Security Robot Wind Farm: Onshore Protection for KRITIS-Regulated Sites

Onshore wind farms are not factory premises. They have no fence, no gatehouse, and no 24/7 presence. With the KRITIS Umbrella Act (KRITIS-Dachgesetz) and the NIS-2 transposition coming into force, the requirements for physical security are changing fundamentally. This article describes how a security robot (QR-3) economically covers the protection of onshore sites from 104 MW generation capacity.

Security Robot Wind Farm: Why Onshore Sites Are a Special Case

A typical onshore wind farm in Germany covers between 200 and 2,000 hectares. On this area stand 10 to 80 turbines, distributed across forest, track, and agricultural land. A continuous fence does not exist. Unlike a logistics centre or a substation in closed construction, the site consists of 30 to 80 scattered protection objects plus service tracks, transformer stations, and a handover station.

The classic vehicle-based guard patrol takes 25 to 60 minutes between two towers. An incident at tower 14 is, in the worst case, only noticed two hours later. By then, copper thefts at transformer stations are long completed. Industry reports put the property damage per incident at 15,000 to 80,000 euros, plus production loss.

Drone overflights above rotor blades are a second, often underestimated risk. A collision between UAV and rotor generates immediate downtime costs of 4,000 to 12,000 euros per day and turbine, before repair costs. Surveying drones of unknown origin have appeared regularly above repowering sites since 2023.

With the inclusion of energy generation in the KRITIS-Dachgesetz, operators from 104 MW installed capacity fall under explicit physical protection obligations. The threshold is defined under KritisV and applies sector-wide to generation facilities.

Threat Picture: What Happened at Onshore Sites Between 2023 and 2025

Incident documentation from the past 24 months shows five recurring patterns.

First: copper and cable theft at substations. Industry reports cite a 38 percent increase against 2022. Perpetrators work in teams of two to four, use night shifts between 02:00 and 04:30, and avoid known patrol routines.

Second: sabotage attempts on control cabinets and SCADA cabinets, documented in Brandenburg and Mecklenburg-Vorpommern. The interventions aim less at theft, more at operational disruption.

Third: fire loads deposited at tower bases during the dry periods of 2024. Several incidents were only discovered by chance walkers or forestry workers.

Fourth: surveying drones of unknown origin above repowering sites. The recordings are presumably used for activism, competitive analysis, or targeted sabotage preparation. Reliable attribution is lacking.

Fifth: vandalism on service tracks and access gates during construction phases. Damage to locking systems and barriers delays maintenance by an average of three to five days.

QR-3 as Security Robot in Wind Farms: Sensors and Range

The QR-3 with LiDAR and drone detection is designed for large outdoor areas without continuous fencing. The sensor system combines four detection layers.

LiDAR with 200 metre range detects persons and vehicles even in maize and rapeseed fields, where camera systems fail at the line of sight. The thermal sensor identifies heat signatures at night, in fog and rain up to 150 metres. An RF-based drone detection captures commercial UAVs within a 1,500 metre radius and provides manufacturer identification and flight route.

Patrol routes between tower bases, substation, and handover station are programmable and aligned with the operator's maintenance windows. Direct connection to the control room runs via VPN-secured mobile network or fibre, alternatively to an emergency call service provider.

Operation is specified from minus 20 to plus 50 degrees Celsius, protection class IP65. The platform meets the requirements of EN ISO 13482 for personal care service robots in outdoor use.

Deployment Concept: How One Robot Covers 40 Turbines

One QR-3 unit patrols 15 to 25 kilometres of service tracks per shift. For a park with 40 turbines and an average of 18 kilometres of internal track network, this is enough for three full circuits per 8-hour shift.

The charging station sits at the substation, inductive charging with under 90 minutes downtime per shift. The escalation chain is three-tier: detection at the robot, verification by operator in the control room, alerting of police or works security. From first alarm to triggered police notification, correct configuration delivers under 4 minutes.

Existing fixed cameras at substations and turbine towers are integrated into the same control room via ONVIF. The robot delivers the mobile component, the fixed cameras cover critical points. This combination is the core of perimeter protection for large sites.

Maintenance is limited to one on-site appointment per month. Software updates come over mobile network. For parks above 60 turbines, a second unit is deployed and sectors are split.

Cost Calculation: 3,800 Euros Per Month Against Classic Guard Service

In the RaaS model (Robotics-as-a-Service without CapEx), the QR-3 costs 3,800 euros per month. Minimum term 24 months, no acquisition costs, maintenance and updates included.

For comparison: a 24/7 guard post at a single point of an onshore park costs, according to BDSW industry data, between 15,000 and 25,000 euros per month, depending on tariff zone and Manteltarifvertrag. This Posten covers only one position, not the distributed park.

A mobile patrol service with three nightly visits costs 4,500 to 7,000 euros per month. It offers no continuous presence and no drone detection. Between patrols, detection gaps of two to four hours arise.

The hybrid model of robot plus reduced patrol service (one visit per night) lowers total costs against pure guard service by 55 to 70 percent. A detailed breakdown is in the analysis on guard service cost compared.

Insurance premiums for property damage typically fall by 8 to 15 percent with documented robotic surveillance and audit-grade logs. Delivery time from contract signing is 48 hours for the initial installation.

KRITIS-Dachgesetz and NIS-2: Obligations for Wind Farm Operators

The KRITIS sector Energy covers generation facilities from 104 MW and is included in the draft KRITIS-Dachgesetz. Bundestag-Drucksache 20/9262 stipulates that physical resilience obligations for affected facilities must be documented and verifiable.

Paragraph 9 of the draft requires the implementation of appropriate technical and organisational measures, including detection and response to physical intrusion attempts. A blanket visual inspection does not suffice.

NIS-2 (Directive 2022/2555) adds cyber-physical convergence to this obligation: detection of a physical intrusion into a SCADA switchgear cabinet is also a reportable security incident. The 24-hour early warning applies regardless of whether the intervention occurred via network or screwdriver.

Board liability has applied since October 2024 for inadequate risk assessment. Asset managers and managing directors are personally liable if the protection concept does not reflect the state of the art.

Robot patrols provide audit-grade logs for the BBK registration and the annual reporting obligation. Every patrol, every detection, and every escalation is documented with timestamp, sensor path, and GPS position. For repowering projects, protection status feeds into the immission control permit.

For preparation of the compliance phase from 2026, a look at the KRITIS-Dachgesetz checklist 2026 is worthwhile.

Pilot Setup: From First Call to First Patrol

The standard process runs over four weeks.

Week 1: site walk-through by the operations team. Mapping of patrol routes based on OSM and operator data, identification of charging points at the substation, clarification of mobile network coverage.

Week 2: contract signing, preparation of the connection to the control room. If the control room is operated externally (Stadtwerk, technical operations manager), coordination of interfaces.

Week 3: delivery and commissioning. Initial installation including route programming and test patrol within 48 hours of delivery.

Week 4: training of operating personnel and control room operators. Test run of the escalation chain with simulated incidents. Acceptance by the KRITIS officer.

From month 2, regular operation runs with monthly reporting to asset management and KRITIS officer. Contract exit is possible after 24 months, after that monthly renewal with 30 days notice.

Limits and Realistic Expectations

The robot does not replace the emergency call service and does not replace police. It shortens detection time to under 60 seconds and provides the chain of evidence for escalation. Physical intervention remains the task of works security or police.

In snow levels above 30 cm, service tracks are not autonomously passable. At altitudes above 600 metres or in low mountain regions, downtime days must be planned for in winter, typically 8 to 18 days per season. For these periods, fallback to mobile patrol is recommended.

Very dense vegetation outside the tracks remains a blind spot. LiDAR penetrates maize up to about 1.80 metres growth height, dense forest not. Here, supplementary fixed cameras at tower bases and handover stations are required.

Drones below 5 cm size and with active radio silence remain hard to detect. RF detection works reliably against commercial UAVs (DJI, Autel, Parrot), not against military or self-built devices without radio emission.

Data protection: recordings over public paths and adjoining properties require signage under GDPR Article 13. The signage must be visible before every access. Retention periods are 72 hours by default, extendable in incident cases.

The sensor system provides indications, not evidence in the criminal procedural sense without additional fixed camera systems. For criminal proceedings, the combination of robot plus fixed camera at the incident location is recommended.

Next Step

An onshore wind farm from 104 MW is subject to KRITIS from 2026. The documentation of physical protective measures becomes part of the annual reporting obligation to the BBK. Those who want to use the 48-hour delivery time and install before the compliance deadline should now arrange a pilot call for the site. The technical specifications and patrol parameters of the QR-3 are available on the product page.