DJI uses U.S. cyber audit as counterweight to FCC ban

DJI has chosen the most concrete counterargument available: a hardware and security audit. According to the report from Tom's Hardware, U.S. cybersecurity firm OnDefend examined DJI drones and found no malware, no backdoors, and no major vulnerabilities. For the Shenzhen-based manufacturer, that matters because the U.S. debate is no longer only about whether its drones are capable products. It is about whether they should be allowed to remain in the market at all.

The regulatory setting is hostile. DJI has been under sustained U.S. security scrutiny, and the FCC sits at the center of debates over communications equipment and potential restrictions. In that environment, a technical audit is not just a public-relations asset. It is an attempt to move the argument into a more testable layer: what was actually found in the device, the firmware, the communications paths, and the behavior of the system.

That does not settle the case. Any audit commissioned by the company being examined will be read carefully, even when the work is performed by a U.S. security firm. But a finding of no malware and no backdoors narrows the room for broad claims that cannot be tied to specific hardware evidence. If a regulator wants to justify a ban, the argument has to carry more weight than general suspicion about country of origin or market dominance.

For the drone industry, this is bigger than one corporate defense. DJI has shaped the civilian drone market for years, from film production to inspections, emergency response, and mapping. A U.S. ban would therefore reach far beyond one brand. It would raise questions about replacement suppliers, equipment costs, availability, and the standards used to prove that an aerial robot is secure enough for public or professional use.

The legal dimension raises the stakes further. The source report ties the dispute to a $1.56 billion legal battle. In that setting, a security audit becomes an evidentiary tool: not a verdict, but a useful technical document. DJI can show that it allowed external analysis, while critics can still ask for a broader sample of models, repeatable testing, and deeper visibility into the supply chain.

The important conclusion is not that trust has automatically been restored. The conclusion is that the debate has to become more precise. If the problem is malware, show the malware. If the problem is firmware architecture, show the risky mechanism. If the problem is geopolitical exposure, say that directly and separate it from technical claims. OnDefend’s finding does not erase U.S. security concerns, but it raises the evidentiary bar.

For DJI drone users, especially professional operators, the audit is a useful near-term signal. For regulators, it is a push to define restrictions with more precision. And for competitors, it is a reminder that the drone market will not be won only through camera specs and flight performance, but through demonstrable security discipline. More context on the manufacturer is available through DJI’s official site, while the broader regulatory picture belongs in public proceedings and documents from the FCC.