain valuable for identification and evidence, especially with good lighting, but are poor primary detectors over large areas.

A robust design uses at least two independent phenomenologies for every approach, so that weather or deception that defeats one sensor does not blind the site.

Operator ratios and alarm budgets

Before buying hardware, set an alarm budget: the number of events per operator per hour that your team can genuinely assess. For most operations centers that number is in the low tens. Then design backwards. If a substation fence line will generate two hundred raw alarms a night, the tracking and identification layers must reduce that to two or three decisions.

The second number to set is the operator ratio: how many sites or sensors one operator supervises. Conventional alarm monitoring often runs at a handful of sites per operator. With fused tracking and autonomous identification, one operator can supervise dozens of sites. Meridian deployments commonly run at one operator to forty sentries.

If you cannot state your alarm budget and your operator ratio, you cannot evaluate a perimeter proposal.

Designing the response

Detection without response is a recording system. For remote infrastructure the hardest question is often what happens in the twenty to forty minutes before anyone can arrive.

  • Remote deterrence. Voice challenge and high-intensity light from a perched sentry resolve a large share of incidents without dispatch. Most trespassers leave when they realize they are being watched and spoken to.
  • Persistent tracking. If someone does not leave, the sentry follows the track — relocating perches if necessary — so that responders arrive with a live picture.
  • Evidence. Every frame and decision is logged with chain of custody, which matters for prosecution and for regulators.
  • Escalation. Integration with dispatch and law enforcement ensures the right agency gets the right information quickly.

Sector notes

Electrical substations

Substations combine high consequence with remote locations and attractive copper. A typical design pairs one radar mast with two perched sentries, monitored regionally. Physical attacks on substations have pushed regulators in several countries to tighten physical-security expectations, making documented, auditable designs increasingly important.

Ports

Port layouts change by the hour as containers are stacked and vessels berth. Fixed cameras lose coverage constantly. Sentries perched on light towers and crane platforms can be repositioned to follow the operational picture.

Pipelines and linear assets

Linear assets are best covered by point protection at valve stations, crossings and pumping stations, supplemented by sentries that leapfrog along the right-of-way for patrol and inspection.

Data centers

Hyperscale campuses demand layered perimeters integrated with strict access control. The emphasis is on deterrence and early detection well outside the fence line.

Common design mistakes

Designing around the fence. The fence is where intruders are slowest and most visible, but by the time someone reaches it you have little time to respond. Detection should begin well outside the boundary, on the approaches.

Treating lighting as an afterthought. Many camera-based designs assume lighting that does not exist at night. Thermal sensors and radar avoid the dependency; deterrence lighting on sentries provides light when and where it is needed rather than all night.

Single points of failure. One radar, one network link or one control room can each take a whole site offline. Design for degraded operation: sensors that keep recording locally, links that fail over, and a secondary console.

Freezing the design. Sites change. Construction, new buildings and seasonal vegetation all alter sight lines. A design that cannot be re-planned without new civil works will decay. Mobile and redeployable sensors keep the coverage map current.

A procurement checklist

  • Define threats, assets and acceptable response times for each site class.
  • Set your alarm budget and target operator ratio.
  • Require at least two sensing phenomenologies per approach.
  • Ask vendors for time-on-watch and nuisance-alarm rates from comparable live sites.
  • Confirm deployment options for software: cloud, on-premises, air-gapped.
  • Insist on full audit logging and role-based access.
  • Plan for change: how does the design adapt when the site does?

To see how this maps to real configurations, read our critical infrastructure brief or request a site assessment.

Frequently asked questions

What is autonomous perimeter security?

A perimeter system in which machines detect, track, identify and present intrusions, and people make the decisions about response. It replaces large numbers of static posts and unfiltered alarms with a small number of informed decisions.

How many sensors does a substation need?

A typical transmission substation is covered by one radar mast and two perched aerial sentries, plus existing cameras, but the right answer comes from a site survey of terrain and approaches.

Can autonomous perimeter systems run without internet access?

Yes. Meridian can run on-premises or fully air-gapped, which is common for utilities and defense sites.

Next step

Put a Kestrel over your site in thirty days.

Request a classified-capable briefing, a live demonstration or a site assessment. A program lead replies within one business day.