DJI Unveils Results of Comprehensive Independent Drone Security Assessment
DJI, the world’s leading drone manufacturer, recently presented the conclusions of a comprehensive independent security evaluation conducted by OnDefend, a U.S.-based cybersecurity firm recognized for its rigorous assessment methods. This evaluation, which focused on two of DJI’s flagship products, the Air 3S and Matrice 4E, marks a significant moment in the ongoing conversation about drone safety and data security.
The assessment included extensive adversarial testing over five months, examining both hardware and software vulnerabilities, as well as radio frequency emissions. To ensure transparency and the accuracy of the results, DJI authorized this independent evaluation while the testing was conducted without prior notice to DJI.
One of the standout discoveries from this evaluation is the complete absence of high, medium, or critical risk findings. Specifically, OnDefend confirmed that:
Despite these positive outcomes, the evaluation did reveal ten low-risk findings and thirteen observations, mostly related to security configurations, session management, and wireless connection reinforcement. However, none of these issues realistically threaten drone operations or the exposure of sensitive information. DJI is working closely with OnDefend to address these minor concerns in future software updates.
Conducted from October 2025 to March 2026, the evaluation was structured around three main safety concerns: data sovereignty, hardware vulnerabilities, and risks of drone manipulation. Tests performed were not only conventional but included advanced assessments such as dismantling hardware for detailed component analysis, and conducting full radio frequency spectrum scans.
OnDefend’s security team, comprising professionals with extensive operational experience in national security, utilized proprietary testing technologies that integrate AI-driven imaging and silicon-level analysis to identify unauthorized transmission channels and counterfeit components.
Adam Welsh, DJI’s global policy director, commented on the assessment, stating, "This is the most comprehensive independent security evaluation ever carried out on our products. These findings reaffirm that our products are secure, our data management practices are transparent, and the concerns surrounding our inclusion in the FCC Covered List lack technical evidence."
DJI’s presence on the FCC Covered List, designated in December 2025, raised questions due to the absence of specified vulnerabilities that could substantiate such an action. DJI has challenged this designation and is advocating for an evidence-based review of their security posturing. The potential restrictions posed by this designation could adversely affect their extensive customer base across sectors like public safety, agriculture, and media. Over 80% of the more than 1,800 state and local public safety agencies relying on drones for search and rescue operations and investigation documentation favor DJI equipment.
These findings from OnDefend serve as a vital reassurance not just for DJI, but for all stakeholders involved in drone technology and its various applications. They underscore the importance of continual security validation and the need for independent testing as the industry evolves.
For further details regarding this security audit, including the executive summary, consumers can visit the DJI Trust Center to understand more about the company’s commitment to ongoing improvements in product security and independent validation processes.
The assessment included extensive adversarial testing over five months, examining both hardware and software vulnerabilities, as well as radio frequency emissions. To ensure transparency and the accuracy of the results, DJI authorized this independent evaluation while the testing was conducted without prior notice to DJI.
Key Findings of the Security Assessment
One of the standout discoveries from this evaluation is the complete absence of high, medium, or critical risk findings. Specifically, OnDefend confirmed that:
- - No signs of data transmission outside the United States were identified. All observed connections from DJI's flight control apps were routed through U.S.-based infrastructure.
- - The absence of backdoors or unauthorized remote access mechanisms was confirmed, as all control attempts to jailbreak or modify firmware were successfully resisted.
- - No unexplained radio frequency emissions were detected, with all signals traced back to known system functions. Emissions previously unlisted in FCC records were determined to be standard artifacts of signal generation, not hidden channels.
- - No evidence of supply chain tampering or unauthorized hardware modifications was found.
Despite these positive outcomes, the evaluation did reveal ten low-risk findings and thirteen observations, mostly related to security configurations, session management, and wireless connection reinforcement. However, none of these issues realistically threaten drone operations or the exposure of sensitive information. DJI is working closely with OnDefend to address these minor concerns in future software updates.
The Evaluation Process and Its Importance
Conducted from October 2025 to March 2026, the evaluation was structured around three main safety concerns: data sovereignty, hardware vulnerabilities, and risks of drone manipulation. Tests performed were not only conventional but included advanced assessments such as dismantling hardware for detailed component analysis, and conducting full radio frequency spectrum scans.
OnDefend’s security team, comprising professionals with extensive operational experience in national security, utilized proprietary testing technologies that integrate AI-driven imaging and silicon-level analysis to identify unauthorized transmission channels and counterfeit components.
Adam Welsh, DJI’s global policy director, commented on the assessment, stating, "This is the most comprehensive independent security evaluation ever carried out on our products. These findings reaffirm that our products are secure, our data management practices are transparent, and the concerns surrounding our inclusion in the FCC Covered List lack technical evidence."
The Impact on DJI and Its Users
DJI’s presence on the FCC Covered List, designated in December 2025, raised questions due to the absence of specified vulnerabilities that could substantiate such an action. DJI has challenged this designation and is advocating for an evidence-based review of their security posturing. The potential restrictions posed by this designation could adversely affect their extensive customer base across sectors like public safety, agriculture, and media. Over 80% of the more than 1,800 state and local public safety agencies relying on drones for search and rescue operations and investigation documentation favor DJI equipment.
These findings from OnDefend serve as a vital reassurance not just for DJI, but for all stakeholders involved in drone technology and its various applications. They underscore the importance of continual security validation and the need for independent testing as the industry evolves.
For further details regarding this security audit, including the executive summary, consumers can visit the DJI Trust Center to understand more about the company’s commitment to ongoing improvements in product security and independent validation processes.
Topics Consumer Technology）
【About Using Articles】
You can freely use the title and article content by linking to the page where the article is posted.
※ Images cannot be used.
【About Links】
Links are free to use.