Under the Shadow: How the Gulf Lives with Iran's Proxy Threat

The proxy network that analysts in Washington and London map in diagrams is something the Gulf states track in air defense radar returns. Saudi Arabia has intercepted missiles over its capital. The UAE has scrambled fighters against drone attacks on civilian infrastructure. Bahrain has disrupted Iranian-linked cells on its own territory. For the six members of the Gulf Cooperation Council, Iran's proxy apparatus is not a geopolitical concept. It is an operational threat with a documented record of attacks.

This article examines that record and the security response it has produced.

The Attack Ledger: Documented Incidents

The Houthis have been the primary delivery mechanism for Iranian proxy power directed at the Gulf since the Saudi-led coalition intervened in Yemen in March 2015.

Saudi Arabia absorbed the heaviest volume of attacks. Houthi missile and drone strikes targeted Saudi cities, airports, oil infrastructure, and military positions continuously from 2015 onward. The September 2019 attack on Saudi Aramco's Abqaiq processing facility and Khurais oil field was the single most consequential strike, temporarily halving Saudi oil output and removing approximately 5.7 million barrels per day from global supply. The US, Saudi Arabia, and UN investigators attributed the attack to Iran or Iranian-supplied weapons, though Tehran denied responsibility. Regardless of the launch origin, the drones and cruise missiles used matched Iranian military production patterns according to the UN's findings.

The UAE experienced a direct escalation in January 2022, when Houthi missiles and drones struck Abu Dhabi, hitting an oil storage facility at the Musaffah industrial area and areas near Abu Dhabi International Airport. Three civilians were killed. The attack marked the first time Houthi strikes had produced fatalities on Emirati soil and demonstrated the extending range and precision of Iranian-supplied weapons in Houthi hands. The UAE's THAAD and Patriot air defense systems intercepted a subsequent ballistic missile attack days later, the first confirmed operational use of the THAAD system in combat.

Bahrain faces a different category of threat. As a majority-Shia country governed by a Sunni monarchy, Bahrain has repeatedly uncovered Iranian-linked networks engaged in arms smuggling, bomb-making, and intelligence collection on its territory. Bahraini authorities have attributed multiple disrupted plots to IRGC coordination, including weapons caches and explosive device networks. The 2011 uprising, which the Bahraini government and its Saudi and Emirati allies suppressed with GCC Peninsula Shield Force deployment, remains a reference point for how Gulf states assess Iranian capacity to exploit internal vulnerabilities.

Beyond the Gulf states themselves, the Houthi campaign against Red Sea shipping from late 2023 onward directly affected regional maritime trade. Gulf ports, particularly Jeddah and the Saudi Red Sea coast, experienced disruption to commercial shipping routes. Insurance premiums for vessels transiting the Bab el-Mandeb strait increased sharply, adding costs that disproportionately affected regional economies dependent on maritime trade.

Why the Gulf Sees What Europe Does Not

The divergence between Gulf and European threat assessments of Iran is not primarily ideological. It is experiential.

European capitals assess Iran through a diplomatic framework centered on the nuclear file, missile proliferation, and the possibility of negotiated outcomes. This framework produces policies focused on engagement, sanctions, and incremental progress. The E3 format of France, Germany, and the United Kingdom has consistently pursued dialogue channels with Tehran, including through the JCPOA negotiations and subsequent revival attempts.

Gulf capitals assess Iran through an operational framework centered on demonstrated capability and intent. Saudi officials point to the Aramco attack, the Houthi missile campaign, and Iranian naval provocations in the Persian Gulf. Emirati officials reference the Abu Dhabi strikes and the broader pattern of Iranian weapons flowing to non-state actors across the region. Bahraini officials cite disrupted plots on their own soil.

When European leaders, most recently France's Macron, call for diplomatic engagement with Tehran, the Gulf response is shaped by a calculation that the Europeans consistently underweight: every month of diplomatic process is a month in which Iranian weapons continue to flow to the Houthis, Hezbollah, and Iraqi militias. From Riyadh's perspective, engagement without enforcement is not diplomacy. It is time-buying for the other side.

This is not a blanket rejection of diplomacy. Saudi Arabia and Iran reached a Chinese-brokered agreement to restore diplomatic relations in March 2023, demonstrating Gulf willingness to engage directly with Tehran. But the Gulf approach prioritizes concrete security guarantees over process-oriented diplomatic frameworks. The Saudi-Iranian deal included specific commitments on non-interference, not aspirational language about dialogue.

The Security Architecture: What the Gulf Built

The Gulf states have responded to the Iranian proxy threat by constructing an increasingly integrated security infrastructure that draws on multiple partnerships.

Air defense sits at the center. Saudi Arabia operates Patriot PAC-2 and PAC-3 systems across the kingdom, with a layered defense architecture designed specifically to counter the Houthi missile and drone threat. The UAE deploys both Patriot and THAAD systems, with the Abu Dhabi intercepts in January 2022 validating the latter's combat effectiveness. Both countries have invested billions of dollars in air defense procurement, a direct consequence of the proxy threat.

The Abraham Accords, signed by the UAE and Bahrain with Israel in September 2020, contained a security dimension that is often overshadowed by the diplomatic and economic narratives. Intelligence sharing on Iranian threats, joint military exercises, and defense technology cooperation have expanded between Israel and Gulf signatories. The I2U2 grouping of India, Israel, the UAE, and the United States, while formally focused on economic cooperation, also reflects an emerging security alignment that responds in part to shared concerns about Iranian proxy activity and maritime security.

GCC states have also expanded their bilateral security partnerships. The Saudi-US defense relationship remains the cornerstone, with combined air defense operations and intelligence sharing focused specifically on the Houthi threat. The UAE has diversified its defense partnerships to include France, the United Kingdom, and South Korea, reducing dependence on any single supplier.

Joint GCC military exercises have increased in frequency and complexity. The Peninsula Shield Force, originally designed for internal security contingencies, has expanded its mandate to include external defense cooperation. While the GCC's collective defense capacity remains less than the sum of its parts due to political differences between member states, the trajectory is toward greater integration in response to the shared Iranian threat.

The Financial Dimension: Gulf States as Sanctions Enforcers

Gulf financial centers, particularly Dubai, have historically been transit points for Iranian sanctions-evasion networks. The IRGC and its proxy financing apparatus have exploited the UAE's position as a regional trading hub, using front companies and re-export networks to move money and goods.

This has placed the Gulf states in an awkward position. Emirati authorities have cooperated with US Treasury investigations and implemented compliance measures, but the sheer volume of trade flowing through Dubai makes comprehensive enforcement difficult. The tension between the UAE's role as a commercial hub and its security interest in containing Iranian financial networks remains unresolved.

Saudi Arabia and other GCC states have invested in financial intelligence capabilities aimed at disrupting proxy funding flows, working with FATF recommendations and US-led sanctions architecture. The irony is not lost on Gulf officials: the same financial infrastructure that connects the region to global commerce also provides channels that Iranian proxy financing exploits.

The Sunni-Shia Lens: Geopolitics Disguised as Sectarianism

Gulf governments frame the Iranian proxy threat primarily as a state-to-state security challenge, not as a sectarian conflict. Saudi officials consistently describe Iranian behavior as expansionist state policy that instrumentalizes sectarian identity rather than genuinely representing Shia communities.

The distinction matters because the sectarian frame obscures the geopolitical calculation. Iran does not support the Houthis because they are Zaydi Shia. It supports them because they serve Iranian strategic interests in disrupting Saudi Arabia's southern border and extending Iranian influence to the Bab el-Mandeb chokepoint. Iran does not arm Hezbollah because of shared Twelver Shia theology. It arms Hezbollah because the organization provides strategic depth against Israel and projects Iranian power into the Mediterranean.

Gulf states that host significant Shia populations, particularly Bahrain, Saudi Arabia's Eastern Province, and Kuwait, manage an internal dynamic that Iran's proxy strategy deliberately exploits. The IRGC has historically cultivated contacts within Shia communities in Gulf countries, not because all Gulf Shia align with Iran, but because even limited recruitment provides intelligence networks and potential destabilization capacity.

This creates a genuine security dilemma for Gulf governments: how to address Iranian external interference without alienating their own Shia citizens, who overwhelmingly hold legitimate domestic grievances unrelated to Iranian policy. The balance has not always been struck well, and human rights organizations have documented cases where Gulf security responses to perceived Iranian interference have disproportionately affected Shia communities.

What Has Changed Since 2023

The Saudi-Iranian agreement brokered by China in March 2023 marked a visible shift. Riyadh and Tehran restored diplomatic relations and exchanged ambassadors. The Yemen ceasefire, though fragile, reduced direct Houthi attacks on Saudi territory.

Assessment: this rapprochement has not fundamentally altered the proxy architecture. Iranian weapons continue to reach the Houthis. Hezbollah's capabilities remained intact until the significant Israeli military operations of 2024. PMF factions in Iraq maintain their Iranian links. What changed was the level of direct confrontation between Iran and Saudi Arabia, not the proxy infrastructure itself.

The Gulf states' security investments continue. Air defense procurement has not slowed. Intelligence cooperation with Israel and the United States has deepened. The GCC's collective assessment, based on available official statements and policy actions, appears to be that diplomatic engagement with Iran is useful but insufficient, and that security preparedness must proceed independently of any diplomatic process.

Gulf governments watch European diplomatic engagement with Tehran with a specific concern: that Western concessions on the nuclear file or sanctions relief could provide Iran with additional resources to fund its proxy network. The $6 billion in Iranian assets unfrozen as part of the 2023 US-Iran prisoner exchange triggered sharp criticism from Gulf-aligned commentators, who argued that any financial relief reaching Tehran would partially flow to proxy funding. Whether that assessment is correct remains debated, but it shapes how the Gulf evaluates Western diplomatic initiatives.

The proxy network remains operational. The Gulf states remain targeted. The security architecture built in response continues to expand. For the GCC, the distance between European diplomatic optimism and Gulf operational reality remains the defining gap in any Western-led approach to the Iran file.