Underground Gas Storage Robots: KRITIS Protection for Gas Storage and Compressor Stations

Underground gas storage facilities belong to critical energy infrastructure. Sabotage, drone overflights, and insider threats shifted protection requirements measurably in 2022. This text describes where autonomous ground robots secure the perimeter, where deployment is prohibited, and which obligations follow from the KRITIS-Dachgesetz.

Underground Gas Storage Robots: Deployment Profile and KRITIS Framework

Underground gas storage facilities (pore storage and caverns) fall under BSI-KritisV §2 within the energy sector, gas subsector. The threshold is 5.19 TWh of working gas volume per year. Source: BSI-KritisV Annex 4 Operators above this threshold are KRITIS-obligated and subject to federal verification, reporting, and resilience requirements.

The following above-ground components require protection: wellheads, gathering lines, compressor station, drying unit, metering and regulating station, control room, and access roads. These assets are located outside or at the edge of explosion-protection zones and are accessible for perimeter surveillance by autonomous ground robots.

Robots do not replace ATEX-certified inspections inside Ex zones. They take over perimeter patrol in areas outside Zone 2. The QR-2 outdoor patrol unit and the QR-3 with LiDAR and drone detection move along paved routes beside fencing, facility boundaries, and access roads. Coverage is 24/7 with no shift gap.

The deployment objective is detection of approach, sabotage preparation, and drone overflight. Interior inspection of pressure vessels, leak detection at flanges, and compressor maintenance remain the responsibility of qualified personnel using Ex-protection-compliant equipment. Operators find details on the KRITIS energy sector and the applicable obligations in the sector overview.

Threat Situation Against Gas Infrastructure in DACH

The Nord Stream sabotage in 2022 measurably raised protection requirements for compressor stations and above-ground gas components. Insurers, supervisory authorities, and legislators have since lowered the threshold for acceptable residual risk.

The BBK identifies energy infrastructure as a priority target of hybrid threats. Drone overflights above German energy facilities were reported publicly multiple times in 2024. [Source: BSI Lagebericht 2024, citation to be inserted] A detection obligation does not derive from a single paragraph. It derives from the heightened duty of care that a KRITIS operator must demonstrate within its resilience plan.

Insider risk from maintenance contractors is documented and relevant. [Source: BfV Wirtschaftsschutzbericht, citation to be inserted] Third-party personnel with facility access shorten the reconnaissance phase for an attacker. Physical access control combined with visual patrol and recording extends this reconnaissance phase and produces evidentiary material.

Insurers require documented 24/7 surveillance with gapless recording for facilities above 1 TWh of working gas volume. [Source to be inserted] Documentation means: patrol log, video recording, and alarm chain with timestamps. A security guard on patrol without a body camera does not satisfy this evidentiary standard.

Sensor Capability for Gas Facilities: QR-2 and QR-3 Performance

The QR-2 carries a 640x512 thermal camera that detects persons at up to 80 meters. The RGB camera delivers 4K resolution. Two-way audio enables announcements and live communication. Protection class IP65, operating temperature −20 °C to +50 °C. These specifications cover outdoor deployment across DACH year-round, including winter operation in upland locations.

The QR-3 adds 32-channel LiDAR for 3D environmental mapping and RF drone detection on 2.4 and 5.8 GHz. Typical RF detection range is 1.2 km. This makes drone approaches detectable before they reach the facility perimeter.

What the robot does not do: gas leak detection. Stationary IR gas sensors are required by facility safety regulations for that purpose. They are not replaceable. The robot is a complement, not a substitute.

The thermal camera detects anomalous hot spots at compressor bearings as a secondary indicator. This is not a substitute for fixed machine monitoring with vibration and temperature sensors. It is an additional data point that assists post-incident analysis.

Recording is stored locally with encryption. Transmission to the control room runs over VPN. Standard retention is 30 days, extendable to 90 days for audit purposes.

Ex Protection, ATEX, and Deployment Limits

QR-2 and QR-3 are not ATEX-certified. They must not enter Zone 0, Zone 1, or Zone 2. This is not a sales caveat. It is a hard technical limit. Operators requiring an ATEX robot need a different platform with the corresponding certification and a significantly higher price point.

The deployment corridor is the outer perimeter: access roads, parking areas, administrative buildings, and fence line outside Ex protection zones. The facility's Ex zone plan is the basis for the patrol route. Geofencing is configured as binding during commissioning. The robot cannot cross the geofence boundary by software or hardware means.

On gas alarm or confirmed leakage, the robot automatically retreats to a defined safety distance. It does not intervene, does not close valves, and does not enter the hazard area. Response to the leakage remains the responsibility of the plant fire brigade and the facility control center.

Functional safety of autonomous mobile robots in human environments is governed by EN ISO 13482. The EU Machinery Regulation 2023/1230 applies from 2027. Conformity is documented during commissioning.

Integration into the Control Room and SOC Connection

Connection to existing PSIM systems runs via ONVIF, MQTT, and REST. Tested integrations include Genetec Security Center, Milestone XProtect, and Siemens SiPass. These three systems dominate the energy sector. Custom interfaces are possible. They extend commissioning by two to three weeks.

Alarm prioritization follows a fixed schema. Drone detection and fence breach trigger immediate escalation to the 24/7 control room. Low-priority anomalies (animal at fence, vegetation in motion zone) are logged but not escalated. Thresholds are configurable per site and are adjusted during the pilot phase.

Audio challenge via loudspeaker uses predefined announcements in German and English. The operator can speak live. An announcement during the reconnaissance phase demonstrably reduces the probability of an intrusion attempt.

The interface to the plant fire brigade and external intervention services is documented with a handover protocol. Log data serve as evidence for authorities under KRITIS-Dachgesetz §11 (verification and reporting obligations). Format and retention period follow BBK specifications.

Costs: RaaS Model Versus Classical Guard Deployment

A guarded 24/7 post in Germany costs €15,000–25,000 per month. Source: BDSW Lohnkostenübersicht 2024 This includes the Manteltarifvertrag, night, Sunday, and holiday supplements, vacation coverage, and sick leave. At the security level requiring a §34a Sachkundeprüfung and firearms authorization, the figure sits at the upper end.

The QR-2 in the Robotics-as-a-Service model costs €3,500 per month. The QR-3 with LiDAR and drone detection is priced at €3,800 per month. No capital investment is required. The minimum contract term is 24 months. Delivery within 48 hours of contract signature. Commissioning including route planning in five working days.

Recommended configuration for underground storage: hybrid model. One human post at access control plus two robots for patrol reduces total costs by 40–55 percent compared to two human patrols. [Source to be inserted] The human retains the access decision. The robot takes over the monotonous, weather-independent Streife.

Insurance discounts of 8–15 percent for documented robot patrol are confirmed in DACH. [Source to be inserted] The prerequisite is verifiable recording, not mere procurement. The detailed cost calculation is provided in the TCO comparison for security services.

KRITIS-Dachgesetz: What Operators Must Implement Now

The KRITIS-Dachgesetz, Bundestag-Drucksache 20/9262 defines registration, resilience, and reporting obligations for physical protection measures. The registration obligation with the BBK applies within nine months of entry into force KRITIS-Dachgesetz §4 Para. 2, Bundestag-Drucksache 20/9262.

The resilience plan is mandatory. It covers physical protection measures, detection, response, and recovery. Cyber defense alone is not sufficient. Perimeter surveillance and its documentation are components of the plan.

Reporting obligation for security incidents: first notification within 24 hours, full report within one month. The deadlines follow the logic of NIS-2 Directive 2022/2555, which establishes board-level liability for cyber aspects. The KRITIS-Dachgesetz extends this obligation to physical resilience.

The audit cycle is two years KRITIS-Dachgesetz §8, Bundestag-Drucksache 20/9262. Documentation of patrols, alarm chains, and response times is part of the evidentiary record. A complete overview of required steps is available in the KRITIS-Dachgesetz Checklist 2026. Registration with the federal authority is explained in the BBK Registration Guide.

Pilot Procedure for Underground Storage and Compressor Stations

Week 1: Site walk with the security manager. Cross-reference of the Ex zone plan. Definition of the patrol corridor and exclusion zones. Specification of escalation levels and the interface to the control room.

Week 2: Contract conclusion under the RaaS model. Delivery of the QR-2 or QR-3 within 48 hours. Technical commissioning including geofencing, PSIM integration, and audio configuration.

Weeks 3 to 6: Pilot operation with daily reporting. Adjustment of routes, alarm thresholds, and audio announcements. False alarms are evaluated and thresholds recalibrated. Typical false alarm rate after adjustment: below two per robot per week. [Source: internal Quarero operational data, period to be specified]

Week 7: Audit preparation. Compilation of evidentiary documentation for BBK registration and insurers. Handover to the compliance officer.

Thereafter: scaling to additional operator sites following a standardized rollout plan. A second site is operational within three weeks. Configuration and PSIM interface are carried over from the pilot.

For a site-specific walkthrough and pilot planning, use the pilot request form for energy facilities.