For an off-the-shelf drone to be added to the Blue UAS list, it must pass rigorous testing and cyber security evaluations.