Key Takeaways
- Hesai Technology, a Shanghai‑based lidar maker, supplies low‑cost, high‑performance sensors used in autonomous vehicles, robotics, airport monitoring, and agricultural equipment.
- In January 2024 the U.S. Department of Defense blacklisted Hesai as a Chinese military entity, barring it from Pentagon contracts but not prohibiting commercial sales in the United States.
- Hesai’s CEO David Li denies the allegations, arguing there is insufficient evidence that the company poses a national‑security threat or can transmit data to the Chinese government.
- Despite the blacklist, Hesai’s market reach is expanding through partnerships with Nvidia, Zoox, Waabi, Kodiak, Nuro, and Agtonomy, and its sensors are deployed at JFK Airport and in autonomous lawn‑mowers.
- Security experts warn that Chinese‑made lidar could become a backdoor for Beijing to harvest precise spatial data or disrupt critical infrastructure, citing concerns about government oversight and potential firmware manipulation.
- Academic research demonstrates that lidar sensors can be spoofed with malware to create phantom objects or erase real ones, and a 2024 firmware update error caused all Hesai units to fail on Feb 29, highlighting vulnerability to software flaws.
- Hesai’s sensors have passed third‑party cybersecurity and safety tests (TÜV Rheinland, Dekra) and its U.S. partners claim they implement strict data‑isolation protocols, though once hardware leaves the factory the company cannot control its end‑use.
- Aggressive pricing—reducing unit cost from >$10,000 to under $200—has given Hesai roughly one‑third of the global automotive lidar market, a advantage critics attribute to Chinese state subsidies, which Hesai says are standard industry incentives.
- Legal battles continue: Hesai sued the DoD over the blacklist designation, lost in 2025, and is appealing; meanwhile, congressional proposals seek to phase out Chinese lidar over national‑security fears.
Overview of Hesai and Its Role in Physical AI
Hesai Technology has become a cornerstone of the emerging “physical artificial intelligence” ecosystem, manufacturing lidar sensors that enable machines to perceive their surroundings in three dimensions. These sensors fire laser pulses, measure the return time, and stitch thousands of measurements into point clouds that guide self‑driving cars, robotic dogs, autonomous lawn‑mowers, and airport‑traffic‑monitoring systems. By delivering high‑resolution perception at a fraction of the legacy cost, Hesai has helped accelerate the deployment of autonomous technologies across transportation, logistics, agriculture, and public‑infrastructure sectors.
The Pentagon Blacklist and Hesai’s Defense
In January 2024 the U.S. Department of Defense added Hesai to its Entity List, labeling the company a Chinese military entity and thereby disqualifying it from receiving Pentagon contracts. The blacklist does not forbid commercial sales, so Hesai can still sell its lidar to U.S. firms for non‑military uses. CEO David Li contested the designation in his first extended interview with CNBC, asserting that the evidence presented by the DoD is insufficient and illogical, and expressing frustration over what he views as an unfounded stigma.
Growing Partnerships: Nvidia and Autonomous Ecosystem
Despite the federal blacklist, Hesai’s commercial footprint is expanding. An expanded partnership with Nvidia positions Hesai’s sensors as an optional component in Nvidia’s DRIVE Hyperion autonomous‑vehicle platform, which aims to power a future where every car and truck is autonomous. Hesai’s lidar also appears in systems built by Amazon’s robotaxi venture Zoox, trucking firms Waabi and Kodiak, autonomous‑vehicle technology company Nuro, and agricultural automation firm Agtonomy. At New York’s JFK International Airport, the sensors monitor passenger and traffic flow at security checkpoints and gate entrances, illustrating their broad civilian adoption.
National‑Security Concerns Raised by Experts
Security analysts warn that the proliferation of Chinese‑made lidar could expose U.S. critical infrastructure to cyber‑threats. Craig Singleton, senior director for the China Program at the Foundation for Defense of Democracies, argues that the precise, high‑resolution data generated by lidar could be harvested by Beijing to map utilities, defense sites, or airports, or to disrupt operations through data manipulation. He notes that U.S. Securities and Exchange Commission filings require Hesai to disclose that the Chinese government retains significant oversight and could intervene in its operations at any time, raising the prospect of compelled data sharing.
How Lidar Works and the Weaponization Threat
Lidar—short for “light detection and ranging”—operates by emitting laser pulses and timing their return after striking objects, thereby constructing a detailed 3‑D point cloud of the environment. Because the data is exceptionally precise, experts caution that a hostile actor who gains access to or manipulates this stream could create false obstacles (phantom vehicles or pedestrians) or erase real ones, potentially causing autonomous systems to make dangerous navigation errors. Such capabilities could be weaponized against defense nodes, power grids, or transportation corridors if the sensors were compromised.
Data Access and Chinese Government Influence
Li maintains that Hesai’s sensors lack onboard memory and therefore cannot store or transmit data; he insists that data handling falls to the system integrators. However, Singleton contends that Chinese law obliges companies to comply with government requests for information, making it plausible that Hesai could be compelled to share whatever data its sensors collect, even if the hardware itself does not retain it. The concern is amplified by Hesai’s disclosure of preferential tax rates, subsidies, and borrowing terms granted by Chinese authorities, which critics view as evidence of state support that could be leveraged for strategic ends.
Firmware Vulnerabilities and Past Incidents
Academic research has demonstrated that lidar units are susceptible to malware injection either at the factory or via firmware updates. In a Duke University lab, professor Miroslav Pajic showed how inserting malicious code could generate a phantom person in a sensor’s point cloud or delete real objects, illustrating how an autonomous vehicle could be tricked into ignoring a pedestrian or obstacle. In the real world, a 2024 firmware update from Hesai failed to account for the leap year, causing all its lidar sensors to stop functioning on February 29. Li attributed the outage to an overlooked coding bug, emphasized that Hesai publishes its firmware as open source for public scrutiny, and noted the issue was resolved within 24 hours. He also argued that autonomous platforms typically fuse lidar with cameras and radar, allowing fallback mechanisms when one sensor fails.
Independent Testing and Partner Data‑Protection Measures
To address safety and cybersecurity doubts, Hesai’s sensors have earned certifications from TÜV Rheinland and Dekra, which evaluate product safety, performance, and cybersecurity resilience. U.S. partners such as Kodiak assert that their architectures prevent Hesai from accessing any sensor‑derived data, while Waabi emphasizes rigorous vetting of third‑party hardware and robust data‑security protocols. Nonetheless, once the hardware leaves Hesai’s factory, the company cannot physically restrict where it ends up or how it is used, a limitation acknowledged by Li.
Cost Leadership and Market‑Shaping Pricing
Hesai’s rapid growth is largely driven by its aggressive pricing strategy. The company reports reducing lidar unit costs from more than $10,000 to under $200, a price point that undercuts U.S. competitors like Aeva, whose automotive sensors remain in the “few hundreds of dollars” range. A 2025 Yole Group analysis attributes Hesai’s dominance to a combination of low cost, massive scale, and Chinese government support, while Western firms struggle with higher expenses and slower adoption. Li denies receiving special subsidies, characterizing the tax incentives and R&D deductions highlighted in Hesai’s SEC filing as standard measures available to all qualifying Chinese enterprises.
Allegations of Military‑Civil Fusion Ties and Ongoing Litigation
The Pentagon’s blacklist rests partly on the claim that Hesai participates in China’s military‑civil fusion strategy, citing the company’s location in Shanghai’s Jiading district—a zone linked to fusion initiatives—and its supplier relationship with China Electronics Technology Group Corporation (CETC), a state‑owned defense conglomerate. Li rejects the geographic argument, noting that many American firms also operate in Jiading, and asserts that none of the parts sourced from CETC have military applications. He also points to contractual prohibitions that bar customers from using Hesai lidar in military scenarios, although he admits that post‑sale end‑use cannot be physically controlled. Hesai sued the DoD over the designation in May 2024, lost the case in 2025, and is now pursuing an appeal.
Academic Attack Demonstrations and Congressional Proposals
Beyond the leap‑year glitch, academic work continues to illuminate lidar’s attack surface. Pajic’s lab has shown both the creation of false objects and the removal of real ones from a sensor’s view, underscoring how malware‑induced data manipulation could lead to autonomous‑system failures. On Capitol Hill, lawmakers such as Rep. John Moolenaar (R‑MI), chairman of the House Select Committee on the Chinese Communist Party, have introduced legislation seeking to phase out Chinese‑made lidar from U.S. markets, warning that the technology could serve as a conduit for espionage or sabotage. Moolenaar remains skeptical of Li’s assurances about data storage, citing past instances of hidden backdoors in Chinese‑origin robotics and communications gear.
Future Outlook: Balancing Innovation, Security, and Regulation
Hesai sits at a crossroads where its technological advances and cost advantages meet rising geopolitical scrutiny. The company’s partnerships with Nvidia and other major players suggest continued market penetration, while ongoing litigation, academic vulnerability research, and congressional proposals signal that regulatory pressure may intensify. Whether the United States will adopt a “rip‑and‑replace” approach similar to that applied to Huawei and DJI, or develop stricter vetting and transparency requirements for lidar suppliers, remains uncertain. For now, Hesai’s narrative hinges on its ability to prove that its sensors are benign, secure, and free from illicit government influence—a challenge that will shape the trajectory of physical AI in the years ahead.