TSA's new gate pass concedes 25 years of security theater — but only for paying members

Two days before the 25th anniversary of the September 11 attacks, the Transportation Security Administration did something it has refused to do for a quarter century: it let people without boarding passes walk back to the gate. On September 9, the agency launched Gateside by TSA PreCheck at Bill and Hillary Clinton National Airport in Little Rock and twelve other airports, reviving the pre-9/11 ritual of walking a relative to the jet bridge or simply killing time at an airport bar. It is a small policy, but it carries an outsized admission: that one of the oldest, most visible pillars of post-9/11 security theater was never about danger at the gate in the first place. The trouble is what TSA did next. Rather than treat that admission honestly, it turned the reopened gate into a loyalty perk, available only to the roughly one in fifteen Americans who have paid to be pre-vetted — leaving the security logic of the other 95 percent of travelers exactly where it was on September 12, 2001.

A Door That Opens Only for Subscribers

The mechanics of Gateside are almost aggressively bureaucratic for something this symbolic. A traveler must already hold TSA PreCheck or another trusted-traveler credential, then apply online one to three days before a planned visit, enter a Known Traveler Number, wait for approval, and present a REAL ID at the checkpoint — where, TSA is careful to note, "all individuals accessing the secure area are subject to TSA security screening." Nothing about the checkpoint itself changes. The only thing that changes is who is allowed to walk up to it without a ticket at all, a privilege that, before 2001, belonged to anyone.

That distinction matters because TSA PreCheck is not free, and it is not universal. A standard five-year enrollment costs in the neighborhood of $77 to $85 depending on the vendor, plus an in-person appointment and a background check. TSA announced in 2024 that the program had surpassed 20 million active members — a genuine achievement, but still a small fraction of the roughly 250 million adults in the United States and a rounding error next to the nearly 900 million passenger screenings TSA performs annually. Gateside does not reopen the airport to the public. It reopens a sliver of the airport to people who could already glide through security in a shorter line, and now offers them one more reason to keep paying.

Risk-Based Security, Selectively Applied

TSA's official justification rests on the idea of "risk-based security," the framework the agency adopted after 2011 that says a traveler who has already been vetted poses less risk and can reasonably be screened less intensively. That is a defensible principle, and it is the same logic underlying PreCheck lanes generally. But applied to gate access, it quietly concedes something bigger than TSA seems to want to say out loud: that unscreened, unvetted members of the public loitering near a gate — the exact population barred since 2001 — were never actually the threat the post-9/11 rule was written to stop. If they were, vetting status would be irrelevant, because Gateside visitors still pass through the same walk-through metal detectors and X-ray belts as everyone else. The only variable Gateside changes is whether a person needed a boarding pass to get that far. If that variable was safety-relevant, PreCheck membership shouldn't cure it. If it wasn't, the restriction should never have applied to anyone in the first place.

This is not a hypothetical concern about TSA's rulemaking rigor. A 2019 investigation by the Government Accountability Office found that TSA's own Security Vulnerability Management Process — created in 2015 specifically to fix problems its covert testers kept finding — "had not yet resolved any identified security vulnerabilities" as of September 2018, in part because the agency had never set deadlines for fixing them. The Department of Homeland Security's inspector general has kept probing the same terrain since: a verification review published last November was still checking whether TSA's fixes to checkpoint screening gaps had actually taken hold years after they were first flagged. An agency with that track record on the screening itself is now making case-by-case, fee-linked judgments about who deserves to skip a rule nobody has rigorously shown protects anyone.

The Strongest Case for Caution

None of this means Gateside is reckless. The fairest defense of the program is that it is a cautious, reversible pilot, not a wholesale reopening of American airports. Every Gateside visitor is still screened at the checkpoint; nobody walks past a metal detector on the strength of a Known Traveler Number alone. Limiting the trial to 13 airports lets TSA watch for the crowding and checkpoint-congestion problems that gate-area retailers and some travelers have already flagged, before deciding whether to scale it up. And restricting eligibility to PreCheck members is not arbitrary discrimination — those travelers have already submitted fingerprints and passed a background check that an anonymous member of the public has not, so treating them differently is not unreasonable in a risk-based framework. As NPR reported when the program launched, TSA is explicitly framing this as a limited, incremental step, not a repeal of the post-9/11 architecture. Judged as a pilot rather than a policy statement, Gateside is a modest, low-risk experiment, and modest experiments are, in general, how bureaucracies are supposed to change.

"This was a security measure that addressed one specific attack from decades ago, but didn't actually make anyone safer... These rules create the illusion of security but don't reduce the risk." — Bruce Schneier, security technologist

What Actually Keeps Planes Safe

That defense is reasonable as far as it goes, but it sidesteps the deeper question Gateside raises rather than answers: if the underlying concern is what happens at the checkpoint, not who's approaching it, then the fix belongs at the checkpoint for everyone, not in a $78 membership tier. As the security technologist Bruce Schneier has argued about the parallel unwinding of the shoe-removal rule this year, many of the TSA's signature post-9/11 restrictions were built to close one specific, already-obsolete vulnerability rather than to reduce risk generally, and the agency has rarely subjected them to the kind of evidence TSA now implicitly claims to have for Gateside. TSA is funded at roughly $11.5 billion this fiscal year and screens hundreds of millions of people annually on the strength of rules like the one it just partially reversed. If risk-based analysis really shows that boarding-pass-free access to a screened terminal is safe, that finding should inform how TSA treats the tens of millions of Americans who cannot afford or qualify for PreCheck, not just the ones who can. Safety-relevant conclusions shouldn't come with a subscription fee attached.

An Honest Anniversary Question

Twenty-five years on, that is the more useful debate than the culture-war framing of "TSA finally admits security theater was fake." Gateside is a genuine, if narrow, act of institutional honesty: a tacit acknowledgment that some post-9/11 barriers outlived whatever threat model justified them. The right response to that honesty is to extend it — to keep testing which restrictions still earn their cost in the billions of dollars and hundreds of millions of screenings TSA runs every year, and to apply whatever it learns broadly rather than selling it back to travelers one Known Traveler Number at a time. Anything less turns a legitimate security reassessment into a marketing department's idea of what the anniversary of a national tragedy should produce: a loyalty perk with a security badge stapled to it.