NATO Rewrites Its Air Defence Playbook — For The First Time In Decades
NATO is rewriting its integrated air & missile defence plan for the first time in decades. Inside SDP 12000 and EVA Eastern Sentry.

Main Story
NATO's air defence architecture is undergoing its most significant doctrinal reset since the Cold War. At the operational centre of that effort is the NATO Allied Air Command (AIRCOM), whose leadership has now detailed precisely how the alliance plans to close the capability gaps that a string of drone and missile boundary violations has exposed.
The top U.S. Air Force officer in Europe, who also serves as the NATO Allied Air Command leader, has been formally tasked with enacting new alliance plans to defend against cruise missiles and drones. The immediate catalyst: he was responding to questions about a drone that NATO was required to shoot down after it entered Lithuanian airspace overnight — an incident that the NATO-tasked commander linked directly to the implementation of Standing Defense Plan (SDP) 12000, the alliance's new integrated air and missile defence framework.
SDP 12000 did not emerge in a vacuum. Standing Defense Plan 12000 is a new plan for integrated air and missile defence across the alliance, a concept that SACEUR Gen. Alexus G. Grynkewich formally introduced during testimony to Congress in March 2026. Speaking before the Senate Armed Services Committee, Grynkewich confirmed that NATO is "in the process of rewriting our standing defense plan for integrated air and missile defense across the alliance" — and that "this is the first time this has been done in decades."
The operational precursor to SDP 12000 was the Enhanced Vigilance Activity (EVA) Eastern Sentry mission. In September 2025, in response to the violation of Polish airspace, NATO launched Eastern Sentry — a military activity involving a range of allied assets featuring both traditional capabilities and novel technologies, including elements designed to address challenges associated with drones. The incursion itself was significant: up to four of an estimated 23 drones were shot down by allied forces during an airspace intrusion lasting approximately seven hours across eastern, central, and northern Poland. A NATO spokesman described it as "the first time NATO aircraft have engaged potential threats in allied airspace."
The response was a demonstration of multi-platform alliance integration in real time. Italian airborne early warning and control aircraft, German Patriot air and missile defence batteries, Polish F-16s, fifth-generation Dutch F-35s, and a Belgian A330 MRTT tanker were all brought to bear to track and engage the drones. Eastern Sentry subsequently stitched together a number of disparate air and missile defence capabilities across the eastern flank of the alliance to "thicken the lines for defense."
Subsequent incidents underscored that Poland was not an isolated case. In December 2025, Turkey downed a drone approaching its airspace across the Black Sea. After a Shahed-type drone struck a residential building in the Romanian city of Galați, a Romanian F-16 intercepted one of the same class of drone weeks later, with three more subsequently downed.
The strategic pressure to act goes beyond individual incidents. NATO Secretary General Mark Rutte declared in June 2025 a requirement to increase alliance IAMD capacity by 400%, underscoring that air and missile defence had been an area of comparative neglect and underinvestment that was "no longer acceptable." That posture was formalised when NATO Defence Ministers endorsed the alliance's updated Integrated Air and Missile Defence Policy at the February 2025 Defence Ministerial in Brussels.
The financial commitment is now following the doctrinal one. NATO allies announced investment of more than $40 billion over five years to expand counter-drone defences, drone procurement, and operator training — a package reflecting a shift from isolated national efforts toward a coordinated NATO approach to detecting, defeating, and deploying unmanned systems at scale.
Technical Breakdown
Threat class being addressed: One-way attack UAS (small to medium, including Shahed/Geranium-type loitering munitions) and cruise missiles, with doctrinal extension to ballistic missiles and hypersonic glide vehicles.
Detection gap: Drones fly low and slow, making them difficult to pinpoint on radar systems calibrated for high-speed missiles; they can be mistaken for birds or civilian aircraft — gaps that the Merops counter-UAS sensor system helps close through its integrated sensor array and machine learning classification capabilities.
Intercept cost asymmetry: Each Advanced Medium-Range Air-to-Air Missile (AMRAAM), which NATO used to intercept drones in the Polish incursion, costs roughly $1 million; the cheaper Sidewinder alternative still runs into the hundreds of thousands of dollars — applied against adversary platforms that are constructed primarily of plywood and foam, with operators comfortable sacrificing up to 75% of an attack salvo to probe or saturate defences.
SDP 12000 / IAMD architecture: NATO's updated IAMD policy adopts a multi-domain approach integrating capabilities across land, air, sea, space, and cyber domains, with interoperability a critical aspect to ensure seamless integration and coordination of air and missile defence systems and command-and-control structures. The threat spectrum explicitly includes all objects capable of putting the Alliance at risk from the air — from small, low- and slow-flying UAS to all types of cruise and ballistic missiles, including hypersonic.
Emerging interceptor hardware: MBDA's counter-drone missile is being integrated into Rheinmetall's Skyranger 30 air defence system — the first units earmarked for Germany's brigade in Lithuania, with deliveries expected between 2027 and 2028. Each Skyranger 30 carries nine missiles, allowing a six-vehicle battery to field 54 ready-to-fire interceptors, while smaller Class 1 drones are engaged by the system's 30 mm cannon.
Investment horizon: Between 2026 and 2030, NATO members and close allies are expected to spend more than $210 billion on air and missile defence capabilities as the architecture transitions from legacy platform-centric postures to networked, layered systems.
Industry Impact
For manufacturers: The Rheinmetall-MBDA Skyranger 30 integration signals that the near-term procurement priority is cost-effective, high-volume interceptors rather than exquisite single-role platforms. NATO's doctrinal reset makes clear that Western air defence can no longer be built around a small number of exquisite platforms and expensive interceptors when adversaries can field large volumes of low-cost drones, loitering munitions, and increasingly sophisticated missiles, including hypersonic glide vehicles. This structurally advantages defence primes with scalable manufacturing capacity.
For counter-UAS integrators: At NATO AIRCOM's Industry Day in Ramstein, around 35 companies exhibited their latest counter-drone systems — including MBDA, Hensoldt, and Aselsan — spanning radars, interceptor drones, and specialised missiles. The breadth of the field signals a competitive, technology-diverse procurement landscape opening across the alliance's eastern flank.
For operators and allied air forces: The NATO counter-drone initiative adds a NATO counter-drone marketplace, expanded drone operator training under NATO Flight Training Europe, and a major procurement contract for surveillance drones through the NATO Support and Procurement Agency — creating structured pathways for national air forces to integrate new UAS and C-UAS capabilities.
For regulators and national authorities: Senior NATO air commanders have drawn a doctrinal boundary: "it's not about the small UASs; that's typically a national responsibility" — clarifying that SDP 12000 is focused on one-way attack drones and cruise missiles, not commercial or nuisance-class unmanned aircraft. National regulators will need to align their civil-military coordination frameworks accordingly, particularly around contested low-altitude airspace near the eastern flank.
For investors: NATO's shift is from platform-centric air defence to distributed, sensor- and software-driven architectures addressing mass drone and missile saturation — emphasising scalable production, decentralised command, integrated electronic warfare, AI-enabled decision aids, and offensive strike capabilities. Software-defined detection, machine-learning threat classification, and low-cost interceptor production lines represent the highest near-term growth vectors in European defence procurement.
