DJI releases independent security audit findings, claims no data breaches

Independent scrutiny and technical transparency are essential to informed policymaking
DJI argues that the audit results should shape how regulators approach the company's operations.

In an era when trust between nations is negotiated as much through technical audits as diplomatic channels, DJI has invited outside scrutiny of its drone systems and chosen to publish the results openly. A U.S.-based cybersecurity firm found no evidence of the data leakage, unauthorized access, or supply chain interference that have fueled regulatory anxiety in Washington. The gesture is as much a philosophical argument as a technical one — that transparency, not reassurance, is the proper currency of accountability.

  • DJI faces an existential regulatory threat in the U.S. market, where its Chinese ownership has made its drones a flashpoint in the broader war over technology and national security.
  • The specific fears — silent data transfers abroad, hidden radio emissions, compromised hardware — are not abstract; they represent the exact vulnerabilities that have driven lawmakers to consider banning the company's products outright.
  • Rather than rely on corporate statements alone, DJI commissioned OnDefend, an American cybersecurity firm, to examine its systems and found none of the suspected risks present.
  • The company is now using those findings as ammunition in its active appeal against FCC restrictions, betting that independent technical evidence can move a debate that politics alone has not resolved.
  • The outcome remains uncertain — the FCC review continues, and the political climate around Chinese technology companies in the U.S. shows little sign of softening.

DJI has released the findings of what it calls its most comprehensive independent security review to date, conducted by the American cybersecurity firm OnDefend. The audit examined the specific concerns that have driven regulatory pressure against the company: whether its drones transmit data outside U.S. borders, whether they are vulnerable to unauthorized remote access, whether they emit unexplained radio frequencies, and whether the supply chain has been tampered with. On each count, OnDefend found no evidence of wrongdoing.

The release is deliberate in its timing and framing. DJI is currently appealing regulatory actions brought by the FCC, and the company argues that independent technical scrutiny — not corporate promises — is what sound policy decisions require. By making the audit public, DJI is attempting to shift the terms of a debate that has largely been driven by geopolitical suspicion of its Chinese ownership rather than demonstrated technical evidence of harm.

Whether the audit will change minds in Washington is an open question. The political environment surrounding Chinese technology firms remains charged, and regulatory processes move on their own timelines. But DJI's strategy is now clear: to contest its restrictions not only through legal appeals and lobbying, but by opening its systems to outside experts and letting the findings speak for themselves.

DJI has published the results of what it describes as its most thorough independent security examination of its drone systems. The assessment was conducted by OnDefend, a cybersecurity firm based in the United States, and the company says the findings offer reassurance on several fronts that have drawn regulatory scrutiny.

According to DJI's account of the audit, OnDefend found no evidence that data was being transmitted outside U.S. borders, no signs of unauthorized remote access to the systems, no unexplained radio frequency emissions, and no tampering within the supply chain. These are the specific concerns that have animated regulatory debate around the company's products, particularly as federal authorities have weighed whether restrictions on DJI operations are warranted.

The company frames the audit as part of a broader commitment to transparency. In a statement accompanying the release, DJI argues that independent technical scrutiny and openness about how its systems work are necessary ingredients for sound policy decisions. The company says it hopes the OnDefend findings will carry weight as the Federal Communications Commission continues to review its case—DJI is currently appealing regulatory actions against it.

The timing is significant. DJI has faced mounting pressure from U.S. regulators and lawmakers who worry that the company's Chinese ownership creates national security risks, particularly around data collection and potential surveillance capabilities. By commissioning an independent audit and releasing the results publicly, DJI is attempting to address those concerns head-on with technical evidence rather than corporate assurances alone.

The company has committed to continuing what it calls open and constructive engagement with relevant authorities. Whether the OnDefend audit will meaningfully shift the regulatory calculus remains to be seen. The FCC's review process is ongoing, and the political environment around Chinese technology companies in the United States remains contentious. But DJI's move signals that the company intends to fight its regulatory battles not just through appeals and lobbying, but by inviting outside experts to examine its systems and publishing what they find.

Independent scrutiny and technical transparency are essential to informed policymaking
— DJI statement
La Conversación del Hearth Otra perspectiva de la historia
Inventor

Why does DJI need an independent audit at all? Why not just tell regulators what they want to know?

Model

Because regulators don't trust the company's word. When a Chinese firm says "we're not stealing your data," Washington hears a claim, not proof. An independent auditor from the U.S. carries more weight.

Inventor

So OnDefend looked at the actual code and hardware?

Model

That's the idea. They examined the Air 3S and Matrice 4E drones for the specific things regulators worry about—data flowing overseas, hidden remote access, unexplained signals, compromised parts. They found none of it.

Inventor

But couldn't DJI have just hired a friendly auditor who would give them a clean bill of health?

Model

Possibly. That's why the credibility of OnDefend itself matters. If they're known as rigorous and independent, the findings carry weight. If they're seen as a rubber stamp, nobody cares.

Inventor

What happens next?

Model

The FCC keeps reviewing. DJI keeps appealing. This audit is ammunition in that fight—evidence to show regulators that the company's systems are clean. Whether it changes policy depends on whether regulators believe the audit or think the threat is political, not technical.

Quieres la nota completa? Lee el original en Newsshooter ↗
Contáctanos FAQ