DEDICATED RISK REVIEW · BRAZIL · ARTICLE 02

The drone costs less. What does repeating a solar inspection cost?

Purchase evidence, thermal data and continuity: what to check before commissioning a photovoltaic inspection workflow.

1 October 2026 · v1.0.0 · Leia em português

Research for procurement decisions. The historical case, current commercial listing and risk scenarios are different evidence. We found no substantiated leak in this case. Chinese manufacture alone does not establish compromise; lower cost requires a like-for-like comparison.

01 · A checkable price, an incomplete scope

M-FLY's Brazilian listing for Matrice 4T, code 2667, displays R$54,899.99 upfront or 12 instalments of R$5,586.53. Those payments total R$67,038.36—R$12,138.37 more. This is a published offer, not a received quote or purchase. Its four-business-day indication does not establish delivery to the buyer's address. Checked 1 October 2026. [S2]

Separate in the quotationStill to confirm
EquipmentExact kit contents, batteries, controller, versions, serial number and condition.
Brazilian deliveryPostcode-specific freight, invoice, applicable taxes, availability and quote validity.
OperationsAnalysis licences, storage, training, maintenance, insurance and responsibilities.
WarrantyLocal coverage, exclusions, repair turnaround and possible replacement equipment.
ComparisonSame plant, coverage, deliverables and acceptance criteria—not just two price tags.

The 4T price is not the price of the historical configuration below. We obtained neither a current M210 RTK V2/XT2 proposal nor a complete inspection budget. Naming a shop does not establish a platform partnership or qualification for a particular procurement.

02 · The historical case explains the work

In January 2021, DJI published a Brazilian Drone Visual case using M210 RTK V2 and Zenmuse XT2 for visual and thermal capture, followed by FLIR Tools analysis and reporting. Reports supported dispatching teams to investigate, repair or clean modules. This is a manufacturer-published case, not an independent audit. [S1]

Drone Visual's own Brazilian training programme provides another perspective: it covers thermography, measurement parameters and located reports. It establishes the service scope advertised by the provider, not independent validation of the 2021 results. [S3]

The purchased workflow should produce an actionable maintenance decision. Our proposed criterion: link each observation to the right module, preserve originals, record capture conditions and enable an accountable person to accept or challenge the diagnosis.

03 · Where could information leave unnoticed?

A proposed assessment map, not the actual network of Drone Visual or a client.

StageMaterial and path to inspectDecision question
CaptureImages, coordinates, timestamps, cards and controllerWho can copy the originals?
TransferUSB, network, field laptop and automatic backupDoes anything sync to a personal account?
AnalysisSoftware, radiometric files and external providersIs processing local? Which services receive files?
DeliveryPDFs, maps, links and attachmentsCan the client restrict access and track versions?
Repair and disposalDevices, logs and media sent to third partiesIs removal or retention verifiable?

Flying without internet does not prevent later transfer from the analyst's computer. This is a workflow hypothesis to verify, not an allegation of hidden product transmission.

04 · Credible worst cases have prerequisites

These are engineering inferences. Probability and loss amounts: UNKNOWN. The conditions may also occur in equipment from other countries.

ScenarioRequired conditionPossible costControl or verification
High impact: plant data exposureSensitive files reach an unauthorised account or recipientExposure of locations and defects; investigation, containment and contractual responseApproved repositories, least privilege and revocation tests using synthetic data
High impact: altered reportResults or identifiers are changed without detectionCrews sent to the wrong module, untreated defects and repeat inspectionPreserved originals, change history and independent review of critical findings
Insufficient diagnostic dataCapture or parameters fail contracted acceptance criteriaA repeat visit, a new capture window and delayed maintenance; not necessarily a cyber incidentAn accepted sample before full survey, with required parameters recorded
High impact: lost archiveA computer or account is compromised without a recoverable copyRebuilding history and losing comparisons between surveysSeparate backup and documented restoration test
Unavailable software or supportA necessary tool fails without usable exportsFile conversion, retraining and repeat processingExport and independent-read tests before contracting

Plant imagery does not automatically grant inverter control. Remote sabotage would require demonstrated connectivity, privileges and further exploitation conditions. We do not assume those connections.

05 · Available controls and their limits

DJI describes Pilot 2 privacy controls and network modes, including Local Data Mode. This is a manufacturer statement; verify availability and behaviour in the selected configuration. We do not automatically apply that documentation to the historical M210/XT2 setup, and it does not govern the entire post-processing workflow. [S4]

The January 2024 CISA/FBI guidance discusses transfer, update and connectivity risks in Chinese-manufactured UAS. It is a general government warning, not evidence of compromise at these plants or a Brazilian procurement rule. [S5]

Review capture, import, analysis, sharing and maintenance. Testing only flight omits the computer producing the report. A local-processing requirement also needs checks of backups, telemetry, updates and support access.

06 · Ownership cost and market stress

Planning horizon: October 2026 to September 2027. These are scenarios, not confirmed forecasts.

ConditionVerifiable signalResponse
Baseline: supply and support continueValid quotations and actual maintenance performanceBudget normal operations
Adverse: costs or turnaround increaseWritten price, licence or repair-term revisionsCompare spares, rental and outsourced service
Severe: essential support endsDated notice for the specific product or versionTest migration, archive readability and operational alternatives

Include acquisition or rental, financing, delivery, preparation, staffing, software, data review, security, maintenance and supplier exit. Do not add mutually exclusive scenarios as if all will happen. We estimate neither financial returns nor generation losses without plant data and verified maintenance actions.

07 · Buy, outsource or improve the existing workflow?

If the problem is uncontrolled sharing, start with permissions and file handling. If thermal quality or repeatability is lacking, request a sample and technical review. Replacing a component without evidence of compatibility and need does not automatically fix the whole process.

Compare in-house and contracted service against identical coverage, quality, deadlines, ownership of originals, retention, third-party access and rework conditions. More expensive equipment can still fail the requirement; cheaper equipment may fit if it produces the required outcome with verifiable controls.

Recommended next test: a small area with previously assessed defects, authorised data and written criteria. Check module association, diagnostic disagreements, review time, exports and restoration. This is a validation plan, not a test already performed.

08 · Start with model, use and problem

Provide your current model or “not yet purchased”, intended use and problem: thermal quality, files, costs, maintenance or replacement. Then record quantity, versions and desired deliverable. Do not send sensitive maps, complete flight paths, credentials or internal data in an initial message.

Open the existing enquiry page The current form does not automatically populate article context and is not localised in Portuguese. Include UAV-RISK-BR-SOLAR-002. The link does not promise an appointed specialist, certification or a quote from the named seller.

Corrections: v1.0.0 / EN-section / passage / proposed correction / evidence URL. Previous article: Japanese rail inspection.

Fontes / Sources

Consultadas / Checked: 2026-10-01. No independent configuration security test was performed. Não foi realizado teste independente de segurança da configuração. No sponsorship or commission arrangement is claimed; the platform may receive enquiries. Não se afirma patrocínio ou comissão; a plataforma pode receber consultas.

  1. [S1] DJI — Brazil solar inspection case (2021-01-05)
    English · manufacturer case report / relato do fabricante
  2. [S2] M-FLY — Matrice 4T, code 2667
    Português · seller listing / oferta publicada; not a binding project quotation
  3. [S3] Drone Visual — solar inspection training
    Português · service provider statement / declaração do prestador
  4. [S4] DJI — Enterprise privacy controls
    English · manufacturer control documentation; version applicability requires verification
  5. [S5] CISA / FBI — Chinese-Manufactured UAS (2024-01-17)
    English · general government guidance; not a model-specific incident

Related: Japan power-line inspection in 2021 (historical case)