Platform: WILDFIRE / AGP-1 — reusable Group-3 multirole UAS Author: Chief Survivability Engineer & Airpower Strategist Core thesis: Iran has not solved drone warfare. It has solved one kind of drone — the large, GPS-dependent, datalinked, predictable, single-and-exquisite kind. WILDFIRE is built to be none of those things.
Iran and its proxies have compiled the most extensive combat record of killing American UAS anywhere on Earth. Three reference kills define the problem, and they fail in three different ways — which is the point.
RQ-170 Sentinel (Dec 2011) — lost without a shot. Iran recovered a largely intact stealth ISR drone ~225 km inside its border near Kashmar. Iran claims its EW operators (Russian-supplied Avtobaza, ~400 km detection) first jammed the satellite/ground datalink to force lost-link autonomy, then spoofed GPS to walk it down inside Iran. Western engineers dispute the pure GPS-spoof narrative (the RQ-170 runs INS as primary nav; auto-land needs runway/approach data spoofing can't supply) and credit datalink loss + INS reliance. The exact mechanism is disputed — the lesson is not: GPS dependence and datalink dependence are the twin exploitable vectors. [Both readings indict the same two weaknesses.]
RQ-4A Global Hawk / BAMS-D (20 Jun 2019) — a clean kinetic kill. A US Navy HALE drone was downed over the Strait of Hormuz by an Iranian 3rd Khordad SAM, engaged at ~70 km with the drone above 50,000 ft. (One Pentagon source cited an S-125-class shooter; 3rd Khordad is the dominant account.) Lesson: a large, non-stealthy, predictable, high-RCS HALE platform is killable by a single mid-tier SAM at any operational altitude.
MQ-9 Reaper — sustained, ruinous attrition. Houthis opened the campaign 8 Nov 2023 (and had killed an MQ-9 with an old SA-6 back in Jun 2019). By Apr 2025 Houthi claims reached ~21 downed; the US confirmed at least 7 lost in ~6 weeks (Mar–Apr 2025), >$200M at ~$30M/airframe. Then Operation Epic Fury (war beginning ~28 Feb 2026): a CRS-cited figure of 24 MQ-9s destroyed in ~6 weeks — ~$720M, ~20% of the pre-war Reaper fleet, some shot down, some struck on the ground. The dominant kill mechanism: Iran's radar-silent Missile 358 / Saqr loitering interceptor — an EO/IR-homing "drone ambush" pre-positioned along predictable Reaper loiter routes. [Recent 2025–2026 totals lean heavily on Houthi/Iranian claims and secondary trade outlets citing CRS; the trend is robust, exact counts are softer — treat 24 as well-supported but partly secondary-sourced.]
The common DNA of every loss:
| Vulnerability | How Iran exploited it |
|---|---|
| GPS dependence | Spoofable/jammable nav — Gulf spoofing scrambled 1,100+ ships in 24h during the 2025 war; vessels shown "on land," at airports, on a nuclear plant |
| Datalink dependence | Jam the C2 link → force lost-link/hijack states (RQ-170) |
| Predictable profiles | Slow (~300 mph), fixed altitudes, long loiter orbits → pre-positioned 358 ambushes |
| Large RCS | MQ-9/RQ-4 never designed for contested airspace — easy radar tracks |
| Strong IR signature | Turboprop exhaust feeds IR-guided SAMs and 358 EO/IR seekers |
| No self-defense | No MAWS/LWR, no high-G evasion (would cost endurance) |
| Few & exquisite | $30M (MQ-9) / $200M+ (RQ-4) lost to cheap SAMs — catastrophic cost-exchange |
WILDFIRE was designed by reading this list backwards.
Iran's IADS is real and layered. It is also optimized for, and proven against, large high-altitude high-RCS targets — and brittle to saturation, EW, and SEAD (Israel destroyed ~80 of ~100 AA systems and ~70 radars in hours during Operation Rising Lion, June 2025).
| System | Envelope (range / altitude) | What it kills | Limitation / WILDFIRE seam |
|---|---|---|---|
| Bavar-373-II | Det 320 km / track 260 km; engage alt ~27 km (claims 400 km, 32 km); Sayyad-4B to ~300 km | The genuine HALE-altitude threat; tracks ~60 / engages only 6 | Hard engage-6 saturation ceiling; degraded vs low-RCS; standalone batteries brittle to EW/SEAD; targeted in Jun 2025 |
| 3rd Khordad | Det 200 / track 150 km; alt 25–30 km; firing 50–200 km; 4 engaged | Proven HALE killer (RQ-4A, 2019) | Only 4 simultaneous engagements; emits radar (detectable/targetable) |
| Khordad-15 | Det 150 km (85 vs stealth) / track 120 km (45 vs stealth); alt ~27 km; firing 75–120 km | City/infra defense; anti-stealth/drone | Envelope collapses ~40% vs low-RCS — a built-in admission |
| 9th of Dey | Firing 5–30 km; alt ceiling 10 km; 8 missiles/8 targets; laser-fuze | Purpose-built vs stealth drones, cruise missiles, saturation | Cannot reach HALE transit; short range = point defender, individually saturable |
| Tabas | Det 60 km; firing ~75 km; alt 27 km; 4 engaged | Khordad-family medium SAM | Much shorter detection than 3rd Khordad |
| Raad-2 | EO det 55–80 km; alt to ~50 km (claim); passive-homing | Medium SAM that can shoot without radar emission | Quieter threat — defeats RF-only MAWS logic (see §3) |
| Mersad / Mersad-16 | Det 150 km; firing 40–75 km; alt ~18 km | Improved-Hawk-class | Marginal/incapable vs 60k-ft transit; lower-tier layer |
| Tor-M1 / Dezful | Range 1.5–12 km; alt ceiling ~6 km | Low-altitude PGM/drone point defense | Cannot touch HALE; threatens WILDFIRE only on low/terminal runs |
| Pantsir-S1 | Missile to 20 km/15 km alt; 30 mm gun to 4 km | Gun+missile point defense | Documented poor radar vs small/low/slow drones (Ukraine, Iraq); often killed by cheap drones |
| Missile 358 / Saqr | ~Mach 0.6 loiter in a patrol box; EO/IR/optical fuze | Emergent #1 MQ-9 killer; radar-silent ambush | No radar signature → defeats RF-based MAWS; keys on predictable loiter routes |
| Avtobaza-M (EW) | ~400 km ELINT/jam; GPS spoof/jam | C2 links, GPS-dependent nav | Useless against an emission-free, GPS-denied vehicle |
Two cross-cutting truths to exploit: 1. The long-range layer's lethality is gated by detection/track quality against low-RCS targets, not missile reach — and that quality measurably collapses (Khordad-15: 150/120 → 85/45 km). 2. The layer that can see low/slow/small (Tor, Pantsir, 9 Dey, Dezful) is short-range, low-ceiling, and individually saturable — and Pantsir is genuinely bad at it.
Every line below maps a specific Iranian capability to the specific WILDFIRE design feature that defeats or tolerates it.
| Iranian threat | Mechanism | WILDFIRE counter | Maturity |
|---|---|---|---|
| GPS spoofing (1,100+ ships scrambled; RQ-170 narrative) | Feed false position to GPS-dependent guidance | Vision-only, GPS-denied autonomy — terrain/feature relocalization; no satellite signal to corrupt | Combat-proven (Ukraine OSCAR / Pathfinder Air / Sine.Engineering VO in the world's worst EW) |
| GPS jamming (Avtobaza-M, ~400 km) | Deny the GPS signal entirely | Same — no GNSS receiver in the nav loop; nothing to deny | Combat-proven |
| Datalink jamming → lost-link hijack (RQ-170) | Sever C2 to force lost-link/auto-land states | Datalink-optional, onboard/edge-AI autonomy — swarm executes mission intent with no link; degrades gracefully, never "lost-link" | Doctrinally aligned (DARPA EVADE/OFFSET; AL-4 swarms) |
| Long-range SAM, large-RCS track (Bavar-373, 3rd Khordad, Khordad-15) | Detect/track at 120–260 km, engage at altitude | Small composite low-signature pusher + low-altitude terrain-masked ingress → below radar horizon, compressed detection windows, collapsed low-RCS envelopes; saturation exceeds engage-6/engage-4 ceilings | Airframe mature; saturation doctrine proven (Shahed campaigns) |
| Long-range SAM, magazine attrition | Spend $1–4M+ interceptors per target | ~$130k reusable airframe → defender loses the cost-exchange ~31:1 per shot, worse over reuse (see §4) | Economics proven (June 2025 magazine crises) |
| Point-defense SAM/AAA (Tor 6 km, Pantsir, 9 Dey 10 km, Dezful) | Kill low flyers at short range | Affordable mass + swarm saturation overwhelms saturable point defenders; low IR/RCS exploits Pantsir's documented small-drone blind spot; divert "dodge" motor vs terminal shots | Airframe/mass proven; divert developmental (§5) |
| IR/EO-guided terminal shot (Missile 358/Saqr, MANPADS, Raad-2 EO) | Radar-silent EO/IR seeker on a predictable loiter route | Laser/missile-approach threat-warning + lateral solid divert "dodge" motor (sudden off-axis accel the seeker can't match) + low IR signature (pusher) + unpredictable, non-loitering routing | Developmental for Group-3 — credible vs terminal/short-range/DE, unproven vs high-energy long-range SAM (§5) |
| Passive EO shooter, no RF emission (Raad-2) | Engage without radar to defeat RF-based warning | EO/IR + laser-MAWS threat-warning (not RF-only) + low optical/IR signature + divert | Developmental |
| HPM / directed-energy swarm-killer (the next counter) | One HPM shot, many cheap kills, ~$0/engagement | Faraday-shielded enclosure + optical (fiber) data bus — optical buses don't couple HPM into avionics; shielding raises the upset/damage threshold | Engineering counter; positions WILDFIRE against the next generation |
| Manned fighters / CCA-class interceptors | Run down a slow subsonic drone | Standoff launch (1,500–2,500 km radius) keeps the launch asset out of reach; low signature + unpredictable axes complicate intercept geometry; attrition tolerance — losing a few is acceptable; team with exquisite CCA that exploit the suppressed environment | Standoff proven (Liutyi); teaming doctrine emerging (YFQ-42A/44A) |
| SIGINT/DF kill-chain vs emitters | Locate and target emitting drones | Emission-free option (vision-only, datalink-optional) — no RF to direction-find | Proven principle |
The architecture's elegance: the same low-signature, GPS-denied, datalinked-optional, attritable-mass design that defeats the long-range radar layer is what makes the short-range layer's saturation problem unsolvable. Iran cannot tune one layer to fix WILDFIRE without opening another.
Phase 0 — Standoff launch (outside the envelope). Launch from dispersed/hidden sites at WILDFIRE's 1,500–2,500 km radius — the launching asset never enters defended airspace. Ukraine's Liutyi (~$55k, 1,500–1,700 km, hit 16 Russian refineries) proves a cheap airframe does exactly this. Standoff converts Iran's geographic depth from an asset into a liability: every approach corridor must be defended, thinning SAM density and magazine depth per sector. Threat arrives from unpredictable axes.
Phase 1 — Ingress (defeat the physics of detection). Fly low, terrain-masked, GPS-denied on vision-only nav. Radar needs line-of-sight; terrain masking + small composite RCS keeps WILDFIRE below the radar horizon and in clutter, where Iran's high-altitude/BMD-optimized surveillance is weakest. The IADS gets short detection windows, compressed engagement timelines, degraded SAM Pk, and is pushed toward wasteful early shots. No GPS to spoof, no datalink to sever, no emission to direction-find.
Phase 2 — SEAD/DEAD + decoy (blind the network). The decisive lesson of Operation Rising Lion: degrade the sensor/C2 layer first — once radars and nodes are blinded, the expensive interceptors are inert (SAMs were largely "absent" from June 2025 footage). WILDFIRE's mixed swarm runs the ADM-160 MALD playbook against itself: blend real strikers, EO/IR + SIGINT/EW find-fix nodes, SAR mappers, and decoy-configured vehicles. Every track becomes a dilemma — shoot (spend a $4M PAC-3 on a $130k drone) or don't (let a striker through). WILDFIRE's multirole payloads let it self-perform all four MALD roles: Preemptive Destruction, Reactive Suppression, Diversion, Saturation. Make the Najm/Bashir/Qods radars emit, locate them, kill them.
Phase 3 — Saturation (exhaust the magazine). This is where Iran's IADS actually breaks. Bavar-373-II tracks ~60 but engages only 6; 3rd Khordad engages 4. A swarm of dozens of low-RCS contacts exceeds simultaneous-engagement capacity by design while shrinking the 60-track picture (low RCS) and spoofing it (onboard EW). Magazine depth — not radar coverage — is the binding constraint, proven on both sides in June 2025 (Israel reportedly neared Arrow depletion). Iran's own doctrine is attrition: erode the stockpile. WILDFIRE turns that doctrine against its author.
The attrition economics — the central lever:
Phase 4 — Exploit + team up. WILDFIRE is the affordable-mass front edge that opens corridors; exquisite CCA (YFQ-42A/44A, ~tens of $M) and crewed assets then operate in the suppressed environment — the Rising Lion combined-arms model (cheap inside/forward layer blinds the IADS; premium platforms exploit). WILDFIRE sits below the CCA price tier and can be lost freely.
A credible plan names its own failure modes.
The terminal-divert "dodge" motor is the least-proven element. MAWS (AN/AAR-47) and LWR (AN/AVR-2) are mature on crewed aircraft, and the evasion physics (drive up line-of-sight rate so the seeker/kinematics can't close) are well established. But a cued lateral solid-divert on a Group-3 UAS defeating a modern interceptor is not publicly combat-demonstrated. It is a design bet, most credible against terminal/short-range and directed-energy threats, least credible against high-energy long-range SAMs (Bavar-373/3rd Khordad) where intercept energy and warhead lethal radius are high. Treat as developmental; do not brief it as fielded. [Developmental]
The high-altitude layer can still reach us if it sees us. Bavar-373 and 3rd Khordad can engage at any altitude WILDFIRE flies if they achieve a quality track. Survivability rests on denying the track (low RCS, terrain masking, saturation), not on out-flying the missile. A WILDFIRE caught high, alone, and tracked is at risk like any other airframe.
Passive EO/IR shooters bypass RF logic. Raad-2's passive-homing mode and the radar-silent 358/Saqr give no RF cue. WILDFIRE must rely on EO/IR + laser-based warning and low IR signature + unpredictable routing, not RF MAWS — and these are exactly the harder warning problems.
HPM is a real swarm-killer. Faraday shielding + optical bus raise the threshold but do not make WILDFIRE immune; a sufficiently powerful or close HPM shot can still upset/damage avionics, and HPM's one-shot-many-kills economics directly attack the affordable-mass thesis. [TBD] shielding effectiveness vs specific Iranian/partner HPM fielding.
Saturation requires numbers we must actually have. The entire engage-6/engage-4 overwhelm argument depends on fielding enough vehicles per axis to exceed simultaneous-engagement ceilings and survive early attrition. Inadequate mass = a defeated raid. WILDFIRE's value is inseparable from producing and launching it at scale and from teaming with EW/decoy/CCA — it is a system, not a silver bullet. [ASSUMPTION] production and launch infrastructure scale to required raid sizes.
The network can be hardened or reconstituted. June 2025 SEAD success was extraordinary and partly enabled by pre-positioned inside-Iran assets. A fully-networked, dispersed, EMCON-disciplined Iranian IADS that refuses to emit is a harder target — WILDFIRE's SEAD value drops if the radars won't turn on, and we then rely more on saturation and decoys to force emission.
Bottom line: WILDFIRE does not make any single Iranian weapon obsolete. It makes Iran's kill chain — detect a large RCS, track a predictable GPS/datalinked target, ambush it on a known route, and trade a cheap interceptor for an exquisite airframe — stop closing. Where it can still be killed, it is killed cheaply, reusably, in numbers, and mostly it comes home. That is the win condition the MQ-9 and RQ-4 never had.