For most of the history of guided munitions, the safe-and-arm device was something nobody thought about. It was a small assembly buried inside a shell or a missile, built once, certified once, and trusted to work. The FPV drone changed that.
When a first-person-view quadcopter became the most effective precision weapon of the war in Ukraine, it also became the platform that showed how much of munition safety had relied on conditions that no longer existed. The warhead was now strapped to a cheap, unstable airframe, assembled by a soldier in a trench, and flown by an operator who could lose control at any moment. Suddenly, the question of how a charge decides to detonate, and how it decides to stay safe until it should, needed a real answer.
RSI Europe’s answer is the RSI ESAD-L1, a low-voltage electronic safe-and-arm device built specifically for drone-delivered munitions. To understand what it solves, it helps to start with the problem.
How a drone-delivered charge works
A drone-delivered charge is a chain of components, and Linas Pupelis, product manager for the ESAD at RSI Europe, explains what that means in practice.
“You have several links in a chain,” Pupelis says. “The initiation electronics, the detonator, the explosive charge itself, and of course the drone as the delivery platform. Each link has to play its part under specific conditions, while safely performing together as a complete system. “
That last part is where all the difficulty lives. Getting a charge to detonate is simple. Getting it to detonate only at the right moment, while staying completely inert during handling, transport, and flight, is one of the harder problems in weapons design.
To fire when required, the system needs a clear, verified command signal. In the RSI ESAD-L1, that means checking every safety condition and confirming a valid signal between the control unit and the initiation module. The signal has to be recognised as genuine before the electronics will let current reach the detonator and initiate the explosion.
To stay safe at all other times, the system has to hold against three types of threat at once: stray radio signals, interference, and electronic warfare; physical shock from drops or knocks during handling and mounting; and any attempt to activate it without the proper authorisation sequence. Protection runs across several layers, combining a secure authentication layer, physical safeties, and a defined arming sequence that only the operator can complete.
The core principle is simple to state, even if it is hard to build: any failure in the system must result in no detonation. Safety is always the starting position. International fuzing standards reflect the same logic, requiring at least two independent safety mechanisms drawing on separate environmental inputs before a munition can arm, with at least one of those mechanisms sensing conditions only after the weapon has actually launched. The RSI ESAD-L1 is designed to certain provisions of MIL-STD-1316F and STANAG 4187, the design safety standard written for exactly this class of low-voltage electronic fuzing system.
What soldiers improvised, and what it cost them
None of that existed when Ukrainian soldiers first turned FPV drones into strike weapons. Their early solutions were exactly what wartime improvisation produces: fast, cheap, and often dangerous to the people using them.
The most common method was straightforward. Soldiers took soviet-era anti-tank warheads from existing stocks, most often the PG-7VL round from the RPG-7, and wired them directly into the piezoelectric nose fuze. The only safeguard against accidental detonation was a plastic pin, pulled out by hand just before the drone took off. From that moment, the system was live and would respond to any impact at all, whether that was the intended target, a friendly position, or the ground at the launch site.
The results were predictable. Casualties happened not only in the target area, but also on the ground at launch sites and in fighting positions, where a dropped drone or an accidental knock set off the charge. The first seconds of flight were extremely dangerous, since an unstable drone, a gust of wind, or a control error could bring the payload down on friendly positions.
This is the part that does not appear in most product descriptions, and it is the reason the ESAD category matters. Getting the charge to go off was never the problem. Everything before the target was.
The first engineering response
RSI Europe’s initial answer was the RISE-1 cRX, a compact electronic initiator designed for drone use. Pupelis describes it honestly as a first-generation product: a real improvement over field improvisation, and a foundation to build on.
The cRX added a power-on safety timer, operator-controlled arming, and two ways to trigger detonation — manual command or time and impact detection. Compared with what came before it, this was a significant step forward in both safety and operator control. It was also built to meet minimum NATO safety standards, something the improvised solutions, designed purely for speed and availability, were never able to do.
“The improvised solutions were created under wartime conditions, with speed and availability as the priority,” Pupelis says. “Meeting NATO safety requirements was not the goal of Ukrainian fighters at that time. The cRX was designed under different conditions and with different philosophy in mind.”
Like any first product, the cRX also showed what it could not yet do. Working with different types of explosive charge was limited, and it lacked a proximity initiation mode that later turned out to be important. Those gaps shaped what came next.
Enter the ESAD
The RSI ESAD-L1 was built from scratch, addressing earlier limitations across several areas at once. The safety architecture is the most visible example, and this time it is a defined, five-step sequence rather than a pair of precautions.
Arming moves through five stages in order: a mechanical interlock, a safe separation timer, an airborne gate, manual arming by the operator, and a final activation gate. The system will only allow arming once it has confirmed that the drone is genuinely in the air and that every other condition in the sequence has been cleared: the mechanical safety pin pulled at takeoff, the separation timer completed, the flight-environment check satisfied. Accidental initiation at the launch site or in the first moments of flight becomes physically impossible, not just unlikely. That is the layered, multi-condition logic that fuzing standards require.
Alongside the safety improvements, the system’s capabilities also expanded. The RSI ESAD-L1 connects directly to the drone, which means the operator can control it from the pilot’s console without needing separate devices or extra steps. Four initiation modes, covering impact, proximity, timer, and manual command, allow it to work effectively with different types of charge and adapt to different tactical situations.
Those modes are not interchangeable conveniences. They map to distinct target problems. Impact suits a direct strike on contact. A programmable timer, adjustable from two to 180 minutes, supports delayed initiation with no operator present. Proximity initiation is what makes the system effective against armour, because an Explosively Formed Penetrator reaches peak penetration at a specific standoff distance, and a range-triggered detonation lets the charge fire at that distance instead of on contact. One device covers the strike drone, the demolition task, and the anti-armour engagement, without swapping hardware.
The system was also designed to work independently of any particular drone or munition manufacturer. It mounts through dual Picatinny rails and connects through a standard drone flight-controller interface, which means it fits a wide range of airframes with minimal engineering effort and no proprietary hardware. That simplifies integration into existing setups and reduces the logistics and training burden. In a market where most solutions are tied to specific platforms, this flexibility is a thoroughly considered choice.
What changes for the soldier
The practical difference, Pupelis says, is most visible in how a mission is prepared, not in what the specifications say.
With earlier systems, the drone and charge had to be assembled at the launch position, in the open. The soldier worked in an exposed location for however long the process took. The RSI ESAD-L1 changes that: the system can be put together in a covered position, a trench or a building, and then carried to the launch point ready to go. The safety lanyard connects to the pin at the moment of launch. The time the soldier spends in the open drops to the minimum. That shift changes the risk profile of the entire operation.
The second benefit is accuracy of use. With multiple initiation options, the operator can choose the right trigger for the right target, which improves the chance of achieving the intended effect.
The third benefit is less often mentioned, and it comes in two parts. The RSI ESAD-L1 can disarm a charge, and it can self-destruct one. If a mission is called off, the system can be safely deactivated, the drone recovered, and both used again. Where recovery is not possible, the self-destruct function removes the hazard rather than leaving a live charge in the field. Treating a charge as something recoverable rather than disposable reduces waste, lowers stock pressure, and makes the logistics of sustained operations more manageable. That is increasingly relevant as European forces think seriously about what high-tempo drone warfare actually demands from their supply chains.
Built for what the battlefield actually demands
The RSI ESAD-L1 reflects three years of lessons from Ukraine: charges that went off on the ground, operators who did not come back, missions aborted because there was no safe way to stand down. Every safety layer and initiation option in the system traces back to a specific failure that happened in a specific trench.
That history shaped the priorities in ways a procurement brief on its own would not have. Soldier survivability at the launch site, flexibility across charge types and platforms, the ability to recover a charge rather than lose it – these came from watching what actually went wrong in the field, then building against it.
As FPV strike systems scale up across European forces, the safe-and-arm device stops being a small detail buried in the spec sheet. It is the part that determines whether the system is safe enough to use the way units actually need to use it.