NATO emphasizes that hybrid activities may indeed reach the level of an armed attack, but at the same time many such activities remain below, or on the edge of, the escalation threshold. The key question is therefore how the Alliance should respond to the growing wave of grey-zone attacks. This article analyses that challenge and proposes the development of a doctrine of collective resilience, combining deterrence, active defence, and enhanced civil-defence readiness as a complement to Article 5.