#USA #Shenzhen #DJI #Drone Security #OnDefend

DJI Unveils Results of Comprehensive Security Assessment for Drones

DJI, the preeminent name in drone manufacturing, has announced the results of an extensive independent security assessment performed by cybersecurity firm OnDefend. This initiative was aimed at probing the security robustness of its flagship models: the DJI Air 3S and the Matrice 4E. Over a five-month period, the drones underwent rigorous adversarial evaluations that spanned various domains including software integrity, hardware resilience, and radio frequency efficacy.

Scope of the Assessment

The assessment, carried out from October 2025 to March 2026, was designed to address three principal national security concerns which are data sovereignty, hardware vulnerabilities, and potential risks related to drone manipulation. OnDefend, recognized for its unique capabilities in advanced cyber testing, conducted a thorough examination using cutting-edge technology that included hardware teardown, RF analysis, and silicon-level scrutiny to detect any unauthorized transmission pathways or modifications.

The accuracy of the assessment was further reinforced by acquiring devices from retail sources without pre-notification to DJI, ensuring that the evaluation reflected typical consumer use scenarios. All subject units were representative of standard distribution in the U.S. market.

Key Findings

The findings from this substantial probe were remarkably reassuring. Notably, there were no critical, high, or medium-risk vulnerabilities identified. Here are some highlights:

• - Data Security: The examination determined that no data was being transmitted outside of the United States. All traffic related to DJI's flight control applications was confirmed to resolve only to U.S.-based servers.
• - No Backdoors Detected: OnDefend’s analysis confirmed that there were no backdoors or unauthorized remote access methods present on the devices. Attempts to jailbreak or modify the firmware were unsuccessful.
• - Radio Frequency Emissions: All scanned emission signals aligned with known system functions, and potential concerns regarding unexplained emissions traced back to standard signal generation characteristics rather than any covert channels.
• - Supply Chain Integrity: No evidence of supply chain interference or hardware alterations was found, ensuring that the integrity of components remained uncompromised.

Despite these promising results, the assessment did highlight ten low-risk findings primarily related to application security configurations and session handling. However, none of these posed a significant threat to the secure operation of the drones. DJI is collaborating with OnDefend to address these lower-risk items in future updates.

DJI's Response

Adam Welsh, DJI’s Head of Global Policy, commented on the assessment’s findings, asserting, "This is the most comprehensive independent security assessment ever undertaken on our products. These findings not only confirm that our products are secure but also highlight our commitment to transparent data practices. We urge the Federal Communications Commission (FCC) to consider these results thoroughly in light of our ongoing appeal against the Covered List designation."

This designation, which was implemented in December 2025, lacked specific identification of security vulnerabilities, reinforcing DJI’s stance that regulations should be substantiated by factual assessments rather than assumptions.

Conclusion

As DJI drones play a vital role across various sectors in the United States, including public safety and creative industries, the findings of this independent assessment come as a significant relief to users who depend on the reliability of their technology. The absence of critical vulnerabilities makes a compelling case for continued usage of DJI systems.

To learn more about this assessment and DJI's commitment to security, visit the DJI Trust Center for detailed insights and future updates regarding product security evaluations.