DJI Publishes Independent Security Assessment Amid Ongoing FCC Covered List Discussions

DJI Releases Results of Cybersecurity Assessment

DJI has published the findings of an independent cybersecurity assessment conducted by the U.S.-based security firm OnDefend. This release comes as the company continues to appeal its inclusion on the Federal Communications Commission’s (FCC) Covered List.

Assessment Overview

The assessment focused on two DJI drone systems, the DJI Air 3S and the DJI Matrice 4E, and was conducted over a five-month period from October 2025 to March 2026. According to the report, OnDefend reported “zero critical, high, and medium-risk findings” during the evaluation.

DJI indicated that the assessment encompassed software, hardware, firmware, and radio frequency testing. The consumer devices were purchased independently from retail channels without prior notice to DJI, while enterprise systems were sourced from dealer inventory.

Findings of the Security Assessment

Key findings from the assessment include:

• No evidence of data transmission outside the United States
• No identified backdoors or unauthorized remote access mechanisms
• No unexplained radio frequency emissions
• No detected supply chain tampering or unauthorized hardware modifications

The report also noted ten low-risk findings and thirteen observations primarily related to application security configurations and wireless hardening. DJI stated that remediation efforts are in progress through future software updates.

OnDefend emphasized that the testing found “no clear evidence of hidden backdoors, no data transmissions outside the United States, and no viable pathways for hijacking or weaponization.”

DJI’s Position on FCC Covered List

DJI’s inclusion on the FCC Covered List in December 2025 has become a significant issue within the U.S. drone industry. The Covered List identifies communications equipment and services deemed to pose a risk to national security. DJI has contested this designation, asserting that no specific technical vulnerabilities have been publicly identified.

The FCC has received substantial public feedback on this matter, with over 3,000 comments submitted regarding DJI’s petition against its Covered List designation.

Shifting Focus to Supply Chain Security

The discussion surrounding DJI and other foreign-manufactured drone systems has evolved over recent years. Initial concerns primarily focused on platform-level cybersecurity issues, such as data transmission and software integrity.

However, U.S. government officials have increasingly framed the issue in terms of supply chain resilience and strategic manufacturing capacity. At a recent presentation, Defense Innovation Unit (DIU) Director Travis Metz highlighted the challenges of relying on foreign suppliers in times of conflict.

Metz stated, “If we were at war with our likely adversaries and needed millions of these drones, those adversaries would not sell us the parts to build them. We have to plan for a future where we cannot purchase parts from our adversaries.”

This shift in focus is reflected in various federal actions, including FCC proceedings and Department of Defense procurement programs aimed at promoting domestic drone manufacturing and component sourcing.

Ongoing FCC Review and DJI’s Response

The FCC’s review process now encompasses both cybersecurity evaluations and broader considerations regarding trusted supply chains and long-term industrial capacity. DJI asserts that the findings from the OnDefend assessment support its argument that the concerns leading to its Covered List designation lack technical evidence.

Adam Welsh, Head of Global Policy at DJI, stated, “This is the most comprehensive independent security assessment ever undertaken on our products. These findings confirm what DJI has consistently maintained: our products are secure, our data practices are transparent, and the concerns underlying our FCC Covered List designation are not supported by technical evidence.”

DJI plans to continue its engagement with the FCC as its appeal process progresses. The company’s drones are widely utilized across various sectors in the United States, including public safety, agriculture, infrastructure inspection, and media production.