ARTFEED — Contemporary Art Intelligence

Independent Audit Finds No Security Basis for Restricting DJI in the USA

other · 2026-05-28

OnDefend, a U.S.-based cybersecurity firm, conducted an assessment and found no valid security issues that would warrant banning DJI products in the U.S. Their evaluation looked at the DJI Air 3S with the RC 2 controller and the DJI Matrice 4E with the RC Plus 2 Enterprise controller. They used sophisticated testing methods across software, hardware, and radio frequencies, sourcing the devices from both retail and dealers. The results showed no significant security risks, no evidence of data transmission outside the U.S., and no unauthorized access. Following the government's failure to perform a required audit in 2024, DJI was automatically added to the FCC Covered List in December 2025, which they are challenging. Currently, the FCC is considering over 3,000 public comments on this matter. Adam Welsh from DJI highlighted that the findings support the safety and openness of their products and insisted that policy decisions should rely on solid facts.

Key facts

  • OnDefend conducted an independent security assessment of DJI drones.
  • No critical, high, or medium-risk security issues were found.
  • No evidence of data transmission outside the United States.
  • No backdoors or unauthorized remote access mechanisms were detected.
  • Controllers resisted all jailbreak and firmware modification attempts.
  • No supply chain tampering or unauthorized hardware modifications were found.
  • Ten low-risk findings and thirteen observations were identified.
  • DJI was included on the FCC Covered List in December 2025 without a specific documented security vulnerability.

Entities

Institutions

  • OnDefend
  • DJI
  • FCC

Locations

  • United States

Sources