Detection, mitigation, and contractor limits

SLTT framework (2026)

In July 2026, DOJ/DHS published a framework for qualifying state, local, tribal, and territorial law-enforcement and correctional agencies. It is not general permission for private sites or their contractors.

Source: Federal Register interim final rule.

28 CFR 124.4 — contractors

For SLTT agencies exercising authority under 28 CFR Part 124, contractors may provide technical support, system maintenance, and training assistance, but may not operate C-UAS mitigation systems, make credible-threat determinations, or execute mitigation actions. Turnkey or managed-service arrangements that give contractors de facto operational control are prohibited.

Source: eCFR 28 CFR 124.4.

Detection services carve-out

28 CFR 124.4 also states that detection services that do not require the authority of the Act or the relief it provides from certain laws may be provided by contractors. The carve-out is limited to detection services that do not need that statutory authority; it is not a blanket permission for detection.

Scope of support

• We integrate detection-led systems and support authorized operators.
• Detection requires review of functionality, communications interception, spectrum use, privacy, location, and operator authority.
• We do not offer contractor-operated neutralization for SLTT agencies.

Review before procurement

Mitigation is limited to authorized federal agencies and qualifying state, local, tribal, and territorial agencies under applicable requirements. Contractors do not inherit that authority. Counsel review of this site’s wording is pending.

Interagency legal advisory on detection and mitigation.